CVE-database
125.650 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-6975 MEDIUM · 4.6 Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug… Cisco
- CVE-2014-3787 MEDIUM · 5.0 SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. Sap
- CVE-2014-3735 MEDIUM · 4.3 ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file. Intel
- CVE-2014-3717 LOW · 3.3 Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a… Xen
- CVE-2014-3716 LOW · 1.9 Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB… Xen
- CVE-2014-3715 LOW · 3.3 Bufferoverloop in Xen 4.4.x stelt lokale gebruikers in staat om systeemgeheugen te lezen of een denial of service (crash) te veroorzaken via een vervaardigde 32-bits… Xen
- CVE-2014-3714 LOW · 3.3 De ARM-IMAGE-LAADFUNCTIONALITEIT in Xen 4.4.x valideert de kernellengte niet goed, waardoor lokale gebruikers het systeemgeheugen kunnen lezen of een denial of service (crash) kunnen veroorzaken… Xen
- CVE-2014-3411 HIGH · 10.0 Een niet nader gespecificeerde kwetsbaarheid in de NSM XDB-service van Juniper NSM vóór versie 2012.2R8 stelt externe aanvallers in staat om willekeurige code uit te… Juniper
- CVE-2014-1402 MEDIUM · 4.4 The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted… Pocoo
- CVE-2014-0012 MEDIUM · 4.4 FileSystemBytecodeCache in Jinja2 2.7.2 maakt geen tijdelijke mappen aan, waardoor lokale gebruikers privileges kunnen krijgen door vooraf een tijdelijke map aan te maken met de… Pocoo
- CVE-2013-7385 MEDIUM · 6.8 LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote… Livezilla
- CVE-2013-7384 MEDIUM · 5.0 UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL. NOTE:… Unrealircd
- CVE-2013-7040 MEDIUM · 4.3 Python 2.7 vóór 3.4 gebruikt alleen de laatste acht bits van het voorvoegsel om hash-waarden te randomiseren, waardoor het hash-waarden berekent zonder de mogelijkheid om… Apple Python
- CVE-2013-7033 MEDIUM · 4.3 LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive… Livezilla
- CVE-2013-6994 MEDIUM · 6.4 OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network. Opentext
- CVE-2013-6807 MEDIUM · 6.8 De client in OpenText Exceed OnDemand (EoD) 8 ondersteunt standaard anonieme versleutelingen, waarmee man-in-the-middle-aanvallers de validatie van servercertificaten kunnen omzeilen, een verbinding kunnen omleiden en… Opentext
- CVE-2013-6806 MEDIUM · 6.8 OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers… Opentext
- CVE-2013-6805 MEDIUM · 5.0 OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network… Opentext
- CVE-2013-6766 HIGH · 7.5 OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted… Openvas
- CVE-2013-6765 HIGH · 7.5 OpenVAS Manager 3.0 vóór 3.0.7 en 4.0 vóór 4.0.4 stelt externe aanvallers in staat om de OMP-authenticatiebeperkingen te omzeilen en OMP-opdrachten uit te voeren via… Openvas
- CVE-2013-6413 MEDIUM · 5.0 Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. NOTE: this identifier was SPLIT… Unrealircd
- CVE-2013-4432 MEDIUM · 4.0 Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary… Mahara
- CVE-2013-4431 MEDIUM · 5.5 Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary… Mahara
- CVE-2013-4430 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML… Mahara
- CVE-2013-4429 MEDIUM · 4.0 Mahara vóór 1.5.12, 1.6.x vóór 1.6.7 en 1.7.x vóór 1.7.3 beperkt de toegang tot artefacten niet goed, waardoor op afstand geverifieerde gebruikers willekeurige artefacten kunnen… Mahara
- CVE-2013-4427 LOW · 2.1 pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers… Leon Weber
- CVE-2013-4426 LOW · 3.6 pyxtrlock before 0.1 gebruikt een onjuiste variabelenaam, waardoor fysiek nabije aanvallers het vergrendelingsscherm kunnen omzeilen via meerdere mislukte authenticatiepogingen, die een crash veroorzaken. Leon Weber
- CVE-2013-4406 MEDIUM · 5.0 The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote… Quick Tabs Module Project
- CVE-2014-1347 MEDIUM · 4.4 Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently… Apple
- CVE-2013-4498 LOW · 2.1 The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the… Florian Weber Drupal
- CVE-2013-4489 MEDIUM · 6.5 Met de Grit gem voor Ruby, zoals gebruikt in GitLab 5.2 vóór 5.4.1 en 6.x vóór 6.2.3, kunnen op afstand geverifieerde gebruikers willekeurige opdrachten uitvoeren,… Gitlab
- CVE-2014-3453 MEDIUM · 6.5 Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrators to execute… Flag Module Project
- CVE-2014-2084 HIGH · 8.5 Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to… Skyboxsecurity
- CVE-2013-7382 MEDIUM · 5.0 VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users,… Vicidial
- CVE-2014-3742 MEDIUM · 5.0 The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process… Spumko Project
- CVE-2014-3730 MEDIUM · 4.3 The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows… Canonical Djangoproject Opensuse Debian
- CVE-2014-3452 MEDIUM · 4.3 FiltersLAVavfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file. Codecguide
- CVE-2014-1613 HIGH · 7.5 Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is… Dotclear
- CVE-2014-1418 MEDIUM · 6.4 Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control… Djangoproject Canonical
- CVE-2013-7379 MEDIUM · 6.8 The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string,… Ucdok
- CVE-2014-3761 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in D-Link DAP 1150 met firmware 1.2.94 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Dlink
- CVE-2014-3760 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of administrators for requests that… Dlink
- CVE-2014-3759 HIGH · 7.5 Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to… Karlen Walter
- CVE-2014-3758 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via vectors… Karlen Walter
- CVE-2014-0749 HIGH · 10.0 Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x through 2.5.13 allows remote attackers to execute arbitrary… Adaptivecomputing
- CVE-2014-3750 MEDIUM · 5.8 The Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Bilyoner
- CVE-2014-3263 MEDIUM · 5.4 Met de ScanSafe-module in Cisco IOS 15.3(3)M kunnen externe aanvallers een denial of service (herladen van het apparaat) veroorzaken via HTTPS-pakketten die torenverwerking vereisen, ook… Cisco
- CVE-2014-3262 MEDIUM · 4.3 The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which… Cisco
- CVE-2014-1649 HIGH · 7.9 The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS. Symantec
- CVE-2014-0964 HIGH · 7.1 IBM WebSphere Application Server (WAS) 6.1.0.0 tot en met 6.1.0.47 en 6.0.2.0 tot en met 6.0.2.43 stelt externe aanvallers in staat om een denial of… Ibm