CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1993 MEDIUM · 4.0 The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Cybozu
- CVE-2014-1992 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de berichtenfunctionaliteit in Cybozu Garoon 3.1.x, 3.5.x en 3.7.x vóór 3.7 SP4 stelt op afstand geverifieerde gebruikers in staat om… Cybozu
- CVE-2014-1987 HIGH · 10.0 The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. Cybozu
- CVE-2014-1973 MEDIUM · 5.0 Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted… Nextapp
- CVE-2014-0231 MEDIUM · 5.0 De mod_cgid-module in de Apache HTTP-server vóór 2.4.10 heeft geen time-outmechanisme, waardoor externe aanvallers een denial of service (procesopknoping) kunnen veroorzaken via een verzoek aan… Apache
- CVE-2014-0226 MEDIUM · 6.8 Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow),… Apache Debian Redhat Oracle
- CVE-2014-0118 MEDIUM · 4.3 De deflate_in_filter-functie in mod_deflate.c in de mod_deflate-module in de Apache HTTP-server vóór 2.4.10, wanneer decompressie van het verzoeklichaam is ingeschakeld, stelt externe aanvallers in staat… Apache Debian Redhat
- CVE-2014-0117 MEDIUM · 4.3 The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of… Apache Apple
- CVE-2013-4352 MEDIUM · 4.3 The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP… Apache
- CVE-2014-4331 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter. Octavocms
- CVE-2014-4943 MEDIUM · 6.9 De PPPoL2TP-functie in net/l2tp/l2tp_ppp.c in de Linux-kernel tot en met versie 3.15.6 stelt lokale gebruikers in staat om privileges te verkrijgen door gebruik te maken… Linux Opensuse Suse Redhat
- CVE-2014-3533 LOW · 2.1 dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages… Debian Freedesktop Mageia Project Opensuse
- CVE-2014-3532 LOW · 2.1 dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus… Freedesktop Linux Opensuse Debian
- CVE-2014-3325 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Cisco Unified Customer Voice Portal (CVP) stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Cisco
- CVE-2014-2519 MEDIUM · 5.8 The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information… Emc
- CVE-2012-2682 MEDIUM · 5.0 Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service… Redhat
- CVE-2013-7391 MEDIUM · 5.0 The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read restricted… Entity Api Project
- CVE-2013-4273 MEDIUM · 4.0 De Entity API-module 7.x-1.x vóór 7.x-1.2 voor Drupal beperkt de toegang tot node-opmerkingen niet correct, waardoor op afstand geverifieerde gebruikers de opmerkingen via niet-gespecificeerde vectoren… Entity Api Project
- CVE-2014-3064 MEDIUM · 6.3 Met de GDS-component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x en 11.x vóór 11.0 FP4 en InfoSphere Master Data Management Server voor… Ibm
- CVE-2014-3045 LOW · 2.1 IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p… Ibm
- CVE-2014-3043 MEDIUM · 6.5 IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account. Ibm
- CVE-2014-2368 HIGH · 7.5 The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. Advantech
- CVE-2014-2367 HIGH · 7.5 The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. Advantech
- CVE-2014-2366 HIGH · 9.0 upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code. Advantech
- CVE-2014-2365 MEDIUM · 6.5 Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors. Advantech
- CVE-2014-2364 HIGH · 7.5 Meerdere stackgebaseerde bufferoverlopen in Advantech WebAccess vóór 7.2 stellen externe aanvallers in staat om willekeurige code uit te voeren via een lange reeks in de… Advantech
- CVE-2014-0970 LOW · 3.5 Met de GDS-component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x en 11.x vóór 11.0 FP4 en InfoSphere Master Data Management Server voor… Ibm
- CVE-2014-0968 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere… Ibm
- CVE-2014-0967 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere… Ibm
- CVE-2014-3323 MEDIUM · 4.0 Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID… Cisco
- CVE-2014-3321 MEDIUM · 5.7 Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial… Cisco
- CVE-2014-3320 MEDIUM · 5.8 Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote… Cisco
- CVE-2014-3306 HIGH · 10.0 De webserver op Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825 en EPC3925 Wireless Residential Gateway-producten stelt externe aanvallers in staat om willekeurige code… Cisco
- CVE-2014-2623 HIGH · 10.0 Ongespecificeerde kwetsbaarheid in HP Storage Data Protector 8.x stelt externe aanvallers in staat om willekeurige code uit te voeren via onbekende vectoren. Hp
- CVE-2014-0957 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote attackers to inject arbitrary web script… Ibm
- CVE-2014-4271 MEDIUM · 5.0 Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent. Oracle
- CVE-2014-4270 MEDIUM · 4.0 Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related… Oracle
- CVE-2014-4269 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in de Hyperion Common Admin-component in Oracle Hyperion 11.1.2.2 en 11.1.2.3 stelt op afstand geverifieerde gebruikers in staat om de vertrouwelijkheid te beïnvloeden… Oracle
- CVE-2014-4268 MEDIUM · 5.0 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing. Oracle
- CVE-2014-4267 MEDIUM · 6.8 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and… Oracle
- CVE-2014-4266 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 7u60 en 8u5 stelt externe aanvallers in staat om de integriteit te beïnvloeden via onbekende vectoren met betrekking tot… Oracle
- CVE-2014-4265 MEDIUM · 5.0 Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment. Oracle
- CVE-2014-4264 MEDIUM · 5.0 Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect availability via unknown vectors related to Security. Oracle
- CVE-2014-4263 MEDIUM · 4.0 Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via… Oracle
- CVE-2014-4262 HIGH · 9.3 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 5.0u65, 6u75, 7u60 en 8u5 stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en beschikbaarheid te beïnvloeden via… Oracle
- CVE-2014-4261 MEDIUM · 6.9 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality,… Oracle
- CVE-2014-4260 MEDIUM · 5.5 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and… Oracle Debian Suse Mariadb
- CVE-2014-4258 MEDIUM · 6.5 Niet-gespecificeerde kwetsbaarheid in de MySQL Server-component in Oracle MySQL 5.5.37 en eerder en 5.6.17 en eerder stelt op afstand geverifieerde gebruikers in staat om de… Oracle Vmware Opensuse Project Debian
- CVE-2014-4257 HIGH · 7.1 Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related… Oracle
- CVE-2014-4256 MEDIUM · 5.8 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality and integrity… Oracle