CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3816 HIGH · 9.0 Juniper Junos 11.4 vóór 11.4R12, 12.1 vóór 12.1R11, 12.1X44 vóór 12.1X44-D35, 12.1X45 vóór 12.1X45-D30, 12.1X46 vóór 12.1X46-D20, 12.1X47 vóór 12.1X47-D10, 12.2 vóór 12.2R8-S2, 12.3 vóór… Juniper
- CVE-2014-3815 HIGH · 7.8 Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via… Juniper
- CVE-2013-6117 HIGH · 7.5 Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and… Dahuasecurity
- CVE-2014-4700 MEDIUM · 4.9 Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to… Citrix
- CVE-2014-4167 LOW · 3.5 The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4… Openstack Canonical
- CVE-2014-3992 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) entity parameter in an update… Dolibarr
- CVE-2014-3991 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) dol_use_jmobile, (2) dol_optimize_smallscreen,… Dolibarr
- CVE-2014-3503 MEDIUM · 5.0 Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a… Apache
- CVE-2014-3499 HIGH · 7.2 Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors. Docker Fedoraproject
- CVE-2014-3485 MEDIUM · 4.0 The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files… Redhat
- CVE-2014-0174 MEDIUM · 4.3 Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the… Redhat
- CVE-2014-4908 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching… Pnp4nagios
- CVE-2014-4907 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in share/pnp/application/views/kohana_error_page.php in PNP4Nagios vóór versie 0.6.22 stelt externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via een… Op5 Pnp4nagios
- CVE-2014-4856 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML…
- CVE-2014-4855 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related… Polylang Plugin Project
- CVE-2014-4854 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de WP Construction Mode plugin 1.8 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Smartcatdesign
- CVE-2014-4853 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name… Opendocman
- CVE-2014-4852 HIGH · 7.5 SQL-injectiekwetsbaarheid in admin/uploads.php in The Digital Craft AtomCMS, mogelijk 2.0, stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de id-parameter. Thedigitalcraft
- CVE-2014-4851 MEDIUM · 5.8 Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in… Foecms
- CVE-2014-4850 HIGH · 7.5 SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter. Foecms
- CVE-2014-4849 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote attackers to inject arbitrary web script or HTML via the (1) e or (2)… Foecms
- CVE-2014-4848 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Blogstand Banner (blogstand-smart-banner) plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the… Blogstand Banner Plugin Project
- CVE-2014-4847 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Random Banner plugin 1.1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the buffercode_RBanner_url_banner1… Buffercode
- CVE-2014-4846 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Meta Slider (ml-slider) plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the… Matchalabs
- CVE-2014-4845 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannerman_background parameter… Stillbreathing
- CVE-2014-4698 MEDIUM · 4.6 Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified… Php
- CVE-2014-4670 MEDIUM · 4.6 Use-after-free kwetsbaarheid in ext/spl/spl_dllist.c in de SPL-component in PHP tot en met 5.5.14 stelt contextafhankelijke aanvallers in staat om een denial of service te veroorzaken… Php
- CVE-2014-3888 HIGH · 8.3 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R 3.09.50 en eerder, CENTUM VP R 5.03.20 en eerder, Exaopc R… Yokogawa
- CVE-2014-3318 MEDIUM · 4.0 Directory traversal kwetsbaarheid in dna/viewfilecontents.do in de Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager stelt op afstand geverifieerde gebruikers in staat om… Cisco
- CVE-2014-3316 MEDIUM · 4.0 The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via… Cisco
- CVE-2014-3315 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web… Cisco
- CVE-2014-3311 MEDIUM · 5.1 Op heap gebaseerde bufferoverloop in de functie voor het delen van bestanden in WebEx Meetings Client in Cisco WebEx Meetings Server en WebEx Meeting Center… Cisco
- CVE-2014-3310 MEDIUM · 4.3 The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was… Cisco
- CVE-2014-2963 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in group/control_panel/manage in Liferay Portal 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE allow remote attackers to inject arbitrary web… Liferay
- CVE-2014-4744 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in osTicket vóór 1.9.2 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het (1) veld… Enhancesoft
- CVE-2014-4743 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in (1) search_ajax.tpl and (2) search_ajax_small.tpl in templates/default/tpl/module_search/ in the Search module (module_search) in Kajona before 4.5 allow remote attackers… Kajona
- CVE-2014-4742 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in system/class_link.php in the System module (module_system) in Kajona before 4.5 allows remote attackers to inject arbitrary web script or HTML… Kajona
- CVE-2014-4741 HIGH · 7.5 SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Artifectx
- CVE-2014-4194 HIGH · 7.5 SQL-injectiekwetsbaarheid in zero_transact_article.php in ZeroCMS 1.0 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de parameter article_id in een actie Reactie… Aas9
- CVE-2014-4022 LOW · 2.7 De alloc_DOMAIN_struct-functie in arch/arm/domain.c in Xen 4.4.x, wanneer deze op een ARM-platform wordt uitgevoerd, initialiseert de structuur met de subsidietabelpagina's voor een domein niet correct,… Xen
- CVE-2012-4988 HIGH · 9.3 Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary… Xnview
- CVE-2014-4699 MEDIUM · 6.9 The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case… Linux Debian Canonical
- CVE-2014-3891 MEDIUM · 6.8 Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response. Rimarts
- CVE-2014-3515 HIGH · 7.5 The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization,… Php Debian
- CVE-2014-3487 MEDIUM · 4.3 The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate… File Project Php Debian Opensuse
- CVE-2014-3480 MEDIUM · 6.5 The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not… File Project Php Debian Opensuse
- CVE-2014-3479 MEDIUM · 4.3 The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on… File Project Php Debian Opensuse
- CVE-2014-3478 MEDIUM · 6.5 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before… Christos Zoulas Php
- CVE-2014-3313 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de webinterface op Cisco Small Business SPA300- en SPA500-telefoons stelt externe aanvallers in staat om willekeurig webscript of HTML te… Cisco
- CVE-2014-3312 MEDIUM · 6.9 The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell… Cisco