CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5407 MEDIUM · 4.1 Meerdere stack-gebaseerde bufferoverloopfouten in Schneider Electric VAMPSET 2.2.136 en eerdere versies stellen lokale gebruikers in staat een denial-of-service-aanval (toepassingsstop) te veroorzaken via een onjuist (1)… Schneider-electric
- CVE-2014-4763 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in Content Navigator in Content Engine in IBM FileNet Content Manager 5.2.x vóór 5.2.0.3-P8CPE-IF003 en Content Foundation 5.2.x vóór 5.2.0.3-P8CPE-IF003 stelt… Ibm
- CVE-2014-3796 MEDIUM · 5.0 VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows… Vmware
- CVE-2014-3617 MEDIUM · 4.0 Met de functie forum_print_latest_discussions in mod/forum/lib.php in Moodle via 2.4.11, 2.5.x vóór 2.5.8, 2.6.x vóór 2.6.5 en 2.7.x vóór 2.7.2 kunnen op afstand geverifieerde gebruikers… Moodle
- CVE-2014-3077 LOW · 2.1 IBM SONAS en System Storage Storwize V7000 Unified (ook bekend als V7000U) 1.3.x en 1.4.x vóór 1.4.3.4 slaan het chkauth-wachtwoord op in het auditlogboek, waarmee… Ibm
- CVE-2014-2377 MEDIUM · 5.0 Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag. Ecava
- CVE-2014-2376 HIGH · 7.5 SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands… Ecava
- CVE-2014-2375 HIGH · 8.3 Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain… Ecava
- CVE-2014-0993 MEDIUM · 6.8 Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers… Embarcadero
- CVE-2014-5888 MEDIUM · 5.4 The SLOTS: Bible Slots Free (aka com.topfreegames.topbibleslots) application 1.122 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Bibleslots
- CVE-2014-5887 MEDIUM · 5.4 De applicatie Yell Local Search (ook bekend als com.yell.launcher2) 4.2.1.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Yell
- CVE-2014-5886 MEDIUM · 5.4 The iVysilani ceske televize (aka cz.motion.ivysilani) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Ceskatelevize
- CVE-2014-5885 MEDIUM · 5.4 De Disaster Alert (ook bekend als disasterAlert.PDC) -applicatie 3.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Pdc
- CVE-2014-5884 MEDIUM · 5.4 De 1&1 Online Storage (ook bekend als de.einsundeins.smartdrive) applicatie 5.0.11 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… 1und1
- CVE-2014-5883 MEDIUM · 5.4 The 7-ELEVEN (aka ecowork.seven) application 2.08.000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… 7-eleven
- CVE-2014-6270 MEDIUM · 6.8 Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a… Squid-cache Oracle
- CVE-2014-5441 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in app/weergaven/lay-outs/application.html.haml in Fat Free CRM vóór 0.13.3 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Fatfreecrm
- CVE-2014-5440 HIGH · 7.5 SQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19.18 allows remote attackers to execute arbitrary SQL commands via the ct100%24CPHContent%24password parameter. Mpexsolutions
- CVE-2014-5259 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in cattranslate.php in de CatTranslate JQuery-plug-in in BlackCat CMS 1.0.3 en eerder stelt externe aanvallers in staat om willekeurig webscript of… Blackcat-cms
- CVE-2014-4735 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in MyWebSQL 3.4 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML via de tabelparameter in index.php te… Mywebsql
- CVE-2014-2009 MEDIUM · 5.0 De mPAY24-betalingsmodule vóór 1.6 voor PrestaShop stelt externe aanvallers in staat om inloggegevens, het installatiepad en andere gevoelige informatie te verkrijgen via een direct verzoek… Mpay24 Project
- CVE-2014-2008 HIGH · 7.5 SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID… Mpay24 Project
- CVE-2012-1556 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via… Synology
- CVE-2014-4811 HIGH · 7.5 IBM Storwize 3500-, 3700-, 5000- en 7000-apparaten en SAN Volume Controller 6.x en 7.x vóór 7.2.0.8 stellen externe aanvallers in staat om het administrator superuser-wachtwoord… Ibm
- CVE-2014-4792 MEDIUM · 4.0 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 through 8.0.0.1 CF13, and 8.5.0 before CF02 allows remote… Ibm
- CVE-2014-4762 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8.5.0 before CF02 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2014-3363 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or… Cisco
- CVE-2014-3362 HIGH · 7.8 Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via… Cisco
- CVE-2014-3342 MEDIUM · 4.0 The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383. Cisco
- CVE-2014-3092 MEDIUM · 5.0 IBM Jazz Team Server, zoals gebruikt in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x voor 3.0.1.6 iFix 3, 4.x voor 4.0.7 en 5.x voor… Ibm
- CVE-2013-4444 MEDIUM · 6.8 Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers… Apache
- CVE-2014-3985 MEDIUM · 5.0 De getHTTPResponse-functie in miniwget.c in MiniUPnP 1.9 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via vervaardigde headers die een… Miniupnp Project Opensuse
- CVE-2014-3740 LOW · 3.5 Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbitrary web script or HTML via the Summary field in a… Spiceworks
- CVE-2014-3609 MEDIUM · 5.0 HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted… Squid-cache
- CVE-2014-5882 MEDIUM · 5.4 The Homoo Ijiri (aka jp.co.applica) application 3.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Applica
- CVE-2014-5881 MEDIUM · 5.4 The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Yahoo
- CVE-2014-5879 MEDIUM · 5.4 De tvguide (ook bekend als kenneth.tvguide) -applicatie 1.9.14 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Tvguide Project
- CVE-2014-6043 MEDIUM · 6.5 ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users… Zohocorp
- CVE-2014-5460 MEDIUM · 6.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in de Tribulant Slideshow Gallery-plug-in vóór 1.4.7 voor WordPress stelt op afstand geverifieerde gebruikers in staat om willekeurige… Tribulant
- CVE-2014-5393 MEDIUM · 4.0 Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info… Sos
- CVE-2014-5391 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary… Sos
- CVE-2014-5129 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Avolve Software ProjectDox 8.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Avolvesoftware
- CVE-2014-6241 HIGH · 7.5 SQL-injectiekwetsbaarheid in de wt_directory-extensie vóór 1.4.1 voor TYPO3 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren. Wt Directory Project
- CVE-2014-6240 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Google Sitemap (weeaar_googlesitemap) extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML… Google Sitemap Project
- CVE-2014-6239 HIGH · 7.5 SQL injection vulnerability in the Address visualization with Google Maps (st_address_map) extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Address Visualization With Google Maps Project
- CVE-2014-6238 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Akronymmanager (aka SB Folderdownload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or… Akronymmanager Project
- CVE-2014-6237 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML… News Pack Project
- CVE-2014-6236 HIGH · 7.5 Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary scripts via vectors related to extension… Lumonet Php Include Project
- CVE-2014-6235 HIGH · 7.5 Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors. Kennziffer
- CVE-2014-6234 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Open Graph protocol (jh_opengraphprotocol) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML… Open Graph Protocol Project