CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2626 HIGH · 9.4 Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute… Hp
- CVE-2014-2625 HIGH · 8.5 Directory traversal-kwetsbaarheid in de storedNtxFile-functie in HP Network Virtualization 8.6 (ook bekend als Shunra Network Virtualization) stelt externe aanvallers in staat om willekeurige bestanden te… Hp
- CVE-2014-4979 HIGH · 9.3 Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in… Apple
- CVE-2014-4858 HIGH · 7.5 Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)… Sabreairlinesolutions
- CVE-2014-3328 MEDIUM · 5.0 The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka… Cisco
- CVE-2014-3326 MEDIUM · 6.5 SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified… Cisco
- CVE-2014-3324 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject… Cisco
- CVE-2014-3305 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in het webframework in Cisco WebEx Meetings Server 1.5(.1.131) en eerder stelt externe aanvallers in staat om de authenticatie van… Cisco
- CVE-2014-3301 MEDIUM · 5.0 The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned… Cisco
- CVE-2014-3071 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML… Ibm
- CVE-2014-2363 HIGH · 10.0 Morpho Itemiser 3 8.17 heeft hardgecodeerde administratieve inloggegevens, waardoor aanvallers op afstand gemakkelijker toegang kunnen krijgen via een inlogverzoek. Morpho
- CVE-2014-5103 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the j_username… Zohocorp
- CVE-2014-5102 HIGH · 7.5 SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items. Vbulletin
- CVE-2014-5101 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) TPL_name, (2) TPL_nick, (3)… Webidsupport
- CVE-2014-5100 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) add a… Omeka
- CVE-2014-5027 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via… Reviewboard
- CVE-2014-2227 MEDIUM · 6.0 The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application,… Ui
- CVE-2014-5024 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or… Sonicwall
- CVE-2014-5015 MEDIUM · 5.0 bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP… Eterna Netbsd
- CVE-2014-4927 HIGH · 7.8 Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial… Acme Dlink Netgear
- CVE-2014-4910 MEDIUM · 4.6 Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the… X
- CVE-2014-4736 HIGH · 7.5 SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process. Blogengine
- CVE-2014-4686 MEDIUM · 6.8 The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote… Siemens
- CVE-2014-4685 MEDIUM · 4.6 Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. Siemens
- CVE-2014-4684 MEDIUM · 6.0 The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a… Siemens
- CVE-2014-4683 MEDIUM · 4.9 The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a… Siemens
- CVE-2014-4682 MEDIUM · 5.0 De WebNavigator-server in Siemens SIMATIC WinCC vóór 7.3, zoals gebruikt in PCS7 en andere producten, stelt externe aanvallers in staat om gevoelige informatie te verkrijgen… Siemens
- CVE-2014-3322 MEDIUM · 6.1 Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause… Cisco
- CVE-2014-3110 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden op Honeywell FALCON XLWeb Linux-controllerapparaten 2.04.01 en eerder en FALCON XLWEB XLWebExe-controllerapparaten 2.02.11 en eerder stellen externe aanvallers in staat… Honeywell
- CVE-2014-2971 LOW · 3.5 Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description… Micropact
- CVE-2014-2968 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to… Huawei
- CVE-2014-2717 HIGH · 7.6 Honeywell FALCON XLWeb Linux-controllerapparaten 2.04.01 en eerder en FALCON XLWeb XLWebExe-controllerapparaten 2.02.11 en eerder stellen externe aanvallers in staat om authenticatie te omzeilen en administratieve… Honeywell
- CVE-2014-2370 MEDIUM · 4.0 Cross-site scripting (XSS) -kwetsbaarheid in de webtoepassing op Omron NS5-, NS8-, NS10-, NS12- en NS15 HMI-terminals 8.1xx tot en met 8.68x stelt op afstand geverifieerde… Omron
- CVE-2014-2369 MEDIUM · 4.6 Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated… Omron
- CVE-2014-2362 HIGH · 7.8 OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier… Oleumtech
- CVE-2014-2361 HIGH · 7.2 OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which… Oleumtech
- CVE-2014-2360 MEDIUM · 5.0 OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage. Oleumtech
- CVE-2014-1419 MEDIUM · 6.9 Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vectors. Canonical
- CVE-2014-0607 HIGH · 10.0 Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to execute arbitrary code by uploading and… Attachmate
- CVE-2014-4980 MEDIUM · 5.0 Met de/server/properties-bron in Tenable Web UI vóór 2.3.5 voor Nessus 5.2.3 tot en met 5.2.7 kunnen externe aanvallers gevoelige informatie verkrijgen via de tokenparameter. Tenable
- CVE-2014-4503 MEDIUM · 4.3 The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit)… Sgminer Project Cgminer Project
- CVE-2014-4502 HIGH · 10.0 Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have… Bfgminer Sgminer Project
- CVE-2014-4501 HIGH · 10.0 Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a… Sgminer Project Cgminer Project Bfgminer
- CVE-2014-3939 HIGH · 9.3 Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file. Autodesk
- CVE-2014-3938 HIGH · 9.3 Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which… Autodesk
- CVE-2014-3555 MEDIUM · 4.0 OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall… Openstack
- CVE-2014-3537 LOW · 1.2 De webinterface in CUPS vóór 1.7.4 stelt lokale gebruikers in de lp-groep in staat om willekeurige bestanden te lezen via een symlink-aanval op een bestand… Apple Canonical Fedoraproject
- CVE-2014-1561 MEDIUM · 5.8 Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of… Mozilla Oracle
- CVE-2014-1560 MEDIUM · 4.3 Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate… Mozilla
- CVE-2014-1559 MEDIUM · 4.3 Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate… Mozilla