CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4977 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a… Sonicwall
- CVE-2014-4976 MEDIUM · 5.5 Dell SonicWall Scrutinizer 11.0.1 stelt externe, geauthenticeerde gebruikers in staat om gebruikerswachtwoorden te wijzigen via de gebruikers-ID in de parameter savePrefs in een wachtwoordwijzigingsverzoek aan… Sonicwall
- CVE-2014-4347 MEDIUM · 5.0 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) before 9.3-62.4 and 10.x before 10.1-126.12 allows attackers to obtain sensitive… Citrix
- CVE-2014-4346 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterprise Edition) 10.1 before… Citrix
- CVE-2014-4154 MEDIUM · 5.0 ZTE ZXV10 W300-router met firmware W300V1.0.0a_ZRD_LK slaat gevoelige informatie op onder de webroot met onvoldoende toegangscontrole, waardoor externe aanvallers het PPPoE/PPPoA-wachtwoord kunnen verkrijgen via een… Zte
- CVE-2014-4018 HIGH · 7.8 The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers… Zte
- CVE-2014-3777 MEDIUM · 5.0 Directory traversal-kwetsbaarheid in Reportico PHP Report Designer vóór 4.0 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) in… Reportico
- CVE-2014-3427 MEDIUM · 5.0 CRLF-injectiekwetsbaarheid in Yealink VoIP-telefoons met firmware 28.72.0.2 stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren en HTTP-responssplitsingsaanvallen uit te voeren via de modelparameter… Yealink
- CVE-2013-5755 HIGH · 10.0 config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account,… Yealink
- CVE-2014-2622 HIGH · 8.5 Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote authenticated users to… Hp
- CVE-2014-2621 HIGH · 7.8 Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain… Hp
- CVE-2014-2620 HIGH · 7.8 Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain… Hp
- CVE-2014-2619 HIGH · 7.8 Ongespecificeerde kwetsbaarheid in HP Intelligent Management Center (iMC) vóór 7.0 E02020P03 en Branch Intelligent Management System (BIMS) vóór 7.0 E0201P02 stelt externe aanvallers in staat… Hp
- CVE-2014-2618 HIGH · 7.8 Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain… Hp
- CVE-2014-2606 HIGH · 9.0 Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote authenticated users to gain privileges via unknown vectors. Hp
- CVE-2014-2605 MEDIUM · 5.0 Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote attackers to obtain sensitive information via unknown vectors. Hp
- CVE-2014-4965 MEDIUM · 4.3 Meerdere XSS-kwetsbaarheden (cross-site scripting) in Shopizer 1.1.5 en eerdere versies stellen externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via (1) de… Shopizer
- CVE-2014-4964 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication of users for requests that (1) modify… Shopizer
- CVE-2014-4963 MEDIUM · 6.8 Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter to shop/profile/register.action. Shopizer
- CVE-2014-4962 MEDIUM · 6.4 Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantity parameter, which… Shopizer
- CVE-2014-4663 MEDIUM · 6.8 TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter. Binarymoon
- CVE-2014-4031 MEDIUM · 4.0 The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain… Arubanetworks
- CVE-2014-3953 MEDIUM · 4.9 FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users… Freebsd
- CVE-2014-3952 MEDIUM · 4.9 FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data… Freebsd
- CVE-2014-3419 HIGH · 7.2 Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain… Infoblox
- CVE-2014-3418 HIGH · 10.0 config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter. Infoblox
- CVE-2014-1474 MEDIUM · 5.0 Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption)…
- CVE-2014-3319 MEDIUM · 6.8 Directory traversal kwetsbaarheid in de Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) stelt op afstand geverifieerde gebruikers in staat om willekeurige… Cisco
- CVE-2014-3317 MEDIUM · 5.5 Directory traversal kwetsbaarheid in de Multiple Analyzer in de Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) stelt op afstand geverifieerde gebruikers… Cisco
- CVE-2014-2955 HIGH · 10.0 Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher… Raritan
- CVE-2014-2951 HIGH · 10.0 Datum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the admin account, which makes it easier for remote attackers… Datumsystems
- CVE-2014-2950 HIGH · 7.8 Datum Systems SnIP op PSM-500- en PSM-4500-apparaten vereist geen authenticatie voor FTP-sessies, waardoor aanvallers op afstand gevoelige informatie kunnen verkrijgen via RETR-opdrachten. Datumsystems
- CVE-2014-2926 LOW · 1.7 kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of service (NULL pointer… Kaseya
- CVE-2013-6691 MEDIUM · 6.8 The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial of service (device… Cisco
- CVE-2013-5567 MEDIUM · 5.4 Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) en eerder, bij gebruik van een niet-ondersteunde configuratie met overlappende criteria voor filtering en inspectie, stelt externe aanvallers… Cisco
- CVE-2014-4946 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Horde Internet Mail Program (IMP) vóór 6.1.8, zoals gebruikt in Horde Groupware Webmail Edition vóór 5.1.5, staan externe aanvallers… Horde
- CVE-2014-4945 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers… Horde
- CVE-2014-4944 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via… Bannersky
- CVE-2014-4013 MEDIUM · 4.9 SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote… Arubanetworks
- CVE-2014-4942 MEDIUM · 5.0 The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo… Levelfourdevelopment
- CVE-2014-4941 MEDIUM · 5.0 Absolute kwetsbaarheid voor het doorkruisen van paden in Cross-RSS (wp-cross-rss) -plug-in 1.7 voor WordPress stelt externe aanvallers in staat om willekeurige bestanden te lezen via… Cross-rss Plugin Project
- CVE-2014-4940 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in… Tera Charts Plugin Project
- CVE-2014-4939 MEDIUM · 6.5 SQL-injectie kwetsbaarheid in de ENL Nieuwsbrief (enl-newsletter) plugin 1.0.1 voor WordPress stelt externe geverifieerde beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de… Enl Newsletter Plugin Project
- CVE-2014-4938 HIGH · 7.5 SQL-injectie kwetsbaarheid in de WP Rss Poster (wp-rss-poster) plugin 1.0.0 voor WordPress stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de… Wp Rss Poster Plugin Project
- CVE-2014-4937 MEDIUM · 5.0 Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file… Bookx Plugin Project
- CVE-2014-4738 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via… Fortinet
- CVE-2014-3822 MEDIUM · 5.4 Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices,… Juniper
- CVE-2014-3821 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in SRX Web Authentication (webauth) in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and… Juniper
- CVE-2014-3819 HIGH · 7.8 Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before… Juniper
- CVE-2014-3817 HIGH · 7.8 Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series devices, when NAT protocol… Juniper