CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2012-1317 MEDIUM · 5.4 The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a… Cisco
- CVE-2012-0360 MEDIUM · 5.0 Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted… Cisco
- CVE-2014-2900 MEDIUM · 5.8 wolfSSL CyaSSL vóór 2.9.4 valideert X.509-certificaten niet goed met onbekende kritieke extensies, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen via een vervaardigd X.509-certificaat. Yassl
- CVE-2014-2899 MEDIUM · 5.0 wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when… Yassl
- CVE-2014-2892 HIGH · 7.5 Op heap gebaseerde bufferoverloop in de get_answer-functie in mmsh.c in libmms vóór 0.6.4 stelt externe aanvallers in staat om willekeurige code uit te voeren via… Libmms Project
- CVE-2014-2890 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the… Siege
- CVE-2014-2737 HIGH · 7.5 SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL… Knowledgetree
- CVE-2014-2659 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication… Papercut
- CVE-2014-2654 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1)… Mobfox
- CVE-2014-1615 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Carbon Black vóór 4.1.0 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Carbonblack
- CVE-2013-7338 HIGH · 7.1 Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than… Python Apple
- CVE-2013-4472 LOW · 3.3 De openTempFile-functie in goo/gfile.cc in Xpdf en Poppler 0.24.3 en eerder, bij gebruik op een ander systeem dan Unix, stelt lokale gebruikers in staat om… Freedesktop
- CVE-2013-4116 LOW · 3.3 lib/npm.js in Node Packaged Modules (npm) vóór 1.3.3 stelt lokale gebruikers in staat om willekeurige bestanden te overschrijven via een symlink-aanval op tijdelijke bestanden met… Node Packaged Modules Project
- CVE-2013-2187 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via… Apache
- CVE-2013-2105 LOW · 3.3 Met de Show In Browser (show_in_browser) gem 0.0.3 voor Ruby kunnen lokale gebruikers willekeurig webscript of HTML injecteren via een symlink-aanval op /tmp/browser.html. Jonathan Leung
- CVE-2013-1421 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Craig Knudsen WebCalendar vóór 1.2.5, 1.2.6 en andere versies vóór 1.2.7 stelt externe aanvallers in staat om willekeurig webscript of… Webcalendar Project
- CVE-2014-2925 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web… T-mobile Asus
- CVE-2014-2735 MEDIUM · 5.8 WinSCP vóór 5.5.3, wanneer FTP met TLS wordt gebruikt, controleert niet of de hostnaam van de server overeenkomt met een domeinnaam in het veld Common… Winscp
- CVE-2014-2719 MEDIUM · 6.3 Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator… Asus T-mobile
- CVE-2014-2341 MEDIUM · 6.8 Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter. Cubecart
- CVE-2014-2269 MEDIUM · 6.4 modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 stelt externe aanvallers in staat om het wachtwoord voor willekeurige gebruikers opnieuw in te stellen via een… Vtiger
- CVE-2014-1216 HIGH · 7.5 FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing… Fitnesse
- CVE-2014-0173 MEDIUM · 5.8 The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2,… Automattic
- CVE-2013-6469 MEDIUM · 6.5 JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression.… Redhat
- CVE-2013-6371 MEDIUM · 5.0 The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. Json-c Fedoraproject
- CVE-2013-6370 MEDIUM · 5.0 Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. Json-c Fedoraproject
- CVE-2013-5948 HIGH · 8.5 The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary… T-mobile Asus
- CVE-2014-2922 MEDIUM · 6.4 The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.1.0 does not properly handle an object obtained by unserializing a pathname,… Pimcore
- CVE-2014-2921 HIGH · 7.5 De functie getObjectByToken in Newsletter.php van de module Pimcore_Tool_Newsletter in Pimcore 1.4.9 tot en met 2.0.0 verwerkt een object dat is verkregen door het deserialiseren… Pimcore
- CVE-2014-0932 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users… Ibm
- CVE-2014-0361 LOW · 3.0 De standaardconfiguratie van IBM 4690 OS, zoals gebruikt in Toshiba Global Commerce Solutions 4690 POS en andere producten, bevat wachtwoorden met het ADXCRYPT-algoritme, waardoor het… Toshibacommerce
- CVE-2013-5459 MEDIUM · 5.5 Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated… Ibm
- CVE-2014-2665 MEDIUM · 4.0 includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt,… Mediawiki
- CVE-2014-1517 MEDIUM · 4.0 Het inlogformulier in Bugzilla 2.x, 3.x, 4.x vóór 4.4.3 en 4.5.x vóór 4.5.3 behandelt een correct geverifieerde maar onbedoelde inlogpoging niet correct, waardoor het voor… Mozilla Fedoraproject
- CVE-2014-2155 MEDIUM · 5.0 The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6… Cisco
- CVE-2013-6219 LOW · 3.8 Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors. Hp
- CVE-2013-6218 HIGH · 10.0 Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors. Hp
- CVE-2013-6215 HIGH · 8.5 Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown… Hp
- CVE-2013-6212 MEDIUM · 6.5 Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown… Hp
- CVE-2014-2733 MEDIUM · 5.0 Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999… Siemens
- CVE-2014-2732 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP… Siemens
- CVE-2014-2731 HIGH · 9.3 Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic… Siemens
- CVE-2014-1990 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers… Toshibatec
- CVE-2014-1984 MEDIUM · 6.8 De kwetsbaarheid voor sessiefixatie in het beheerscherm in Cybozu Remote Service Manager via 2.3.0 en 3.x vóór 3.1.1 stelt externe aanvallers in staat websessies te… Cybozu
- CVE-2014-1983 HIGH · 7.8 Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via… Cybozu
- CVE-2014-1974 MEDIUM · 6.4 Directory traversal-kwetsbaarheid in de LYSESOFT AndExplorer-applicatie vóór 20140403 en AndExplorerPro-applicatie vóór 20140405 voor Android stelt aanvallers in staat om willekeurige bestanden te overschrijven of te… Lyesoft
- CVE-2014-0778 MEDIUM · 4.3 TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information.… Progea
- CVE-2013-6214 MEDIUM · 4.0 Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via… Hp
- CVE-2013-6213 HIGH · 10.0 Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833. Hp
- CVE-2014-2597 MEDIUM · 4.9 PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to… Remote-rac