CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4528 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in admin/swarm-settings.php in the Bugs Go Viral : Facebook Promotion Generator (fbpromotions) plugin 1.3.4 and earlier for WordPress allow remote… Fbpromotions Project
- CVE-2014-4521 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML… Diversesolutions
- CVE-2014-4520 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML… Dmca
- CVE-2014-4518 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in xd_resize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web… D-coda
- CVE-2014-4516 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script… Bic Media Widget Plugin
- CVE-2014-4515 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in mce_anyfont/dialog.php in the AnyFont plugin 2.2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML… Anyfont Plugin Project
- CVE-2014-4513 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary… Activehelper
- CVE-2014-1383 MEDIUM · 5.5 Met Apple TV vóór 6.1.2 kunnen op afstand geverifieerde gebruikers een beoogde wachtwoordvereiste voor iTunes Store-aankooptransacties omzeilen via niet-gespecificeerde vectoren. Apple
- CVE-2014-1382 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1381 HIGH · 10.0 Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial… Apple
- CVE-2014-1380 LOW · 2.6 The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the… Apple
- CVE-2014-1379 HIGH · 10.0 Grafische stuurprogramma's in Apple OS X vóór 10.9.4 stellen aanvallers in staat om privileges te verkrijgen of een denial of service (NULL pointer dereference en… Apple
- CVE-2014-1378 LOW · 2.1 Met IOGraphicsFamily in Apple OS X vóór 10.9.4 kunnen lokale gebruikers het ASLR-beveiligingsmechanisme omzeilen door gebruik te maken van leestoegang tot een kernelaanwijzer in een… Apple
- CVE-2014-1377 HIGH · 10.0 Array-indexfout in IOAcceleratorFamily in Apple OS X vóór 10.9.4 stelt aanvallers in staat om willekeurige code uit te voeren via een vervaardigd programma. Apple
- CVE-2014-1376 HIGH · 10.0 Intel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API call, which allows attackers to execute arbitrary code via… Apple
- CVE-2014-1375 LOW · 2.1 Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel… Apple
- CVE-2014-1373 HIGH · 10.0 Intel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenGL API call, which allows attackers to execute arbitrary code… Apple
- CVE-2014-1372 MEDIUM · 4.9 Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users… Apple
- CVE-2014-1371 HIGH · 7.5 Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-pointer… Apple
- CVE-2014-1370 MEDIUM · 6.8 The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds… Apple
- CVE-2014-1369 MEDIUM · 4.3 WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that… Apple
- CVE-2014-1368 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1367 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1366 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1365 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1364 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1363 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1362 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1361 MEDIUM · 5.0 Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is… Apple
- CVE-2014-1360 LOW · 2.1 Lockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which makes it easier for physically proximate attackers to bypass the… Apple
- CVE-2014-1359 HIGH · 10.0 Integer underflow in launchd in Apple iOS vóór 7.1.2, Apple OS X vóór 10.9.4 en Apple TV vóór 6.1.2 stelt aanvallers in staat om willekeurige… Apple
- CVE-2014-1358 HIGH · 10.0 Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code… Apple
- CVE-2014-1357 HIGH · 10.0 Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary… Apple
- CVE-2014-1356 HIGH · 10.0 Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary… Apple
- CVE-2014-1355 MEDIUM · 4.9 The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4,… Apple
- CVE-2014-1354 MEDIUM · 6.8 CoreGraphics in Apple iOS vóór 7.1.2 beperkt de toewijzing van stapelgeheugen voor de verwerking van XBM-afbeeldingen niet correct, waardoor externe aanvallers willekeurige code kunnen uitvoeren… Apple
- CVE-2014-1353 LOW · 3.6 Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the… Apple
- CVE-2014-1352 LOW · 1.9 Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers… Apple
- CVE-2014-1351 LOW · 3.6 Siri in Apple iOS vóór 7.1.2 stelt fysiek naaste aanvallers in staat om een beoogde toegangscode op het vergrendelingsscherm te omzeilen en een contactenlijst te… Apple
- CVE-2014-1350 MEDIUM · 4.6 Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service,… Apple
- CVE-2014-1349 MEDIUM · 6.8 Use-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via… Apple
- CVE-2014-1348 LOW · 2.1 Mail in Apple iOS vóór 7.1.2 adverteert de beschikbaarheid van gegevensbescherming voor bijlagen, maar slaat cleartext-bijlagen op onder mobiel/Bibliotheek/Mail/, waardoor het voor fysiek nabije aanvallers… Apple
- CVE-2014-1345 MEDIUM · 4.3 WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows… Apple
- CVE-2014-1340 MEDIUM · 6.8 WebKit, as used in Apple Safari before 6.1.5 and 7.x before 7.0.5, allows remote attackers to execute arbitrary code or cause a denial of service… Apple
- CVE-2014-1325 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1.2, Apple Safari vóór 6.1.5 en 7.x vóór 7.0.5, en Apple TV vóór 6.1.2, stelt externe aanvallers in… Apple
- CVE-2014-1317 LOW · 2.1 iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by… Apple
- CVE-2014-2512 LOW · 3.5 Meerdere cross-site scripting (XSS) -kwetsbaarheden in EMC Documentum eRoom 7.4.3, 7.4.4 vóór P19 en 7.4.4 SP1 stellen op afstand geverifieerde gebruikers in staat om willekeurig… Emc
- CVE-2014-2509 MEDIUM · 5.4 Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via… Emc
- CVE-2014-4669 LOW · 3.5 HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with… Hp
- CVE-2014-4649 MEDIUM · 6.5 SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the… Piwigo