CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4648 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in Piwigo vóór 2.6.3 heeft onbekende impact- en aanvalsvectoren, gerelateerd aan een "beveiligingsfout". Piwigo
- CVE-2014-2613 HIGH · 9.0 Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on… Hp Microsoft Linux
- CVE-2014-2612 MEDIUM · 4.0 Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on… Hp Linux Microsoft
- CVE-2014-3881 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users. Intercom
- CVE-2014-2006 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Intercom
- CVE-2014-0891 MEDIUM · 5.0 IBM WebSphere Application Server (WAS) 7.0.x vóór 7.0.0.33, 8.0.x vóór 8.0.0.9 en 8.5.x vóór 8.5.5.2 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen… Ibm
- CVE-2013-6311 MEDIUM · 6.5 SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Ibm
- CVE-2013-6310 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Ibm
- CVE-2013-6309 MEDIUM · 6.0 IBM Marketing Platform 9.1 vóór FP2 stelt op afstand geverifieerde gebruikers in staat om sessies te kapen en bijgevolg records te lezen, records te wijzigen… Ibm
- CVE-2013-6308 MEDIUM · 4.9 IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection. Ibm
- CVE-2014-3011 MEDIUM · 5.0 IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors. Ibm
- CVE-2011-1381 MEDIUM · 6.4 Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors. Ibm
- CVE-2014-3433 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script… Symantec
- CVE-2014-3432 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script… Symantec
- CVE-2014-4645 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname. Dlink
- CVE-2014-4644 HIGH · 7.5 SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter. Cacti
- CVE-2014-4643 MEDIUM · 5.0 Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application… Coreftp
- CVE-2014-4030 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests… Longtailvideo
- CVE-2014-4617 MEDIUM · 5.0 Met de do_uncompress-functie in g10/compress.c in GnuPG 1.x vóór 1.4.17 en 2.x vóór 2.0.24 kunnen contextafhankelijke aanvallers een denial of service (oneindige lus) veroorzaken via… Gnupg Debian Opensuse
- CVE-2014-4349 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in phpMyAdmin 4.1.x vóór 4.1.14.1 en 4.2.x vóór 4.2.4 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript of… Phpmyadmin
- CVE-2014-4348 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in phpMyAdmin 4.2.x vóór 4.2.4 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via… Phpmyadmin
- CVE-2014-3882 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users. 12net
- CVE-2014-3299 MEDIUM · 6.8 Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745. Cisco
- CVE-2014-2005 MEDIUM · 6.8 Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep… Sophos
- CVE-2014-0206 LOW · 2.1 Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory… Linux
- CVE-2014-3493 LOW · 2.7 The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial… Samba
- CVE-2014-0244 LOW · 3.3 The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of… Samba
- CVE-2014-4508 MEDIUM · 4.7 arch/x86/kernel/entry_32.S in de Linux-kernel via 3.15.1 op 32-bits x86-platforms, wanneer syscall-auditing is ingeschakeld en de Sep CPU-functievlag is ingesteld, kunnen lokale gebruikers een denial of… Linux Canonical
- CVE-2014-4171 MEDIUM · 4.7 mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause… Linux Canonical
- CVE-2014-4157 MEDIUM · 4.6 arch/mips/include/asm/thread_info.h in de Linux-kernel vóór 3.14.8 op het MIPS-platform configureert geen_TIF_SECCOMP-controles op het snelle systeemaanroeppad, waardoor lokale gebruikers de beoogde PR_SET_SECCOMP-beperkingen kunnen omzeilen door een… Linux
- CVE-2014-4027 LOW · 2.3 The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain… Linux Redhat Canonical Suse
- CVE-2014-4014 MEDIUM · 6.2 De implementatie van mogelijkheden in de Linux-kernel vóór 3.14.8 houdt er niet goed rekening mee dat naamruimten niet van toepassing zijn op inodes, waardoor lokale… Linux
- CVE-2014-1739 LOW · 2.1 De functie media_device_enum_entities in drivers/media/media-device.c in de Linux-kernel vóór 3.14.6 initialiseert geen bepaalde gegevensstructuur, waardoor lokale gebruikers gevoelige informatie uit het kernelgeheugen kunnen verkrijgen door… Linux Canonical Suse
- CVE-2014-0203 MEDIUM · 5.5 The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which… Linux Oracle
- CVE-2014-4338 MEDIUM · 4.0 cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is… Linuxfoundation
- CVE-2014-4337 MEDIUM · 4.3 The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash)… Linuxfoundation
- CVE-2014-4336 MEDIUM · 5.8 Met de functie generate_local_queue in utils/cups-browsed.c in cups-browsed in cups-filters voor 1.0.53 kunnen IPP-printers op afstand willekeurige opdrachten uitvoeren via shell-metakarakters in de hostnaam. OPMERKING:… Linuxfoundation
- CVE-2014-4509 MEDIUM · 4.6 De MKDQUOTESAFE-functie in de Fan-out driver-scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 stelt lokale gebruikers in staat om willekeurige opdrachten… Netiq
- CVE-2014-3883 MEDIUM · 6.8 Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action. Webmin
- CVE-2014-3431 MEDIUM · 4.3 Symantec PGP Desktop 10.x en Encryption Desktop Professional 10.3.x vóór 10.3.2 MP2, op OS X maakt gebruik van wereldschrijfbare machtigingen voor tijdelijke bestanden, waarmee lokale… Symantec Apple
- CVE-2014-3296 MEDIUM · 4.0 The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a… Cisco
- CVE-2014-3073 HIGH · 10.0 Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to… Ibm
- CVE-2014-3053 HIGH · 8.0 The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for… Ibm
- CVE-2014-3052 LOW · 3.3 De reverse-proxy-functie in IBM Security Access Manager (ISAM) voor Web 8.0 met firmware 8.0.0.2 en 8.0.0.3 interpreteert de parameter jct-nist-compliance in het tegenovergestelde van de… Ibm
- CVE-2013-6737 MEDIUM · 4.0 IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encountering a 1691… Ibm
- CVE-2012-5106 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in FreeFloat FTP Server 1.0 stelt op afstand geverifieerde gebruikers in staat om willekeurige code uit te voeren via een lange… Freefloat
- CVE-2014-4507 MEDIUM · 6.4 Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot)… Theforeman
- CVE-2014-4506 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administer… Louis Jimenez
- CVE-2014-4505 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via… Roger Padilla Camacho
- CVE-2014-3496 HIGH · 10.0 cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a… Redhat