CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4653 MEDIUM · 4.6 sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to… Linux Suse Canonical
- CVE-2014-4652 LOW · 1.9 Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allows… Linux Suse Canonical Redhat
- CVE-2014-4611 MEDIUM · 5.0 Integer-overloop in de LZ4-algoritme-implementatie, zoals gebruikt in Yann Collet LZ4 vóór r118 en in de lz4_uncompress-functie in lib/lz4/lz4_decompress.c in de Linux-kernel vóór 3.15.2, op 32-bits… Linux
- CVE-2014-4608 HIGH · 7.3 Meerdere integer overflows in de lzo1x_decompress_safe-functie in lib/lzo/lzo1x_decompress_safe.c in de LZO-decompressor in de Linux-kernel vóór 3.15.2 stellen contextafhankelijke aanvallers in staat om een denial of… Linux Opensuse Suse Canonical
- CVE-2014-4614 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Piwigo vóór 2.6.2 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor aanvragen die… Piwigo
- CVE-2014-4606 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in redirect_to_zeenshare.php in de ZeenShare plugin 1.0.1 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML… Zeenshare Project
- CVE-2014-4597 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or… Wp Social Invitations Project
- CVE-2014-4591 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in picasa_upload.php in the WP-Picasa-Image plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML… Wp Picasa Image Project
- CVE-2014-4581 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in facture.php in de WPCB-plug-in 2.4.8 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te… Wpcb Project
- CVE-2014-4571 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or… Vn-calendar Project
- CVE-2014-4565 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in vcc.js.php in de plug-in Verificatiecode voor opmerkingen 2.1.0 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig… Verification Code For Comments Project
- CVE-2014-4563 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in go.php in the URL Cloak & Encrypt (url-cloak-encrypt) plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary…
- CVE-2014-4555 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in fonts/font-form.php in the Style It plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Style It Project
- CVE-2014-4554 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML… Ss Downloads Project
- CVE-2014-4549 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary… Woocommerce Sagepay Direct Payment Gateway Project
- CVE-2014-4546 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in book_ajax.php van de Rezgo-plugin versie 1.4.2 en ouder voor WordPress stelt externe aanvallers in staat om willekeurige webscripts of HTML… Rezgo Project
- CVE-2014-4534 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in videoplayer/autoplay.php in de HTML5 Video Player met Playlist plugin 2.4.0 en eerder voor WordPress stellen externe aanvallers in staat… Html5 Video Player With Playlist Plugin Project Wordpress
- CVE-2014-3737 LOW · 2.6 Cross-site scripting (XSS) -kwetsbaarheid in templates/defaultheader.php in Lamp Design Storesprite vóór 7 - 19-06-14, bij gebruik van de vervolgkeuzelijst voor valutaselectie, stelt externe aanvallers in… Storesprite
- CVE-2014-4605 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in cal/test.php in de ZdStatistics (zdstats) plugin 2.0.1 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of… Zdstatistics Project
- CVE-2014-4604 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in instellingen/pwsettings.php in de Your Text Manager-plug-in 0.3.0 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of… Your-text-manager Project
- CVE-2014-4603 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in yupdates_application.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary…
- CVE-2014-4601 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in wu-ratepost.php in de Wu-Rating plugin 1.0 12319 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of… Wu-rating Project
- CVE-2014-4600 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in contact/edit.php in de WP Ultimate Email Marketer plugin 1.1.0 en eerder voor WordPress stellen externe aanvallers in staat om… Wp Ultimate Email Marketer Project Wordpress
- CVE-2014-4599 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in formulieren/search.php in de WP-Business Directory (wp-ttisbdir) plugin 1.0.2 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig… Wp-business Directory Project
- CVE-2014-4598 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in wp-tmkm-amazon-search.php in de wp-tmkm-amazon plugin 1.5b en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML… Wp-tmkm-amazon Project
- CVE-2014-4596 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or… Snapapp Project
- CVE-2014-4595 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de WP RESTful plugin 0.1 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML… Wp Restful Project
- CVE-2014-4594 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in index.php in de WordPress Responsive Preview-plug-in vóór 1.2 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML… Wordpress Responsive Preview Project
- CVE-2014-4593 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in wp-plugins-net/index.php in the WP Plugin Manager (wppm) plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web… Wp Plugin Manager Project
- CVE-2014-4590 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Wp Microblogs Project
- CVE-2014-4589 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in uploader.php in the WP Silverlight Media Player (wp-media-player) plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary… Wp Silverlight Media Player Project
- CVE-2014-4588 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in tpls/editmedia.php in de Hot Files: File Sharing and Download Manager (wphotfiles) plugin 1.0.0 en eerder voor WordPress stelt externe aanvallers…
- CVE-2014-4587 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML… Wp Guestmap Project
- CVE-2014-4582 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin/admin_show_dialogs.php in the WP Consultant plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Wp Consultant Project
- CVE-2014-4580 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in blipbot.ajax.php in the WP BlipBot plugin 3.0.9 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Wp Blipbot Project
- CVE-2014-4579 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in js/test.php in de Appointments Scheduler-plug-in 1.5 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML… Wp Appointments Schedules Project
- CVE-2014-4578 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script… Wp App Maker Project
- CVE-2014-4576 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script… Wordpress Social Login Project
- CVE-2014-4574 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Webengage Project
- CVE-2014-4573 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in frame-maker.php in the Walk Score plugin 0.5.5 and earlier for WordPress allow remote attackers to inject arbitrary web script… Walk Score Project
- CVE-2014-4572 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script… Votecount For Balatarin Project
- CVE-2014-4570 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML… Videowhisper
- CVE-2014-4568 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in posts/videowhisper/r_logout.php in de plug-in Video Posts Webcam Recorder 1.55.4 en eerder voor WordPress stelt aanvallers op afstand in staat om… Videowhisper
- CVE-2014-4566 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se - WordPress - Twitter" (verweise-wordpress-twitter) plugin 1.0.2 and earlier for WordPress allows remote attackers to inject… Verweise-wordpress-twitter Project
- CVE-2014-4560 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in includes/getTipo.php in de ToolPage-plug-in 1.6.1 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te… Toolpage Project
- CVE-2014-4557 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop) plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary… Jigoshop
- CVE-2014-4552 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in library/includes/payment/paypalexpress/DoDirectPayment.php in de Spotlight (spotlightyour) plugin 4.7 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of… Spotlightyour
- CVE-2014-4551 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Social Connect Project
- CVE-2014-4547 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in templates/default/index_ajax.php in de Rezgo Online Booking plugin vóór 1.8.2 voor WordPress stellen externe aanvallers in staat om willekeurig webscript… Rezgo
- CVE-2014-4543 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary… Pay Per Media Player Project