CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5202 LOW · 3.5 Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via… Compfight Project
- CVE-2014-3901 HIGH · 7.8 Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet. Raritan
- CVE-2014-3339 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users… Cisco
- CVE-2014-3338 HIGH · 8.5 De CTIManager-module in Cisco Unified Communications Manager (CM) 10.0(1), wanneer eenmalige aanmelding is ingeschakeld, valideert Kerberos SSO-tokens niet correct, waardoor op afstand geverifieerde gebruikers bevoegdheden… Cisco
- CVE-2014-3251 MEDIUM · 4.4 The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the… Puppet Puppetlabs
- CVE-2014-1222 MEDIUM · 4.0 Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a .. (dot… Vtiger
- CVE-2014-3337 MEDIUM · 6.8 Met de SIP-implementatie in Cisco Unified Communications Manager (CM) 8.6(.2) en eerder kunnen op afstand geverifieerde gebruikers een denial of service (procescrash) veroorzaken via een… Cisco
- CVE-2014-0545 HIGH · 10.0 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows… Adobe Apple Microsoft Linux
- CVE-2014-0544 HIGH · 10.0 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows… Adobe Apple Microsoft Google
- CVE-2014-0543 HIGH · 10.0 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows… Adobe Apple Microsoft Linux
- CVE-2014-0542 HIGH · 10.0 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows… Adobe Google Apple Microsoft
- CVE-2014-0541 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.241 en 14.x vóór 14.0.0.176 op Windows en OS X en vóór 11.2.202.400 op Linux, Adobe AIR vóór 14.0.0.178 op Windows… Adobe Apple Microsoft Google
- CVE-2014-0540 HIGH · 10.0 Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows… Adobe Google Apple Microsoft
- CVE-2014-0538 HIGH · 10.0 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 13.0.0.241 en 14.x vóór 14.0.0.176 op Windows en OS X en vóór 11.2.202.400 op Linux, Adobe AIR vóór… Adobe Linux Google Apple
- CVE-2014-4067 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4064 MEDIUM · 4.9 De kernelmodusstuurprogramma's in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold… Microsoft
- CVE-2014-4063 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-4062 MEDIUM · 4.3 Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to… Microsoft
- CVE-2014-4061 MEDIUM · 6.8 Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands,… Microsoft
- CVE-2014-4060 MEDIUM · 6.8 Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and… Microsoft
- CVE-2014-4058 HIGH · 9.3 Met Microsoft Internet Explorer 9 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-4057 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-4056 HIGH · 9.3 Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4055 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-4052 HIGH · 9.3 Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4051 HIGH · 9.3 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4050 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2827 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-2826 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2825 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-2824 HIGH · 9.3 Met Microsoft Internet Explorer 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-2823 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2822 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2821 HIGH · 9.3 Met Microsoft Internet Explorer 8 en 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-2820 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-2819 MEDIUM · 6.8 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Microsoft
- CVE-2014-2818 HIGH · 9.3 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2816 HIGH · 9.3 Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse… Microsoft
- CVE-2014-2815 HIGH · 8.8 Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a… Microsoft
- CVE-2014-2811 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2810 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-2808 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-2796 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2784 HIGH · 9.3 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2774 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1820 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in Master Data Services (MDS) van Microsoft SQL Server 2012 SP1 en 2014 op 64-bits platforms stelt externe aanvallers in staat… Microsoft
- CVE-2014-1819 HIGH · 7.2 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2014-1814 HIGH · 7.2 The Windows Installer in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2014-0318 HIGH · 7.2 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2014-0316 HIGH · 7.5 Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server… Microsoft