CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0185 HIGH · 7.2 sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local… Php
- CVE-2014-3220 HIGH · 9.0 Met F5 BIG-IQ Cloud en Security 4.0.0 tot en met 4.1.0 kunnen op afstand geverifieerde gebruikers het wachtwoord van willekeurige gebruikers wijzigen via de naamparameter… F5
- CVE-2014-0164 LOW · 2.1 openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to… Redhat
- CVE-2014-0149 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a… Redhat
- CVE-2013-7375 HIGH · 7.5 SQL-injectiekwetsbaarheid in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 tot en met 7.02.05 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de gebruikers-ID in… Php-fusion
- CVE-2013-7034 HIGH · 7.5 Met de setCookieValue-functie in _lib/functions.global.inc.php in LiveZilla vóór 5.1.2.1 kunnen externe aanvallers willekeurige PHP-code uitvoeren via een geserialiseerd PHP-object in een cookie. Livezilla
- CVE-2013-7003 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in LiveZilla vóór 5.1.2.0 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het (1) volledige… Livezilla
- CVE-2013-6444 MEDIUM · 5.8 PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of… Pywbem Project
- CVE-2013-6418 MEDIUM · 5.8 PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate. Pywbem Project
- CVE-2013-4215 MEDIUM · 4.4 Met de OPDRACHT IPXPING_in contrib/check_ipxping.c in Nagios Plugins 1.4.16 kunnen lokale gebruikers privileges krijgen via een symlink-aanval op /tmp/ipxping/ipxping. Nagios
- CVE-2013-3736 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de MobileUI (ook bekend als RT-Extension-MobileUI) extensie vóór 1.04 in Request Tracker (RT) 4.0.0 vóór 4.0.13 stelt aanvallers op afstand… Bestpractical
- CVE-2013-1803 HIGH · 7.5 Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL commands via the (1) orderby parameter to downloads.php; or remote… Php-fusion
- CVE-2013-0350 MEDIUM · 6.3 tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log. David Leonard
- CVE-2010-5109 MEDIUM · 4.3 Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a… Randall Hand Fedoraproject
- CVE-2014-2916 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via… Phplist
- CVE-2014-0469 MEDIUM · 6.8 Op stapels gebaseerde bufferoverloop in een bepaalde Debian-patch voor xbuffy vóór 3.3.bl.3.dfsg-9 stelt externe aanvallers in staat om willekeurige code uit te voeren via het… Debian
- CVE-2014-3125 MEDIUM · 6.2 Xen 4.4.x, wanneer het op een ARM-SYSTEEM wordt uitgevoerd, schakelt het CNTKCTL_EL1-register niet naar de juiste context, waardoor lokale gastgebruikers de hardwaretimers kunnen wijzigen en… Xen
- CVE-2014-3006 MEDIUM · 6.8 Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change… Sitepark
- CVE-2014-3001 MEDIUM · 5.8 The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended… Freebsd
- CVE-2014-3000 HIGH · 7.8 The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before… Freebsd
- CVE-2014-2905 MEDIUM · 6.9 fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related… Fishshell
- CVE-2014-2322 HIGH · 7.5 lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2)… Dynamixsolutions
- CVE-2014-1899 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterprise Edition) 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to… Citrix
- CVE-2014-0189 LOW · 2.1 virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file. Redhat Virt-who Project
- CVE-2013-7061 MEDIUM · 5.5 Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API. Plone
- CVE-2013-7060 MEDIUM · 5.0 Met Products/CMFPlone/FactoryTool.py in Plone 3.3 t/m 4.3.2 kunnen externe aanvallers het installatiepad verkrijgen via vectoren met betrekking tot een bestandsobject voor niet-gespecificeerde documentatie die is… Plone
- CVE-2014-3139 HIGH · 7.5 recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string. Unitrends
- CVE-2014-2175 HIGH · 7.8 Cisco TelePresence TC Software 4.x en 5.x en TE Software 4.x en 6.0 stellen externe aanvallers in staat om een denial of service (geheugenverbruik) te… Cisco
- CVE-2014-2173 HIGH · 7.2 Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local… Cisco
- CVE-2014-2172 MEDIUM · 6.6 Bufferoverloop in Cisco TelePresence TC Software 4.x en 5.x en TE Software 4.x en 6.0 stelt lokale gebruikers in staat om privileges te verkrijgen door… Cisco
- CVE-2014-2171 HIGH · 10.0 Op heap gebaseerde bufferoverloop in Cisco TelePresence TC Software 4.x tot en met 6.x vóór 6.0.1 en TE Software 4.x en 6.0.x vóór 6.0.2 stelt… Cisco
- CVE-2014-2170 HIGH · 9.0 Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute… Cisco
- CVE-2014-2169 HIGH · 9.0 Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using… Cisco
- CVE-2014-2168 HIGH · 7.6 Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted… Cisco
- CVE-2014-2167 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of… Cisco
- CVE-2014-2166 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via… Cisco
- CVE-2014-2165 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of… Cisco
- CVE-2014-2164 HIGH · 7.8 De SIP-implementatie in Cisco TelePresence TC Software 4.x en 5.x en TE Software 4.x en 6.0 stelt externe aanvallers in staat om een denial of… Cisco
- CVE-2014-2163 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device… Cisco
- CVE-2014-2162 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of… Cisco
- CVE-2014-2161 HIGH · 7.8 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2014-2160 HIGH · 7.8 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2014-2159 HIGH · 7.8 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2014-2158 HIGH · 7.8 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug… Cisco
- CVE-2014-2157 HIGH · 7.1 Cisco TelePresence System MXP Series Software vóór F9.3.1 stelt externe aanvallers in staat om een denial of service (herladen van het apparaat) te veroorzaken via… Cisco
- CVE-2014-2156 HIGH · 7.1 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug… Cisco
- CVE-2014-1989 MEDIUM · 6.0 Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Cybozu
- CVE-2014-1988 LOW · 3.5 The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified… Cybozu
- CVE-2014-1443 MEDIUM · 4.0 Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with… Coreftp
- CVE-2014-1442 MEDIUM · 4.0 Directory traversal kwetsbaarheid in Core FTP Server 1.2 vóór build 515 stelt op afstand geverifieerde gebruikers in staat om het bestaan van willekeurige bestanden te… Coreftp