CVE-database
125.650 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4056 HIGH · 9.3 Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4055 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-4052 HIGH · 9.3 Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4051 HIGH · 9.3 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4050 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2827 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-2826 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2825 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-2824 HIGH · 9.3 Met Microsoft Internet Explorer 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-2823 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2822 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2821 HIGH · 9.3 Met Microsoft Internet Explorer 8 en 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-2820 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-2819 MEDIUM · 6.8 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Microsoft
- CVE-2014-2818 HIGH · 9.3 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2816 HIGH · 9.3 Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse… Microsoft
- CVE-2014-2815 HIGH · 8.8 Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a… Microsoft
- CVE-2014-2811 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2810 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2808 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-2796 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2784 HIGH · 9.3 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2774 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1820 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in Master Data Services (MDS) van Microsoft SQL Server 2012 SP1 en 2014 op 64-bits platforms stelt externe aanvallers in staat… Microsoft
- CVE-2014-1819 HIGH · 7.2 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2014-1814 HIGH · 7.2 The Windows Installer in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2014-0318 HIGH · 7.2 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2014-0316 HIGH · 7.5 Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server… Microsoft
- CVE-2014-5201 HIGH · 7.5 SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a… Gallery Objects Project
- CVE-2014-5200 HIGH · 7.5 SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Fb Gorilla Project
- CVE-2014-5199 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in de WordPress File Upload plugin (wp-file-upload) vóór 2.4.2 voor WordPress stelt externe aanvallers in staat om de authenticatie van… Wordpress File Upload Project
- CVE-2014-5198 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Splunk Web in Splunk Enterprise 6.1.x vóór 6.1.3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Splunk
- CVE-2014-5197 MEDIUM · 4.0 Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read… Splunk
- CVE-2014-5196 MEDIUM · 4.3 Cross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers… Improved User Search In Backend Project
- CVE-2012-4241 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Microcart 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or (2) query… Microcart Project
- CVE-2011-2944 HIGH · 7.5 SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter. Megalab
- CVE-2011-2593 MEDIUM · 6.8 Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and… Citrix
- CVE-2013-7395 MEDIUM · 4.9 ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate attackers to modify device configuration… Zoll
- CVE-2007-6756 MEDIUM · 4.9 ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to… Zoll
- CVE-2014-3072 HIGH · 7.2 Niet-gespecificeerde kwetsbaarheid in de automatiseringsserver in IBM Security AppScan Source 8 t/m 8.0.0.2, 8.5 t/m 8.5.0.1, 8.6 t/m 8.6.0.2, 8.7 t/m 8.7.0.1, 8.8 en 9.0… Ibm
- CVE-2014-2629 MEDIUM · 4.0 HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file,… Hp
- CVE-2014-4760 MEDIUM · 5.8 Open redirect vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF28, 8.0.0 before 8.0.0.1 CF13, and 8.5.0… Ibm
- CVE-2014-4751 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1 en 8.0.0.3 stelt externe aanvallers in staat om willekeurige webscripts of HTML… Ibm
- CVE-2014-4746 MEDIUM · 5.0 IBM WebSphere Portal 8.0.0 vóór 8.0.0.1 CF13 en 8.5.0 tot en met CF01 biedt verschillende foutcodes voor firewall-verzoeken, afhankelijk van of de intranethost bestaat, waarmee… Ibm
- CVE-2014-3899 MEDIUM · 4.3 Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file. Gomlab
- CVE-2014-3102 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF28 and 8.0.0 before 8.0.0.1 CF13 allows remote authenticated users to inject arbitrary web… Ibm
- CVE-2014-2630 MEDIUM · 4.4 Ongespecificeerde kwetsbaarheid in HP Operations Agent 11.00, wanneer Glance wordt gebruikt, stelt lokale gebruikers in staat om privileges te verkrijgen via onbekende vectoren. Hp
- CVE-2014-0953 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in IBM WebSphere Portal 6.1.0.0 tot en met 6.1.0.6 CF27, 6.1.5.0 tot en met 6.1.5.3 CF27, 7.0.0 tot en met 7.0.0.2… Ibm
- CVE-2014-4757 LOW · 2.1 The Outlook Extension in IBM Content Collector 4.0.0.x before 4.0.0.0-ICC-OE-IF004 allows local users to bypass the intended Reviewer privilege requirement and read e-mail messages from… Ibm
- CVE-2014-3086 HIGH · 7.5 Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows… Ibm