CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4542 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in redirect.php in the Ooorl plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the url… Ooorl Project
- CVE-2014-4541 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in shortcode-generator/preview-shortcode-external.php in de OMFG Mobile Pro plugin 1.1.26 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript… Omfg Mobile Project
- CVE-2014-4540 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Oleggo Livestream Project
- CVE-2014-4537 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in inpage.tpl.php in de Keyword Strategy Internal Links plugin 2.0 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig… Keyword Strategy Internal Links Project
- CVE-2014-4532 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in templates/printAdminUsersList_Footer.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Garagesale Project
- CVE-2014-4531 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in main_page.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Game Tabs Project
- CVE-2014-4529 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in fpg_preview.php in the Flash Photo Gallery plugin 0.7 and earlier for WordPress allows remote attackers to inject arbitrary web script… Flash Photo Gallery Project Wordpress
- CVE-2014-4527 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordPress allow remote attackers to inject… Envialosimple
- CVE-2014-4526 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in callback.php in de efence-plug-in 1.3.2 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML… Efence Project
- CVE-2014-4524 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script… Wp Easy Post Types Project
- CVE-2014-4522 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in client-assist.php in de dsSearchAgent: WordPress Edition plugin 1.0-beta10 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript… Dssearchagent Project
- CVE-2014-3890 MEDIUM · 5.0 silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via a crafted IP packet, a different… Silex
- CVE-2014-3889 MEDIUM · 5.0 silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via crafted data in the Options field… Silex
- CVE-2014-4696 MEDIUM · 5.8 Meerdere open omleidingskwetsbaarheden in het Suricata-pakket vóór 1.0.6 voor pfSense tot 2.1.4 stellen externe aanvallers in staat om gebruikers om te leiden naar willekeurige websites… Netgate Pfsense
- CVE-2014-4695 MEDIUM · 5.8 Multiple open redirect vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to redirect users to arbitrary web sites and… Netgate Pfsense
- CVE-2014-4694 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script… Netgate Pfsense
- CVE-2014-4693 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in het Snort-pakket vóór 3.0.13 voor pfSense tot 2.1.4 stellen externe aanvallers in staat om willekeurig webscript of HTML te… Netgate Pfsense
- CVE-2014-4692 MEDIUM · 4.3 pfSense before 2.1.4, when HTTP is used, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier… Netgate
- CVE-2014-4691 MEDIUM · 6.8 Session fixation vulnerability in pfSense before 2.1.4 allows remote attackers to hijack web sessions via a firewall login cookie. Netgate
- CVE-2014-4690 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers to read arbitrary .info files via a crafted path in the pkg parameter… Netgate
- CVE-2014-4689 MEDIUM · 5.0 Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml… Netgate
- CVE-2014-4688 MEDIUM · 6.5 pfSense vóór 2.1.4 stelt op afstand geverifieerde gebruikers in staat om willekeurige opdrachten uit te voeren via (1) de hostnaamwaarde naar diag_dns.php in een actie… Netgate
- CVE-2014-4687 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the starttime0 parameter to… Netgate
- CVE-2014-3307 MEDIUM · 6.8 The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages,… Cisco
- CVE-2014-3298 MEDIUM · 4.0 Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain… Cisco
- CVE-2014-3297 MEDIUM · 4.0 Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to… Cisco
- CVE-2014-3074 HIGH · 7.2 The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges,… Ibm
- CVE-2014-3066 MEDIUM · 5.0 IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with… Ibm
- CVE-2014-4668 MEDIUM · 6.8 The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to… Fedoraproject Mageia Project Cherokee-project
- CVE-2014-3100 MEDIUM · 5.1 Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain… Google
- CVE-2014-3088 MEDIUM · 5.5 stconf.nsf in IBM Sametime Meeting Server 8.5.1 vertrouwt op de client om het bestandsformaat te valideren dat wordt gebruikt in wAttach?OpenForm multipart/form-data POST requests, waarmee… Ibm
- CVE-2013-3004 LOW · 3.5 Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read… Ibm
- CVE-2014-3477 MEDIUM · 4.0 The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client… D-bus Project Freedesktop
- CVE-2013-7388 HIGH · 9.3 Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a… Google Trimble
- CVE-2013-3664 HIGH · 9.3 Trimble SketchUp (voorheen Google SketchUp) vóór 2013 (13.0.3689) stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigde kleurenpalettabel in een… Google Trimble
- CVE-2013-3662 HIGH · 9.3 Timbre SketchUp (voorheen Google SketchUp) voor 8 Onderhoud 2 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigde kleurenpalettabel in… Google
- CVE-2014-3494 MEDIUM · 4.3 kio/usernotificationhandler.cpp in de POP3-kioslave in kdelibs 4.10.95 vóór 4.13.3 genereert niet correct waarschuwingsmeldingen, waardoor man-in-the-middle-aanvallers gevoelige informatie kunnen verkrijgen via een ongeldig certificaat. Opensuse Kde
- CVE-2014-3492 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de host YAML-weergave in Foreman vóór 1.4.5 en 1.5.x vóór 1.5.1 stellen externe aanvallers in staat om willekeurig webscript… Theforeman
- CVE-2014-3491 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Foreman vóór 1.4.5 en 1.5.x vóór 1.5.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Theforeman
- CVE-2014-4602 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script… Xen Carousel Plugin Project
- CVE-2014-4585 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via… Mnt-tech
- CVE-2014-4584 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML… Wp-easybooking Plugin Project
- CVE-2014-4583 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp-contact-sidebar-widget) plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script… Wp-contact Plugin Project
- CVE-2014-4575 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML… Wikipop Plugin Project
- CVE-2014-4569 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in ls/vv_login.php in de VideoWhisper Live Streaming Integration plugin 4.27.2 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig… Videowhisper
- CVE-2014-4564 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML… Validated Plugin Project
- CVE-2014-4556 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web… Swipe Checkout For Eshop Project
- CVE-2014-4545 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in pq_dialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script… Pro Quoter Plugin Project
- CVE-2014-4538 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in process.php in the Malware Finder plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Malware Finder Plugin Project
- CVE-2014-4533 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ajax_functions.php in the GEO Redirector plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or… Geo Redirector Plugin Project