CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0007 HIGH · 7.5 The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to… Theforeman
- CVE-2012-2591 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1)… Emailarchitect
- CVE-2012-2580 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML… Postieplugin
- CVE-2012-2579 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the… Wp Simplemail Project
- CVE-2012-0273 HIGH · 7.5 Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value… Hans Alshoff
- CVE-2011-4821 MEDIUM · 5.0 Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA allows remote attackers to read arbitrary files via… Dlink
- CVE-2012-2052 HIGH · 9.3 Op stapels gebaseerde bufferoverloop in de U3D.8BI-bibliotheekplug-in in Adobe Photoshop CS5 12.x vóór 12.0.5 en CS5.1 12.1.x vóór 12.1.1 stelt externe aanvallers in staat om… Adobe
- CVE-2013-1068 MEDIUM · 5.0 Het OpenStack Nova (python-nova) pakket 1: 2013.2.3-0 voor 1: 2013.2.3-0ubuntu1.2 en 1: 2014.1-0 voor 1: 2014.1-0ubuntu1.2 en Openstack Cinder (python-cinder) pakket 1: 2013.2.3-0 voor 1:… Canonical
- CVE-2014-4335 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) host or (2) password… Barracudadrive
- CVE-2014-4334 HIGH · 7.5 Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary code via a long string in the "second connection" to… Ubi
- CVE-2014-4333 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct… Boonex
- CVE-2014-4155 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators for requests… Zte
- CVE-2014-3810 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in beheer/profiles.php in BoonEx Dolphin 7.1.4 en eerder stelt externe geverifieerde beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de parameter members[].… Boonex
- CVE-2014-3778 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of… Commscope
- CVE-2012-2572 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Mindreantre
- CVE-2012-2569 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Synametrics Technologies Xeams 4.4 Build 5720 stelt externe aanvallers in staat om willekeurig webscript of HTML via de hoofdtekst van… Synametrics
- CVE-2012-1621 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.02 allow remote attackers to inject arbitrary web script or… Apache
- CVE-2011-4367 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read… Apache
- CVE-2014-4329 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote attackers to inject arbitrary web script or HTML via the host parameter. Ntop
- CVE-2014-2962 HIGH · 7.8 Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read… Belkin
- CVE-2014-2782 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-2611 HIGH · 9.0 Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain… Hp
- CVE-2014-2610 HIGH · 7.1 Directory traversal kwetsbaarheid in de Content Acceleration Pack (CAP) webapplicatie in HP Executive Scorecard 9.40 en 9.41 stelt externe geverifieerde gebruikers in staat om willekeurige… Hp
- CVE-2014-2609 HIGH · 10.0 The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via… Hp
- CVE-2014-2001 MEDIUM · 5.8 The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Jreast
- CVE-2014-4153 HIGH · 7.8 Met de AV-CENTERD soap-service in AlienVault OSSIM vóór 4.8.0 kunnen aanvallers op afstand willekeurige bestanden lezen via een vervaardigd get_file-verzoek. Alienvault
- CVE-2014-4152 HIGH · 10.0 The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an… Alienvault
- CVE-2014-4151 HIGH · 10.0 The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request. Alienvault
- CVE-2014-4049 MEDIUM · 5.1 Op heap gebaseerde bufferoverloop in de php_parserr-functie in ext/standard/dns.c in PHP 5.6.0beta4 en eerder stelt externe servers in staat om een denial of service (crash)… Opensuse Php Debian
- CVE-2014-4021 LOW · 2.7 Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified… Xen
- CVE-2014-1652 LOW · 2.3 Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script… Symantec
- CVE-2014-1651 MEDIUM · 5.8 SQL-injectiekwetsbaarheid in clientreport.php in de beheerconsole in Symantec Web Gateway (SWG) vóór 5.2 stelt externe aanvallers in staat willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde… Symantec
- CVE-2014-1650 MEDIUM · 5.2 SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands… Symantec
- CVE-2013-5017 CRITICAL · 9.8 SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors. Symantec
- CVE-2012-2592 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email. Axigen
- CVE-2014-0599 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux allows remote attackers to inject… Novell
- CVE-2014-0598 HIGH · 10.0 Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux has unspecified impact and remote attack… Novell
- CVE-2014-4174 HIGH · 9.3 wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Wireshark
- CVE-2014-4020 MEDIUM · 4.3 The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it… Wireshark
- CVE-2014-3013 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in IBM Curam Social Program Management 4.5 SP10 tot en met 6.0.5.4 stellen op afstand geverifieerde gebruikers in staat om… Ibm
- CVE-2014-3012 LOW · 3.5 Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct… Ibm
- CVE-2014-2949 MEDIUM · 6.5 SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via… F5
- CVE-2014-2779 MEDIUM · 4.3 mpengine.dll in Microsoft Malware Protection Engine vóór 1.1.10701.0 kunnen externe aanvallers een denial of service (systeemopknoping) veroorzaken via een vervaardigd bestand. Microsoft
- CVE-2014-2151 MEDIUM · 4.0 Het WebVPN-portaal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) en eerder stelt op afstand geverifieerde gebruikers in staat om gevoelige informatie te verkrijgen via… Cisco
- CVE-2014-2000 LOW · 2.6 The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files. Ntt
- CVE-2014-0910 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0 through 7.0.0.2 CF28 allows remote authenticated users… Ibm
- CVE-2013-6221 HIGH · 10.0 Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary… Hp
- CVE-2014-4309 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html,… Openfiler
- CVE-2014-4308 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via… Nice
- CVE-2014-4307 HIGH · 7.5 SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter. Webtitan