CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-6454 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML… Mediawiki
- CVE-2013-6453 HIGH · 7.5 MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via… Mediawiki
- CVE-2013-6452 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML… Mediawiki
- CVE-2013-5984 MEDIUM · 6.4 Directory traversal kwetsbaarheid in userfiles/modules/admin/backup/delete.php in Microweber vóór 0.830 stelt externe aanvallers in staat om willekeurige bestanden te verwijderen via een .. (dot dot) in… Microweber
- CVE-2013-5749 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in management/prioritize_planning.php in SimpleRisk vóór 20130916-001 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de parameter… Simplerisk
- CVE-2013-5748 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects… Simplerisk
- CVE-2013-5671 HIGH · 7.5 lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors. Mark Evans
- CVE-2013-4772 HIGH · 9.3 Met D-Link DIR-505L SharePort Mobile Companion 1.01 en DIR-826L Wireless N600 Cloud Router 1.02 kunnen externe aanvallers authenticatie omzeilen via een direct verzoek wanneer een… Dlink
- CVE-2013-4581 MEDIUM · 6.8 GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a… Gitlab
- CVE-2013-4580 MEDIUM · 6.8 GitLab vóór 5.4.2, Community Edition vóór 6.2.4 en Enterprise Edition vóór 6.2.1, bij gebruik van een MySQL-backend, stelt externe aanvallers in staat zich voor te… Gitlab
- CVE-2013-4577 LOW · 2.1 A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the… Gnu
- CVE-2013-4574 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary… Mediawiki
- CVE-2013-4571 HIGH · 7.5 Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors. Mediawiki
- CVE-2013-4570 MEDIUM · 5.0 The zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to cause… Mediawiki
- CVE-2014-3145 MEDIUM · 4.9 The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which… Linux Oracle Canonical Debian
- CVE-2014-3144 MEDIUM · 4.9 The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a… Linux Debian Canonical Oracle
- CVE-2014-3122 MEDIUM · 4.9 De try_to_unmap_cluster-functie in mm/rmap.c in de Linux-kernel vóór 3.14.3 houdt niet goed rekening met welke pagina's moeten worden vergrendeld, waardoor lokale gebruikers een denial of… Linux Canonical Debian
- CVE-2014-1738 LOW · 2.1 De raw_cmd_copyout-functie in drivers/block/floppy.c in de Linux-kernel via 3.14.3 beperkt de toegang tot bepaalde pointers niet goed tijdens de verwerking van een FDRAWCMD ioctl-aanroep, waardoor… Linux Redhat Debian Oracle
- CVE-2014-1737 HIGH · 7.2 The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which… Linux Oracle Debian Suse
- CVE-2014-2603 LOW · 1.7 Ongespecificeerde kwetsbaarheid op HP 8/20q-switches, SN6000-switches en 8Gb Simple SAN Connection Kit met firmware vóór 8.0.14.08.00 stelt externe geverifieerde gebruikers in staat om gevoelige informatie… Hp
- CVE-2013-6220 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML… Hp
- CVE-2014-1991 MEDIUM · 5.8 Open omleidingskwetsbaarheid in WebPlatform/AppFramework 6.0 tot 7.2 in NTT data INTRAMART intra-mart stelt externe aanvallers in staat om gebruikers om te leiden naar willekeurige websites… Intra-mart
- CVE-2014-0946 MEDIUM · 4.3 The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26… Ibm
- CVE-2014-0945 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de RES-console in Rule Execution Server in IBM Operational Decision Manager 7.5 vóór FP3 IF37, 8.0 vóór MP1 FP2 en… Ibm
- CVE-2014-0944 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1… Ibm
- CVE-2014-3214 MEDIUM · 5.0 The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE… Isc
- CVE-2014-0913 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script… Ibm
- CVE-2014-2854 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de SemanticTitle-extensie vóór 1.1.0 voor MediaWiki stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Semantictitle Project
- CVE-2013-5916 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to… Bradesco Gateway Plugin Project
- CVE-2014-3207 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to… Sks Keyserver Project
- CVE-2014-3123 LOW · 2.1 Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN… Wpgetready
- CVE-2014-3115 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators… Fortinet
- CVE-2014-2689 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Offiria 2.1.0 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de PATH_INFO naar…
- CVE-2014-1934 LOW · 3.3 tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary… Travis Shirk Opensuse
- CVE-2014-1685 MEDIUM · 5.5 The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users… Zabbix Fedoraproject
- CVE-2014-1682 MEDIUM · 4.0 The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name… Zabbix Fedoraproject
- CVE-2014-0192 MEDIUM · 5.0 Voorman 1.4.0 vóór 1.5.0 beperkt de toegang tot voorbeelden van provisioningsjablonen niet goed, waardoor externe aanvallers gevoelige informatie kunnen verkrijgen via de hostnaamparameter, gerelateerd aan… Theforeman
- CVE-2014-0190 MEDIUM · 4.3 The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and… Qt Fedoraproject Opensuse Canonical
- CVE-2014-0135 LOW · 1.9 Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other… Theforeman
- CVE-2014-0134 LOW · 3.5 The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set… Openstack
- CVE-2014-0110 MEDIUM · 4.3 Met Apache CXF vóór 2.6.14 en 2.7.x vóór 2.7.11 kunnen externe aanvallers een denial of service (/tmp schijfverbruik) veroorzaken via een groot ongeldig SOAP-bericht. Apache
- CVE-2014-0109 MEDIUM · 4.3 Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the… Apache
- CVE-2014-0090 MEDIUM · 6.8 Met de kwetsbaarheid voor sessiefixatie in Foreman vóór 1.4.2 kunnen externe aanvallers websessies kapen via de sessie-id-cookie. Theforeman
- CVE-2014-0056 LOW · 2.1 The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports… Openstack Canonical
- CVE-2013-7041 MEDIUM · 4.3 The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a… Cristian Gafton
- CVE-2013-6889 MEDIUM · 4.9 GNU Rush 1.7 verlaagt de privileges niet correct, waardoor lokale gebruikers via de --lint-optie willekeurige bestanden kunnen lezen. Gnu
- CVE-2013-6372 LOW · 2.1 The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading… Jenkins-ci
- CVE-2013-4544 MEDIUM · 4.9 hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related… Canonical Qemu
- CVE-2013-3571 LOW · 2.6 socat 1.2.0.0 vóór 1.7.2.2 en 2.0.0-b1 vóór 2.0.0-b6, wanneer gebruikt voor een luistertype-adres en de vorkoptie is ingeschakeld, kunnen externe aanvallers een denial of service… Dest-unreach
- CVE-2013-0345 LOW · 2.1 varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by… Varnish Cache Project