CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-4262 LOW · 2.4 svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink… Apache
- CVE-2014-3304 MEDIUM · 5.0 The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka… Cisco
- CVE-2014-3303 MEDIUM · 4.0 The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information… Cisco
- CVE-2014-2975 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via the user_id… Silver-peak
- CVE-2014-2974 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that… Silver-peak
- CVE-2013-4840 HIGH · 7.8 Niet-gespecificeerde kwetsbaarheid in HP en H3C VPN Firewall Module-producten SECPATH1000FE vóór 5.20.R3177 en SECBLADEFW vóór 5.20.R3177 stelt externe aanvallers in staat om een denial of… H3c Hp
- CVE-2014-5113 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the (1)… Visualware
- CVE-2014-5112 HIGH · 7.5 maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter. Netfortris
- CVE-2014-5111 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to (1)… Netfortris
- CVE-2014-5110 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the id_nodo parameter. Netfortris
- CVE-2014-5109 HIGH · 7.5 SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action. Netfortris
- CVE-2014-5108 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in single_pagesdownload_file.php in beton5 vóór 5.6.3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de HTTP… Concrete5 Concretecms
- CVE-2014-5107 MEDIUM · 5.0 concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to (1) system/basics/editor.php, (2) system/view.php, (3) system/environment/file_storage_locations.php, (4) system/mail/importers.php, (5)… Concrete5 Concretecms
- CVE-2014-5106 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Invision Power IP.Board (ook bekend als IPB of Power Board) 3.4.x tot 3.4.6 stelt externe aanvallers in staat om willekeurig… Invisioncommunity
- CVE-2014-5105 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in ol-commerce 2.1.1 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) a_country parameter… Ol-commerce Project
- CVE-2014-5104 HIGH · 7.5 Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) a_country parameter in a process action to… Ol-commerce Project
- CVE-2014-4726 HIGH · 7.5 Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors. Mailpoet
- CVE-2014-4725 HIGH · 7.5 De MailPoet-nieuwsbrieven (wysija-nieuwsbrieven) plug-in vóór 2.6.7 voor WordPress stelt externe aanvallers in staat om authenticatie te omzeilen en willekeurige PHP-code uit te voeren door een… Mailpoet
- CVE-2014-4971 HIGH · 7.2 Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and… Microsoft
- CVE-2014-4857 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in… Gurock
- CVE-2014-4748 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML… Ibm
- CVE-2014-4747 LOW · 2.1 The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by leveraging access to an… Ibm
- CVE-2014-2966 MEDIUM · 5.0 De ISO-8859-1-encoder in Resin Pro vóór 4.0.40 voert Unicode-transformaties niet goed uit, waardoor externe aanvallers beoogde tekstbeperkingen kunnen omzeilen via vervaardigde tekens, zoals aangetoond door… Caucho
- CVE-2014-2626 HIGH · 9.4 Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute… Hp
- CVE-2014-2625 HIGH · 8.5 Directory traversal-kwetsbaarheid in de storedNtxFile-functie in HP Network Virtualization 8.6 (ook bekend als Shunra Network Virtualization) stelt externe aanvallers in staat om willekeurige bestanden te… Hp
- CVE-2014-4979 HIGH · 9.3 Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in… Apple
- CVE-2014-4858 HIGH · 7.5 Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)… Sabreairlinesolutions
- CVE-2014-3328 MEDIUM · 5.0 The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka… Cisco
- CVE-2014-3326 MEDIUM · 6.5 SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified… Cisco
- CVE-2014-3324 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject… Cisco
- CVE-2014-3305 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in het webframework in Cisco WebEx Meetings Server 1.5(.1.131) en eerder stelt externe aanvallers in staat om de authenticatie van… Cisco
- CVE-2014-3301 MEDIUM · 5.0 The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned… Cisco
- CVE-2014-3071 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML… Ibm
- CVE-2014-2363 HIGH · 10.0 Morpho Itemiser 3 8.17 heeft hardgecodeerde administratieve inloggegevens, waardoor aanvallers op afstand gemakkelijker toegang kunnen krijgen via een inlogverzoek. Morpho
- CVE-2014-5103 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the j_username… Zohocorp
- CVE-2014-5102 HIGH · 7.5 SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items. Vbulletin
- CVE-2014-5101 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) TPL_name, (2) TPL_nick, (3)… Webidsupport
- CVE-2014-5100 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) add a… Omeka
- CVE-2014-5027 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via… Reviewboard
- CVE-2014-2227 MEDIUM · 6.0 The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application,… Ui
- CVE-2014-5024 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or… Sonicwall
- CVE-2014-5015 MEDIUM · 5.0 bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP… Eterna Netbsd
- CVE-2014-4927 HIGH · 7.8 Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial… Acme Dlink Netgear
- CVE-2014-4910 MEDIUM · 4.6 Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the… X
- CVE-2014-4736 HIGH · 7.5 SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process. Blogengine
- CVE-2014-4686 MEDIUM · 6.8 The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote… Siemens
- CVE-2014-4685 MEDIUM · 4.6 Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. Siemens
- CVE-2014-4684 MEDIUM · 6.0 The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a… Siemens
- CVE-2014-4683 MEDIUM · 4.9 The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a… Siemens
- CVE-2014-4682 MEDIUM · 5.0 De WebNavigator-server in Siemens SIMATIC WinCC vóór 7.3, zoals gebruikt in PCS7 en andere producten, stelt externe aanvallers in staat om gevoelige informatie te verkrijgen… Siemens