CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3322 MEDIUM · 6.1 Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause… Cisco
- CVE-2014-3110 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden op Honeywell FALCON XLWeb Linux-controllerapparaten 2.04.01 en eerder en FALCON XLWEB XLWebExe-controllerapparaten 2.02.11 en eerder stellen externe aanvallers in staat… Honeywell
- CVE-2014-2971 LOW · 3.5 Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description… Micropact
- CVE-2014-2968 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to… Huawei
- CVE-2014-2717 HIGH · 7.6 Honeywell FALCON XLWeb Linux-controllerapparaten 2.04.01 en eerder en FALCON XLWeb XLWebExe-controllerapparaten 2.02.11 en eerder stellen externe aanvallers in staat om authenticatie te omzeilen en administratieve… Honeywell
- CVE-2014-2370 MEDIUM · 4.0 Cross-site scripting (XSS) -kwetsbaarheid in de webtoepassing op Omron NS5-, NS8-, NS10-, NS12- en NS15 HMI-terminals 8.1xx tot en met 8.68x stelt op afstand geverifieerde… Omron
- CVE-2014-2369 MEDIUM · 4.6 Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated… Omron
- CVE-2014-2362 HIGH · 7.8 OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules rely exclusively on a time value for entropy in key generation, which makes it easier… Oleumtech
- CVE-2014-2361 HIGH · 7.2 OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which… Oleumtech
- CVE-2014-2360 MEDIUM · 5.0 OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules allow remote attackers to execute arbitrary code via packets that report a high battery voltage. Oleumtech
- CVE-2014-1419 MEDIUM · 6.9 Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vectors. Canonical
- CVE-2014-0607 HIGH · 10.0 Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to execute arbitrary code by uploading and… Attachmate
- CVE-2014-4980 MEDIUM · 5.0 Met de/server/properties-bron in Tenable Web UI vóór 2.3.5 voor Nessus 5.2.3 tot en met 5.2.7 kunnen externe aanvallers gevoelige informatie verkrijgen via de tokenparameter. Tenable
- CVE-2014-4503 MEDIUM · 4.3 The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit)… Sgminer Project Cgminer Project
- CVE-2014-4502 HIGH · 10.0 Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have… Bfgminer Sgminer Project
- CVE-2014-4501 HIGH · 10.0 Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a… Sgminer Project Cgminer Project Bfgminer
- CVE-2014-3939 HIGH · 9.3 Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file. Autodesk
- CVE-2014-3938 HIGH · 9.3 Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which… Autodesk
- CVE-2014-3555 MEDIUM · 4.0 OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall… Openstack
- CVE-2014-3537 LOW · 1.2 De webinterface in CUPS vóór 1.7.4 stelt lokale gebruikers in de lp-groep in staat om willekeurige bestanden te lezen via een symlink-aanval op een bestand… Apple Canonical Fedoraproject
- CVE-2014-1561 MEDIUM · 5.8 Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of… Mozilla Oracle
- CVE-2014-1560 MEDIUM · 4.3 Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate… Mozilla
- CVE-2014-1559 MEDIUM · 4.3 Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate… Mozilla
- CVE-2014-1558 MEDIUM · 4.3 Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate… Mozilla
- CVE-2014-1557 HIGH · 9.3 The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle… Oracle Mozilla Debian
- CVE-2014-1556 HIGH · 9.3 Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed… Mozilla
- CVE-2014-1555 HIGH · 9.3 Use-after-free kwetsbaarheid in de nsDocLoader::OnProgress-functie in Mozilla Firefox vóór 31.0, Firefox ESR 24.x vóór 24.7 en Thunderbird vóór 24.7 stelt externe aanvallers in staat om… Mozilla
- CVE-2014-1552 MEDIUM · 5.8 Mozilla Firefox vóór 31.0 en Thunderbird vóór 31.0 implementeren het sandbox-attribuut van het IFRAME-ELEMENT niet correct, waardoor externe aanvallers de beoogde beperkingen op inhoud van… Mozilla
- CVE-2014-1551 HIGH · 10.0 Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers… Mozilla Microsoft
- CVE-2014-1550 HIGH · 10.0 Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a… Mozilla
- CVE-2014-1549 HIGH · 9.3 The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to… Mozilla
- CVE-2014-1548 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service… Mozilla
- CVE-2014-1547 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to… Mozilla
- CVE-2014-1544 HIGH · 10.0 Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before… Mozilla
- CVE-2014-4948 MEDIUM · 6.4 Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying… Citrix
- CVE-2014-4947 HIGH · 10.0 Bufferoverloop in de ondersteuning van de HVM grafische console in Citrix XenServer 6.2 Service Pack 1 en eerder heeft niet-gespecificeerde impact- en aanvalsvectoren. Citrix
- CVE-2014-3530 HIGH · 7.5 The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers… Redhat
- CVE-2014-3518 MEDIUM · 6.8 jmx-remoting.sar in JBoss Remoting, zoals gebruikt in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform… Redhat
- CVE-2014-5023 MEDIUM · 6.8 Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as… Gitlist
- CVE-2014-5022 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in het Ajax-systeem in Drupal 7.x vóór 7.29 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Drupal
- CVE-2014-5021 LOW · 2.1 Cross-site scripting (XSS) -kwetsbaarheid in de Form API in Drupal 6.x vóór 6.32 en mogelijk 7.x vóór 7.29 stelt op afstand geverifieerde gebruikers met de… Drupal
- CVE-2014-5020 MEDIUM · 4.9 The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to… Drupal
- CVE-2014-5019 MEDIUM · 5.0 The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of service via a crafted HTTP… Drupal
- CVE-2014-4911 MEDIUM · 5.0 The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors… Polarssl Debian
- CVE-2014-4511 HIGH · 7.5 Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a… Gitlist
- CVE-2014-4326 HIGH · 7.5 Elasticsearch Logstash 1.0.14 tot en met 1.4.x vóór 1.4.2 stelt aanvallers op afstand in staat om willekeurige opdrachten uit te voeren via een vervaardigde gebeurtenis… Elastic
- CVE-2014-2385 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or… Sophos
- CVE-2013-7392 HIGH · 7.5 Met Gitlist kunnen externe aanvallers willekeurige opdrachten uitvoeren via shell-metakarakters in een bestandsnaam naar Source/. Gitlist
- CVE-2014-5018 MEDIUM · 4.3 Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting (XSS) attacks via the… Limesurvey
- CVE-2014-5017 HIGH · 7.5 SQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to execute arbitrary SQL commands via the sidx parameter in… Limesurvey