CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-6738 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML… Ibm
- CVE-2012-5723 MEDIUM · 6.1 Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via… Cisco
- CVE-2012-3946 MEDIUM · 5.0 Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which… Cisco
- CVE-2014-2393 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7.4.2 before 7.4.2-rev13 allows remote attackers to inject arbitrary web script or HTML via… Open-xchange
- CVE-2014-2392 MEDIUM · 4.3 The E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 places a password in a GET request, which allows… Open-xchange
- CVE-2014-2391 MEDIUM · 4.3 The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a… Open-xchange
- CVE-2011-5279 MEDIUM · 5.0 CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers… Microsoft
- CVE-2014-1647 LOW · 2.6 Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to… Symantec
- CVE-2014-1646 LOW · 2.6 Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to… Symantec
- CVE-2014-0892 MEDIUM · 5.0 IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it… Ibm Linux
- CVE-2014-2983 MEDIUM · 5.0 Drupal 6.x voor 6.31 en 7.x voor 7.27 isoleert de in de cache opgeslagen gegevens van verschillende anonieme gebruikers niet goed, waardoor anonieme gebruikers op… Drupal Debian
- CVE-2014-2976 MEDIUM · 5.0 Directory traversal kwetsbaarheid in Sixnet SixView Manager 2.4.1 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) in een… Sixnet
- CVE-2014-2894 HIGH · 7.2 Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via… Qemu
- CVE-2014-2893 LOW · 1.9 De GetHTMLRunDir-functie in het scan-build-hulpprogramma in Clang 3.5 en eerder stelt lokale gebruikers in staat om gevoelige informatie te verkrijgen of willekeurige bestanden te overschrijven… Opensuse Llvm
- CVE-2014-2888 HIGH · 7.5 lib/sfpagent/bsig.rb in de sfpagent gem voor 0.4.15 voor Ruby stelt externe aanvallers in staat om willekeurige opdrachten uit te voeren via shell-metakarakters in de modulenaam… Herry
- CVE-2014-2855 HIGH · 7.8 The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via… Samba
- CVE-2014-2709 HIGH · 7.5 lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters. Cacti Debian
- CVE-2014-2554 MEDIUM · 4.3 OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element. Opensuse Otrs
- CVE-2014-2328 MEDIUM · 6.5 lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. Cacti Fedoraproject Opensuse Debian
- CVE-2014-2327 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Cacti 0.8.7g, 0.8.8b en eerder stelt externe aanvallers in staat om de authenticatie van gebruikers voor niet-gespecificeerde opdrachten te… Cacti Debian Opensuse
- CVE-2014-0474 HIGH · 10.0 The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7… Canonical Djangoproject
- CVE-2014-0473 MEDIUM · 5.0 The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for… Djangoproject Canonical
- CVE-2014-0472 MEDIUM · 5.1 The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and… Djangoproject Canonical
- CVE-2014-2154 MEDIUM · 5.0 Geheugenlek in de SIP-inspectie-engine in Cisco Adaptive Security Appliance (ASA) -software stelt externe aanvallers in staat om een denial of service (geheugenverbruik en instabiliteit) te… Cisco
- CVE-2014-1648 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script… Symantec
- CVE-2014-1322 MEDIUM · 4.9 The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it… Apple
- CVE-2014-1321 LOW · 3.3 Energiebeheer in Apple OS X 10.9.x tot en met 10.9.2 stelt fysiek nabije aanvallers in staat om een beoogde overgang naar de vergrendelde schermstatus te… Apple
- CVE-2014-1320 MEDIUM · 4.9 IOKit in Apple iOS vóór 7.1.1, Apple OS X tot en met 10.9.2 en Apple TV vóór 6.1.1 plaatst kernelwijzers in een objectdatastructuur, waardoor het… Apple
- CVE-2014-1319 MEDIUM · 6.8 Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application… Apple
- CVE-2014-1318 HIGH · 10.0 The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via… Apple
- CVE-2014-1316 MEDIUM · 5.0 Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon exit) via ASN.1 data… Apple
- CVE-2014-1315 MEDIUM · 6.8 Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service… Apple
- CVE-2014-1314 HIGH · 10.0 WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism… Apple
- CVE-2014-1296 MEDIUM · 4.3 CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is… Apple
- CVE-2014-1295 MEDIUM · 6.8 Beveiligd transport in Apple iOS vóór 7.1.1, Apple OS X 10.8.x en 10.9.x tot en met 10.9.2 en Apple TV vóór 6.1.1 garandeert niet dat… Apple
- CVE-2012-5427 MEDIUM · 4.0 Cisco IOS Unified Border Element (CUBE) in Cisco IOS vóór 15.3(2)T stelt op afstand geverifieerde gebruikers in staat om een denial of service (invoerwachtrijwig) te… Cisco
- CVE-2012-5422 MEDIUM · 6.8 Niet-gespecificeerde kwetsbaarheid in Cisco IOS vóór 15.3(2)T op AS5400-apparaten stelt op afstand geverifieerde gebruikers in staat om een denial of service (valse fouten) te veroorzaken… Cisco
- CVE-2012-5044 MEDIUM · 5.4 Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption)… Cisco
- CVE-2012-5039 MEDIUM · 4.3 The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path… Cisco
- CVE-2012-5037 MEDIUM · 4.6 The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload)… Cisco
- CVE-2012-5036 MEDIUM · 6.8 Cisco IOS vóór 12.2(50)SY1 stelt op afstand geverifieerde gebruikers in staat om een denial of service (geheugenverbruik) te veroorzaken via een reeks VTY-beheersessies (ook bekend… Cisco
- CVE-2012-5032 MEDIUM · 6.4 The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding… Cisco
- CVE-2012-5017 MEDIUM · 6.8 Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed… Cisco
- CVE-2012-5014 MEDIUM · 6.3 Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and… Cisco
- CVE-2012-4658 MEDIUM · 5.0 The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that… Cisco
- CVE-2012-4651 MEDIUM · 4.3 Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied… Cisco
- CVE-2012-4638 MEDIUM · 4.9 Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318. Cisco
- CVE-2012-3918 MEDIUM · 4.3 Cisco IOS vóór versie 15.3(1)T op Cisco 2900-apparaten, wanneer een VWIC2-2MFT-T1/E1-kaart is geconfigureerd voor TDM/HDLC-modus, maakt het voor externe aanvallers mogelijk om een denial-of-service-aanval (uitval… Cisco
- CVE-2012-3062 MEDIUM · 5.7 Cisco IOS vóór 15.1(1)SY, wanneer Multicast Listener Discovery (mld) snooping is ingeschakeld, stelt externe aanvallers in staat om een denial of service (CPU-verbruik of apparaatcrash)… Cisco
- CVE-2012-1366 MEDIUM · 6.1 Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial… Cisco