CVE-database
125.722 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3563 HIGH · 7.2 Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in… Saltstack
- CVE-2013-6306 MEDIUM · 4.6 Niet-gespecificeerde kwetsbaarheid op IBM Power 7 Systems 740 vóór 740.70 01Ax740_121, 760 vóór 760.40 Ax760_078 en 770 vóór 770.30 01Ax770_062 stelt lokale gebruikers in staat… Ibm
- CVE-2014-5396 HIGH · 7.5 De webinterface in Schrack Technik microControl met firmware vóór 1.7.0 (937) heeft een hardgecodeerd wachtwoord van niet voor het "gebruikers" -account, waardoor aanvallers op afstand… Schrack
- CVE-2014-5368 MEDIUM · 5.0 Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers… Wp Content Source Control Project
- CVE-2014-5338 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web… Check Mk Project
- CVE-2014-5262 HIGH · 7.5 SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Cacti
- CVE-2014-5261 HIGH · 7.5 The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related… Cacti
- CVE-2014-5246 HIGH · 10.0 The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie… Tenda
- CVE-2014-5149 MEDIUM · 4.7 Bepaalde MMU-virtualisatiebewerkingen in Xen 4.2.x tot 4.4.x, bij het gebruik van schaduwpaginatabellen, zijn niet te voorkomen, waardoor lokale HVM-gast een denial of service (vcpu-consumptie) kan… Opensuse Xen
- CVE-2014-5146 MEDIUM · 4.7 Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local… Opensuse Xen
- CVE-2014-5122 MEDIUM · 5.8 Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an… Esri
- CVE-2014-5121 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Esri
- CVE-2014-5097 HIGH · 7.5 Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a… Freereprintables
- CVE-2014-4197 HIGH · 7.5 Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the (1) CARDS or… Bssys
- CVE-2014-3594 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators… Openstack Opensuse
- CVE-2014-3525 HIGH · 10.0 Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to… Apache
- CVE-2014-0232 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script… Apache
- CVE-2014-5274 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de view operations pagina in phpMyAdmin 4.1.x vóór 4.1.14.3 en 4.2.x vóór 4.2.7.1 stelt op afstand geverifieerde gebruikers in staat… Phpmyadmin Opensuse
- CVE-2014-5273 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web… Phpmyadmin
- CVE-2014-4767 MEDIUM · 6.5 IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users… Ibm
- CVE-2014-4764 HIGH · 7.1 IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause… Ibm
- CVE-2014-3436 MEDIUM · 5.0 Symantec Encryption Desktop 10.3.x voor 10.3.2 MP3, en Symantec PGP Desktop 10.0.x tot 10.2.x, stelt externe aanvallers in staat om een denial of service (CPU-… Symantec
- CVE-2014-3089 MEDIUM · 4.9 De RDS Java Client-bibliotheek in IBM Rational Directory Server (RDS) 5.1.1.x vóór 5.1.1.2 iFix004 en 5.2.x vóór 5.2.1 iFix003, en Rational Directory Administrator (RDA) 6.0… Ibm
- CVE-2014-3083 MEDIUM · 5.0 IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers… Ibm
- CVE-2014-3070 MEDIUM · 5.0 The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly… Ibm
- CVE-2014-3022 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) 7.0.x vóór 7.0.0.33, 8.0.x vóór 8.0.0.9 en 8.5.x vóór 8.5.5.3 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen… Ibm
- CVE-2014-0965 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted… Ibm
- CVE-2014-5385 MEDIUM · 5.0 com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess passwords via… Shopizer
- CVE-2010-5303 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject… Binarymoon
- CVE-2010-5302 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary… Binarymoon
- CVE-2009-5142 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject… Binarymoon Prothemedesign
- CVE-2014-5384 MEDIUM · 5.0 The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array… Freebsd Netbsd
- CVE-2014-3951 MEDIUM · 5.0 Met de HZ-module in de iconv-implementatie in FreeBSD 10.0 vóór p6 en NetBSD kunnen contextafhankelijke aanvallers een denial of service (NULL pointer dereference) veroorzaken via… Freebsd Netbsd
- CVE-2014-5383 MEDIUM · 6.5 SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Alienvault
- CVE-2014-5210 HIGH · 10.0 The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request,… Alienvault
- CVE-2014-5159 HIGH · 7.5 SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. Alienvault
- CVE-2014-5158 HIGH · 10.0 The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands… Alienvault
- CVE-2014-3577 MEDIUM · 5.8 org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the… Apache
- CVE-2014-3562 MEDIUM · 5.0 Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory. Fedoraproject Redhat
- CVE-2014-5382 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script… Schrack
- CVE-2014-4929 MEDIUM · 6.8 Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local… Owncloud
- CVE-2014-2524 LOW · 3.3 The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack… Mageia Gnu Opensuse Fedoraproject
- CVE-2014-4750 LOW · 2.9 IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials… Ibm
- CVE-2014-4749 MEDIUM · 4.3 IBM PowerVC 1.2.0 vóór FixPack3 maakt niet correct gebruik van het known_hosts-bestand, waarmee man-in-the-middle-aanvallers SSH-servers kunnen vervalsen via een willekeurige serversleutel. Ibm
- CVE-2014-4618 HIGH · 8.5 EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object. Emc
- CVE-2014-3514 HIGH · 7.5 activerecord/lib/active_record/relation/query_methods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism… Rubyonrails
- CVE-2014-3340 MEDIUM · 4.0 Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a… Cisco
- CVE-2014-3331 MEDIUM · 4.3 The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through… Cisco
- CVE-2014-2521 MEDIUM · 6.3 EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC… Emc
- CVE-2014-2520 MEDIUM · 6.3 EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which… Emc