CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5090 MEDIUM · 6.5 admin/options/logs.php in Status2k stelt externe geverifieerde beheerders in staat om willekeurige opdrachten uit te voeren via shell-metakarakters in het veld Locatie in Logboeken toevoegen in… Status2k
- CVE-2014-5089 HIGH · 7.5 SQL-injectiekwetsbaarheid in admin/options/logs.php in Status2k stelt externe geverifieerde beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de logparameter. Status2k
- CVE-2014-5088 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php. Status2k
- CVE-2014-5082 HIGH · 7.5 Meerdere kwetsbaarheden voor SQL-injectie in admin/admin.php in Sphider 1.3.6 en eerder, Sphider Pro en Sphider-plus stellen externe aanvallers in staat om willekeurige SQL-opdrachten uit te… Sphider
- CVE-2014-3560 HIGH · 7.9 NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that… Canonical Redhat Samba
- CVE-2013-4159 HIGH · 7.5 ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in… Ctdb Project Opensuse Mageia
- CVE-2014-5177 LOW · 1.2 libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document… Redhat Opensuse
- CVE-2014-0179 LOW · 1.9 libvirt 0.7.5 tot 1.2.x vóór 1.2.5 stelt lokale gebruikers in staat om een denial of service (lees blok en hang) te veroorzaken via een vervaardigd… Redhat Opensuse
- CVE-2013-5758 HIGH · 9.0 cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G stelt op afstand geverifieerde gebruikers in staat om willekeurige opdrachten uit te voeren door de systeemmethode in de hoofdtekst… Yealink
- CVE-2013-5757 MEDIUM · 4.0 Absolute padtraversale kwetsbaarheid in Yealink VoIP Phone SIP-T38G stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te lezen via een volledige padnaam in… Yealink
- CVE-2013-5756 MEDIUM · 4.0 Directory traversal kwetsbaarheid in Yealink VoIP Phone SIP-T38G stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te lezen via een .. (dot dot)… Yealink
- CVE-2014-5165 MEDIUM · 5.0 The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers… Wireshark
- CVE-2014-5164 MEDIUM · 5.0 The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used,… Wireshark
- CVE-2014-5163 MEDIUM · 5.0 De APN-decoderingsfunctionaliteit in (1) epan/dissectors/packet-gtp.c en (2) epan/dissectors/packet-gsm_a_gm.c in de GTP- en GSM Management-dissectoren in Wireshark 1.10.x vóór 1.10.9 initialiseert een bepaalde buffer niet volledig,… Wireshark
- CVE-2014-5162 MEDIUM · 5.0 De functie read_new_line in wiretap/catapult_dct2000.c in de Catapult DCT2000 dissector in Wireshark 1.10.x voor 1.10.9 ontdoet 'n' - en 'r' -tekens niet goed, waardoor aanvallers… Wireshark
- CVE-2014-5161 MEDIUM · 5.0 The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip 'n' characters, which allows remote attackers to… Wireshark
- CVE-2014-5160 MEDIUM · 6.4 Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091… Hp
- CVE-2014-5077 HIGH · 7.1 The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service… Linux Suse Redhat Canonical
- CVE-2014-5045 MEDIUM · 6.2 De mountpoint_last-functie in fs/namei.c in de Linux-kernel vóór 3.15.8 handhaaft niet correct een bepaalde referentietelling tijdens pogingen om de umount-systeemaanroep te gebruiken in combinatie met… Linux Redhat
- CVE-2014-3534 HIGH · 7.2 arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users… Linux Debian
- CVE-2014-0972 HIGH · 7.2 The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does… Codeaurora
- CVE-2014-3302 MEDIUM · 5.8 user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain… Cisco
- CVE-2014-3009 LOW · 3.5 The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management… Ibm
- CVE-2014-2627 MEDIUM · 5.2 Niet-gespecificeerde kwetsbaarheid in HP NonStop NetBatch G06.14 tot en met G 06.32.01, H06 tot en met H06.28 en J06 tot en met J 06.17.01 stelt… Hp
- CVE-2014-5176 MEDIUM · 6.0 SAP FI Manager Self-Service heeft een hardgecodeerde gebruikersnaam, waardoor aanvallers op afstand gemakkelijker toegang kunnen krijgen via niet-gespecificeerde vectoren. Sap
- CVE-2014-5175 HIGH · 7.5 De servlet Licentiemeting in SAP Solution Manager 7.1 stelt externe aanvallers in staat om authenticatie te omzeilen via niet-gespecificeerde vectoren, gerelateerd aan een verb sabotageaanval… Sap
- CVE-2014-5174 LOW · 3.5 The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to… Sap
- CVE-2014-5173 MEDIUM · 5.0 SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once… Sap
- CVE-2014-5172 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de XS Administration Tools in SAP HANA stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Sap
- CVE-2014-5171 LOW · 2.9 SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain… Sap
- CVE-2014-3554 MEDIUM · 6.8 Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a… Libndp
- CVE-2014-3488 MEDIUM · 5.0 The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message. Netty
- CVE-2012-6651 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. (dot dot) in… Vitamin Plugin Project
- CVE-2014-5117 MEDIUM · 5.8 Tor vóór 0.2.4.23 en 0.2.5 vóór 0.2.5.6-alpha onderhoudt een circuit nadat een inkomende RELAY_early-cel door een client is ontvangen, wat het voor aanvallers op afstand… Torproject
- CVE-2014-2356 MEDIUM · 4.3 Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a… Innominate
- CVE-2014-3025 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management… Ibm
- CVE-2014-0948 MEDIUM · 6.0 Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute… Ibm
- CVE-2014-0947 MEDIUM · 6.0 Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update… Ibm
- CVE-2014-0915 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management… Ibm
- CVE-2014-0914 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and… Ibm
- CVE-2014-3897 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Homepage Decorator PerlMailer 3.10 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Homepage Decorator Perlmailer Project
- CVE-2014-3896 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x before 3.9.10 Beta allow remote attackers to hijack the… Seeds
- CVE-2014-3895 MEDIUM · 6.4 De I-O DATA TS-WLCAM-camera met firmware 1.06 en eerder, TS-WLCAM/V-camera met firmware 1.06 en eerder, TS-WPTCAM-camera met firmware 1.08 en eerder, TS-PTCAM-camera met firmware 1.08… Iodata
- CVE-2014-3329 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de webservercomponent in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) en eerder stelt externe aanvallers in staat om willekeurig… Cisco
- CVE-2014-3057 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to… Ibm
- CVE-2014-3056 MEDIUM · 5.0 The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about… Ibm
- CVE-2014-3055 HIGH · 7.5 SQL-injectiekwetsbaarheid in de Unified Task List (UTL) Portlet voor IBM WebSphere Portal 7.x en 8.x tot en met 8.0.0.1 cf12 stelt EXTERNE aanvallers in staat… Ibm
- CVE-2014-3054 MEDIUM · 5.8 Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to… Ibm
- CVE-2014-3050 LOW · 3.5 IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users… Ibm
- CVE-2014-3026 LOW · 3.5 CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, allows remote… Ibm