CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1441 MEDIUM · 4.3 Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command… Coreftp
- CVE-2013-7110 MEDIUM · 4.3 Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an… Transifex
- CVE-2013-2073 MEDIUM · 4.3 Transifex-opdrachtregelclient vóór 0.9 valideert geen X.509-certificaten, waardoor man-in-the-middle-aanvallers een Transifex-server kunnen vervalsen via een willekeurig certificaat. Transifex
- CVE-2014-3138 MEDIUM · 6.5 SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3… Xerox
- CVE-2014-0942 LOW · 3.5 Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2014-0941 LOW · 3.5 Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2014-0896 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request. Ibm
- CVE-2014-0859 MEDIUM · 5.0 The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows… Ibm
- CVE-2014-0857 MEDIUM · 4.0 The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via… Ibm
- CVE-2014-0823 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL. Ibm
- CVE-2014-0646 MEDIUM · 6.9 The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03,… Emc
- CVE-2013-6323 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and… Ibm
- CVE-2014-2882 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in de beheer-GUI in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór 9.3-66.5 en 10.x vóór 10.1-122.17 heeft niet-gespecificeerde impact en… Citrix
- CVE-2014-2881 HIGH · 10.0 Niet gespecificeerde kwetsbaarheid in de Diffie-Hellman sleutelovereenkomst implementatie in de management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór… Citrix
- CVE-2013-7374 MEDIUM · 4.6 The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the… Canonical
- CVE-2014-0786 HIGH · 7.5 Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. Ecava
- CVE-2014-2260 LOW · 3.5 Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command… Ajenti
- CVE-2013-1807 MEDIUM · 5.0 PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain… Php-fusion
- CVE-2013-1806 MEDIUM · 6.5 Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include and execute arbitrary files via a .. (dot dot) in the… Php-fusion
- CVE-2014-3135 MEDIUM · 4.3 Meerdere XSS-kwetsbaarheden (cross-site scripting) in vBulletin 5.1.1 Alpha 9 stellen externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via (1) de PATH_INFO… Vbulletin
- CVE-2014-3134 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de InfoView-applicatie in SAP BusinessObjects stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Sap
- CVE-2014-3133 MEDIUM · 5.0 SAP Netweaver Java Application Server beperkt de toegang niet goed, waardoor externe aanvallers de lijst met SAP-systemen die op een SLD zijn geregistreerd, kunnen verkrijgen… Sap
- CVE-2014-3132 MEDIUM · 4.0 SAP Background Processing beperkt de toegang niet op de juiste manier, waardoor op afstand geverifieerde gebruikers gevoelige informatie kunnen verkrijgen via een niet-gespecificeerde RFC-functie, gerelateerd… Sap
- CVE-2014-3131 MEDIUM · 4.0 SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP… Sap
- CVE-2014-3130 MEDIUM · 4.6 De ABAP Help documentatie- en vertaaltools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server beperken de toegang niet goed, waardoor lokale gebruikers privileges kunnen… Sap
- CVE-2014-3129 MEDIUM · 5.0 Met de Java Server-pagina's in de Software Lifecycle Manager (SLM) in SAP NetWeaver kunnen externe aanvallers gevoelige informatie verkrijgen via een vervaardigd verzoek, gerelateerd aan… Sap
- CVE-2014-2565 MEDIUM · 6.5 The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to… Bluecoat
- CVE-2014-1957 MEDIUM · 6.5 FortiGuard FortiWeb vóór 5.0.3 stelt op afstand geverifieerde gebruikers in staat om privileges te verkrijgen via niet-gespecificeerde vectoren. Fortinet
- CVE-2014-1956 MEDIUM · 5.0 CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Fortinet
- CVE-2014-1955 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Fortinet
- CVE-2014-0471 MEDIUM · 5.0 Directory traversal kwetsbaarheid in de uitpakfunctionaliteit in dpkg vóór 1.15.9, 1.16.x vóór 1.16.13 en 1.17.x vóór 1.17.8 stelt externe aanvallers in staat om willekeurige bestanden… Debian Canonical
- CVE-2014-0470 HIGH · 7.2 super.c in Super 3.30.0 controleert niet de retourwaarde van de setuid-functie wanneer de -F-vlag is ingesteld, waardoor lokale gebruikers privileges kunnen verkrijgen via niet-gespecificeerde vectoren,… Super Project
- CVE-2013-6990 HIGH · 9.0 FortiGuard FortiAuthenticator before 3.0 stelt externe beheerders in staat om privileges te verkrijgen via de opdrachtregelinterface. Fortinet
- CVE-2013-6445 MEDIUM · 5.0 Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier… Redhat
- CVE-2014-2545 MEDIUM · 5.0 TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers… Tibco
- CVE-2014-2186 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka… Cisco
- CVE-2014-1532 CRITICAL · 9.8 Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26… Mozilla Fedoraproject Canonical Debian
- CVE-2014-1531 HIGH · 8.8 Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote… Mozilla Canonical Debian Redhat
- CVE-2014-1530 MEDIUM · 6.1 The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger… Mozilla Fedoraproject Canonical Debian
- CVE-2014-1529 HIGH · 8.8 The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to… Mozilla Canonical Debian Redhat
- CVE-2014-1528 HIGH · 10.0 De functie sse2_composite_src_x888_8888 in Pixman, zoals gebruikt in Caïro in Mozilla Firefox 28.0 en SeaMonkey 2.25 op Windows, stelt aanvallers op afstand in staat om… Canonical Opensuse Opensuse Project Oracle
- CVE-2014-1527 MEDIUM · 5.0 Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the… Fedoraproject Mozilla Google Oracle
- CVE-2014-1526 MEDIUM · 6.8 Met de XrayWrapper-implementatie in Mozilla Firefox vóór 29.0 en SeaMonkey vóór 2.26 kunnen door de gebruiker ondersteunde externe aanvallers de beoogde toegangsbeperkingen omzeilen via een… Mozilla Canonical Opensuse Fedoraproject
- CVE-2014-1525 HIGH · 9.3 De functie mozilla::dom::TextTrack::AddCue in Mozilla Firefox vóór versie 29.0 en SeaMonkey vóór versie 2.26 voert geen correcte garbage collection uit voor variabelen van Text Track… Mozilla Canonical Opensuse Fedoraproject
- CVE-2014-1524 CRITICAL · 9.8 The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether… Mozilla Canonical Debian Redhat
- CVE-2014-1523 MEDIUM · 6.5 Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows… Mozilla Fedoraproject Debian Canonical
- CVE-2014-1522 HIGH · 9.3 De mozilla::dom:: OscillatorNodeEngine:: ComputeCustom-functie in het Web Audio-subsysteem in Mozilla Firefox vóór 29.0 en SeaMonkey vóór 2.26 stelt externe aanvallers in staat om willekeurige code… Fedoraproject Canonical Opensuse Mozilla
- CVE-2014-1520 MEDIUM · 6.9 maintenservice_installer.exe in de Maintenance Service Installer in Mozilla Firefox voor 29.0 en Firefox ESR 24.x voor 24.5 op Windows stelt lokale gebruikers in staat om… Mozilla Microsoft Fedoraproject
- CVE-2014-1519 HIGH · 9.3 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service… Mozilla Canonical Opensuse Fedoraproject
- CVE-2014-1518 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow… Mozilla Fedoraproject Canonical Debian