CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5016 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in LimeSurvey 2.05+ Build 140618 allow remote attackers to inject arbitrary web script or HTML via (1) the pid attribute… Limesurvey
- CVE-2014-4960 HIGH · 7.5 Multiple SQL injection vulnerabilities in modelsgallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary… Joomlaboat
- CVE-2014-4734 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in e107_admin/db.php in e107 2.0 alpha2 and earlier allows remote attackers to inject arbitrary web script or HTML via the type… E107
- CVE-2014-4987 MEDIUM · 4.0 server_user_groups.php in phpMyAdmin 4.1.x vóór 4.1.14.2 en 4.2.x vóór 4.2.6 stelt op afstand geverifieerde gebruikers in staat om beoogde toegangsbeperkingen te omzeilen en de MySQL-gebruikerslijst… Opensuse Phpmyadmin
- CVE-2014-4986 LOW · 3.5 Meerdere cross-site scripting (XSS) -kwetsbaarheden in js/functions.js in phpMyAdmin 4.0.x vóór 4.0.10.1, 4.1.x vóór 4.1.14.2 en 4.2.x vóór 4.2.6 stellen op afstand geverifieerde gebruikers in… Phpmyadmin
- CVE-2014-4955 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated… Phpmyadmin
- CVE-2014-4954 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the PMA_getHtmlForActionLinks function in libraries/structure.lib.php in phpMyAdmin 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or… Phpmyadmin
- CVE-2014-4342 MEDIUM · 5.0 MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference,… Debian Mit Redhat
- CVE-2014-4341 MEDIUM · 5.0 MET MIT Kerberos 5 (ook bekend als krb5) vóór 1.12.2 kunnen externe aanvallers een denial of service (buffer over-read en applicatiecrash) veroorzaken door ongeldige tokens… Mit Redhat Debian Fedoraproject
- CVE-2014-3894 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an… Php Kobo
- CVE-2014-3892 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Nexa Meridian before 2014 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Nexatechnologies
- CVE-2014-3886 LOW · 2.6 Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified… Webmin
- CVE-2014-3885 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might… Webmin
- CVE-2014-3884 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap… Webmin
- CVE-2014-3523 MEDIUM · 5.0 Geheugenlek in de winnt_accept-functie in server/mpm/winnt/child.c in de WinNT MPM in de Apache HTTP-server 2.4.x vóór 2.4.10 op Windows, wanneer de standaard AcceptFilter is ingeschakeld,… Apache Microsoft
- CVE-2014-3162 MEDIUM · 5.0 Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Debian Google
- CVE-2014-3161 HIGH · 7.5 De WebMediaPlayerAndroid:: laadfunctie in content/renderer/media/android/webmediaplayer_android.cc in Google Chrome vóór 36.0.1985.122 op Android werkt niet goed samen met omleidingen, waardoor aanvallers op afstand het Same Origin-beleid… Google
- CVE-2014-3160 MEDIUM · 6.8 De ResourceFetcher::canRequest-functie in core/fetch/ResourceFetcher.cpp in Blink, zoals gebruikt in Google Chrome vóór 36.0.1985.125, beperkt subresourceverzoeken die zijn gekoppeld aan SVG-bestanden niet correct, waardoor externe aanvallers… Debian Google
- CVE-2014-3159 MEDIUM · 6.4 The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the… Google
- CVE-2014-1999 HIGH · 7.5 The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response. Fuelphp
- CVE-2014-1996 HIGH · 7.5 Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via… Cybozu
- CVE-2014-1995 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary… Cybozu
- CVE-2014-1994 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de kennisgevingenportlet in Cybozu Garoon 2.x en 3.x vóór 3.7 SP4 stelt op afstand geverifieerde gebruikers in staat om willekeurig… Cybozu
- CVE-2014-1993 MEDIUM · 4.0 The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Cybozu
- CVE-2014-1992 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de berichtenfunctionaliteit in Cybozu Garoon 3.1.x, 3.5.x en 3.7.x vóór 3.7 SP4 stelt op afstand geverifieerde gebruikers in staat om… Cybozu
- CVE-2014-1987 HIGH · 10.0 The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. Cybozu
- CVE-2014-1973 MEDIUM · 5.0 Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted… Nextapp
- CVE-2014-0231 MEDIUM · 5.0 De mod_cgid-module in de Apache HTTP-server vóór 2.4.10 heeft geen time-outmechanisme, waardoor externe aanvallers een denial of service (procesopknoping) kunnen veroorzaken via een verzoek aan… Apache
- CVE-2014-0226 MEDIUM · 6.8 Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow),… Apache Debian Redhat Oracle
- CVE-2014-0118 MEDIUM · 4.3 De deflate_in_filter-functie in mod_deflate.c in de mod_deflate-module in de Apache HTTP-server vóór 2.4.10, wanneer decompressie van het verzoeklichaam is ingeschakeld, stelt externe aanvallers in staat… Apache Debian Redhat
- CVE-2014-0117 MEDIUM · 4.3 The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of… Apache Apple
- CVE-2013-4352 MEDIUM · 4.3 The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP… Apache
- CVE-2014-4331 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter. Octavocms
- CVE-2014-4943 MEDIUM · 6.9 De PPPoL2TP-functie in net/l2tp/l2tp_ppp.c in de Linux-kernel tot en met versie 3.15.6 stelt lokale gebruikers in staat om privileges te verkrijgen door gebruik te maken… Linux Opensuse Suse Redhat
- CVE-2014-3533 LOW · 2.1 dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages… Debian Freedesktop Mageia Project Opensuse
- CVE-2014-3532 LOW · 2.1 dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus… Freedesktop Linux Opensuse Debian
- CVE-2014-3325 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Cisco Unified Customer Voice Portal (CVP) stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Cisco
- CVE-2014-2519 MEDIUM · 5.8 The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information… Emc
- CVE-2012-2682 MEDIUM · 5.0 Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service… Redhat
- CVE-2013-7391 MEDIUM · 5.0 The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to read restricted… Entity Api Project
- CVE-2013-4273 MEDIUM · 4.0 De Entity API-module 7.x-1.x vóór 7.x-1.2 voor Drupal beperkt de toegang tot node-opmerkingen niet correct, waardoor op afstand geverifieerde gebruikers de opmerkingen via niet-gespecificeerde vectoren… Entity Api Project
- CVE-2014-3064 MEDIUM · 6.3 Met de GDS-component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x en 11.x vóór 11.0 FP4 en InfoSphere Master Data Management Server voor… Ibm
- CVE-2014-3045 LOW · 2.1 IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p… Ibm
- CVE-2014-3043 MEDIUM · 6.5 IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account. Ibm
- CVE-2014-2368 HIGH · 7.5 The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. Advantech
- CVE-2014-2367 HIGH · 7.5 The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. Advantech
- CVE-2014-2366 HIGH · 9.0 upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code. Advantech
- CVE-2014-2365 MEDIUM · 6.5 Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors. Advantech
- CVE-2014-2364 HIGH · 7.5 Meerdere stackgebaseerde bufferoverlopen in Advantech WebAccess vóór 7.2 stellen externe aanvallers in staat om willekeurige code uit te voeren via een lange reeks in de… Advantech
- CVE-2014-0970 LOW · 3.5 Met de GDS-component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x en 11.x vóór 11.0 FP4 en InfoSphere Master Data Management Server voor… Ibm