CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3483 HIGH · 7.5 SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote… Rubyonrails
- CVE-2014-3482 HIGH · 7.5 SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to… Rubyonrails
- CVE-2014-3308 MEDIUM · 6.4 Cisco IOS XR op Trident-lijnkaarten in ASR 9000-apparaten mist een statische punthouder, waarmee externe aanvallers een denial of service (CPU-verbruik) kunnen veroorzaken door veel vervaardigde… Cisco
- CVE-2014-3300 HIGH · 7.5 Het BVSMWeb-portaal in het webframework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 implementeert niet correct toegangscontrole, waardoor externe… Cisco
- CVE-2014-3113 HIGH · 9.3 Meerdere bufferoverlopen in RealNetworks RealPlayer vóór 17.0.10.8 stellen externe aanvallers in staat om willekeurige code uit te voeren via een misvormd (1) elst- of (2)… Realnetworks
- CVE-2014-2969 HIGH · 8.3 NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware… Netgear
- CVE-2014-2967 HIGH · 10.0 Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the… Autodesk
- CVE-2014-2617 HIGH · 10.0 Ongespecificeerde kwetsbaarheid in HP Universal CMDB 10.01 en 10.10 stelt externe aanvallers in staat om willekeurige code uit te voeren of gevoelige informatie te verkrijgen… Hp
- CVE-2014-2616 HIGH · 7.5 Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2091. Hp
- CVE-2014-2615 HIGH · 7.5 Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2083. Hp
- CVE-2014-2614 HIGH · 7.5 Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140. Hp
- CVE-2014-2198 HIGH · 10.0 Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote… Cisco
- CVE-2014-2197 HIGH · 9.0 De beheer-GUI in het webframework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software vóór 8.1.4 implementeert niet correct toegangscontrole, waardoor op… Cisco
- CVE-2014-0894 LOW · 3.5 RICOS in IBM Algo Credit Limits (ook bekend als ACLM) 4.5.0 tot 4.7.0 vóór 4.7.0.03 FP5 in IBM Algorithmics stelt contextafhankelijke aanvallers in staat om… Ibm
- CVE-2014-0875 LOW · 3.5 Active Cloud Engine (ACE) in IBM Storwize V7000 Unified 1.3.0.0 through 1.4.3.x allows remote attackers to bypass intended ACL restrictions in opportunistic circumstances by leveraging… Ibm
- CVE-2014-0871 MEDIUM · 4.3 RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to obtain potentially sensitive Tomcat… Ibm
- CVE-2014-0870 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote… Ibm
- CVE-2014-0869 MEDIUM · 4.3 The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics does not require a… Ibm
- CVE-2014-0868 MEDIUM · 4.9 RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote… Ibm
- CVE-2014-0867 MEDIUM · 5.8 rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (ook bekend als ACLM) 4.5.0 tot 4.7.0 vóór 4.7.0.03 FP5 in IBM Algorithmics kunnen externe aanvallers cookies… Ibm
- CVE-2014-0866 MEDIUM · 4.3 RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext credentials over HTTP, which allows remote… Ibm
- CVE-2014-0865 MEDIUM · 4.9 RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote… Ibm
- CVE-2014-0864 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM… Ibm
- CVE-2014-0860 MEDIUM · 5.0 De firmware vóór 3.66E in IBM BladeCenter Advanced Management Module (AMM), de firmware vóór 1.43 in IBM Integrated Management Module (IMM) en de firmware vóór… Ibm
- CVE-2014-0602 HIGH · 7.5 Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote attackers to execute arbitrary code… Microfocus
- CVE-2013-5423 MEDIUM · 5.0 IBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors. Ibm
- CVE-2014-4721 LOW · 2.6 The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW,… Php Debian
- CVE-2014-4720 MEDIUM · 5.0 Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors…
- CVE-2014-4672 HIGH · 7.5 The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property. Yiiframework
- CVE-2014-4168 MEDIUM · 5.0 (1) iodined.c en (2) user.c in jodium vóór 0.7.0 stelt externe aanvallers in staat om authenticatie te omzeilen door de uitvoering voort te zetten nadat… Kryo
- CVE-2014-3497 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header. Openstack
- CVE-2014-0477 MEDIUM · 5.0 The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service…
- CVE-2014-0247 HIGH · 10.0 LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx. Fedoraproject Redhat Libreoffice Canonical
- CVE-2014-4719 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or… Usvn
- CVE-2014-4718 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that (1) add… Lunarcms
- CVE-2014-4717 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of… Sharethis
- CVE-2014-4716 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Thomson TWG87OUIR stelt externe aanvallers in staat om de authenticatie van niet-gespecificeerde slachtoffers te kapen voor verzoeken die wachtwoorden… Thomson
- CVE-2014-4195 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the article_id parameter. Aas9
- CVE-2014-4002 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the (1) drp_action parameter to cdef.php,… Opensuse Cacti
- CVE-2014-3920 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user… Kanboard
- CVE-2014-3857 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands… Kerio
- CVE-2014-3538 MEDIUM · 5.0 file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of… Christos Zoulas Php Debian
- CVE-2014-3149 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Invision Power IP.Board (ook bekend als IPB of Power Board) 3.3.x en 3.4.x tot 3.4.6, zoals gedownload vóór 20140424, of… Invisioncommunity Invisionpower
- CVE-2014-2965 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in auth-settings-x.php in SpamTitan vóór 6.04 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de sortdir-parameter. Spamtitan
- CVE-2014-0325 HIGH · 9.3 Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Microsoft
- CVE-2014-4715 MEDIUM · 5.0 Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not properly detect integer overflows, which allows context-dependent… Yann Collet
- CVE-2014-4667 MEDIUM · 5.0 The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause… Linux Suse Canonical Debian
- CVE-2014-4656 MEDIUM · 4.6 Meerdere integer-overflows in sound/core/control.c in de ALSA-besturingsimplementatie in de Linux-kernel vóór versie 3.15.2 stellen lokale gebruikers in staat een denial-of-service-aanval uit te voeren door misbruik… Linux Suse Canonical Redhat
- CVE-2014-4655 MEDIUM · 4.9 The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows… Linux Suse Canonical
- CVE-2014-4654 MEDIUM · 4.6 The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allows… Linux Suse Canonical