CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-0210 HIGH · 7.5 The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands. Theforeman
- CVE-2013-0187 MEDIUM · 6.5 Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request. Theforeman
- CVE-2013-0174 MEDIUM · 5.0 The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request. Theforeman
- CVE-2013-0173 MEDIUM · 5.0 Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute… Theforeman
- CVE-2013-0171 HIGH · 7.5 Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API. Theforeman
- CVE-2012-5477 LOW · 3.6 De slimme proxy in Foreman voor 1.1 gebruikt een umask ingesteld op 0, waarmee lokale gebruikers bestanden kunnen wijzigen die door de daemon zijn gemaakt… Theforeman
- CVE-2014-3426 LOW · 2.1 NCSA Mosaic 2.1 through 2.7b5 allows local users to cause a denial of service ("remote control" outage) by creating a /tmp/Mosaic.pid file for every possible… Illinois
- CVE-2014-3425 LOW · 2.1 NCSA Mosaic 2.0 and earlier allows local users to cause a denial of service ("remote control" outage) by creating a /tmp/xmosaic.pid file for every possible… Illinois
- CVE-2014-3424 LOW · 3.3 lisp/net/tramp-sh.el in GNU Emacs 24.3 en eerder stelt lokale gebruikers in staat om willekeurige bestanden te overschrijven via een symlink-aanval op een /tmp/tramp.##### # tijdelijk… Mageia Project Gnu
- CVE-2014-3423 LOW · 3.3 lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file. Mageia Project Gnu
- CVE-2014-3422 LOW · 3.3 lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/. Gnu Mageia Project
- CVE-2014-3421 LOW · 3.3 lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file. Mageia Project Gnu
- CVE-2014-3215 MEDIUM · 6.9 seunshare in policycoreutils 2.2.5 is eigendom van root met 4755 machtigingen en voert programma's uit op een manier die de relatie tussen de setuid-systeemoproep en… Selinuxproject
- CVE-2014-2936 HIGH · 7.5 The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or… Caldera
- CVE-2014-2935 HIGH · 10.0 costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request. Caldera
- CVE-2014-2934 HIGH · 7.5 Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php. Caldera
- CVE-2014-2933 MEDIUM · 5.0 Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname. Caldera
- CVE-2014-2602 MEDIUM · 6.5 Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors. Hp
- CVE-2014-2136 HIGH · 9.3 Bufferoverloop in Cisco Advanced Recording Format (ARF) speler T27 LD vóór SP32 EP16, T28 vóór T28.12 en T29 vóór T29.2 stelt externe aanvallers in staat… Cisco
- CVE-2014-2135 HIGH · 9.3 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to… Cisco
- CVE-2014-2134 HIGH · 9.3 Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers… Cisco
- CVE-2014-2133 HIGH · 9.3 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to… Cisco
- CVE-2014-2132 HIGH · 7.8 Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow… Cisco
- CVE-2014-0963 HIGH · 7.1 The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before… Ibm
- CVE-2014-0930 MEDIUM · 4.7 De ptrace-systeemaanroep in IBM Aix 5.3, 6.1 en 7.1, en vios 2.2.x, stelt lokale gebruikers in staat om een denial of service (systeemcrash) te veroorzaken… Ibm
- CVE-2014-0595 LOW · 2.6 /opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 does not properly manage a certain array, which allows local… Novell
- CVE-2014-0362 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability on Google Search Appliance (GSA) devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to… Google
- CVE-2014-0116 MEDIUM · 5.8 CookieInterceptor in Apache Struts 2.x vóór 2.3.20, wanneer een wildcard-cookiesName-waarde wordt gebruikt, beperkt de toegang tot de getClass-methode niet correct, waardoor externe aanvallers de ClassLoader… Apache
- CVE-2013-5016 HIGH · 7.6 Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via… Broadcom Microsoft
- CVE-2014-3124 MEDIUM · 6.7 The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary… Xen
- CVE-2014-2913 HIGH · 7.5 Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character… Nagios Opensuse
- CVE-2014-2891 MEDIUM · 5.0 strongSwan voor 5.1.2 stelt externe aanvallers in staat om een denial of service (NULL pointer dereference en IKE daemon crash) te veroorzaken via een vervaardigde… Debian Strongswan
- CVE-2014-2191 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to inject arbitrary… Cisco
- CVE-2014-2190 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to hijack… Cisco
- CVE-2014-2181 MEDIUM · 6.8 Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by… Cisco
- CVE-2014-0911 MEDIUM · 4.3 inetd in IBM WebSphere MQ 7.1.x vóór 7.1.0.5 en 7.5.x vóór 7.5.0.4 kunnen externe aanvallers een denial of service (schijf- of CPU-verbruik) veroorzaken via niet-gespecificeerde… Ibm
- CVE-2014-0685 MEDIUM · 5.0 Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted (1) IGMPv2 or (2) IGMPv3 packets,… Cisco
- CVE-2014-0684 MEDIUM · 4.6 Cisco NX-OS 6.2(2) op Nexus 7000-switches stelt lokale gebruikers in staat om een denial of service te veroorzaken via vervaardigde sed-invoer, ook bekend als Bug… Cisco
- CVE-2013-7336 LOW · 1.9 The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to… Redhat Opensuse
- CVE-2013-6726 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in WebProcess.srv in IBM TRIRIGA Application Platform 3.2.x en 3.3.x vóór 3.3.1.2 stellen op afstand geverifieerde gebruikers in staat om… Ibm
- CVE-2014-3204 MEDIUM · 4.4 Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and… Ayatana Project Canonical
- CVE-2014-3203 MEDIUM · 4.4 Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically… Ayatana Project Canonical
- CVE-2014-3202 MEDIUM · 4.4 Unity before 7.2.1 handelt de activering van toegang niet goed af, waardoor fysiek nabije aanvallers het vergrendelingsscherm kunnen omzeilen door de ENTER-TOETS ingedrukt te houden,… Ayatana Project
- CVE-2014-2558 MEDIUM · 6.5 The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a '… Skyphe
- CVE-2014-0193 MEDIUM · 5.0 WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a… Netty
- CVE-2013-7354 MEDIUM · 6.5 Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT… Libpng
- CVE-2013-7353 MEDIUM · 6.5 Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash)… Libpng
- CVE-2014-2347 HIGH · 7.0 Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request. Amtelco
- CVE-2014-1736 HIGH · 7.5 Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows… Google Apple Microsoft Linux
- CVE-2014-0198 MEDIUM · 4.3 The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls,… Openssl Mariadb Fedoraproject Debian