CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2522 MEDIUM · 4.0 curl en libcurl 7.27.0 tot en met 7.35.0, wanneer ze op Windows worden uitgevoerd en de SChannel/Winssl TLS-backend gebruiken, verifiëren niet dat de serverhostnaam overeenkomt… Haxx Microsoft
- CVE-2014-2289 LOW · 3.5 res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service (crash) via… Digium
- CVE-2014-2288 MEDIUM · 4.3 The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is enabled on an AOR and the remote SIP server challenges for… Digium
- CVE-2014-2287 LOW · 3.5 channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2,… Digium Fedoraproject
- CVE-2014-2286 HIGH · 7.5 main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2,… Digium Fedoraproject
- CVE-2014-2014 MEDIUM · 4.3 imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain… Imapsync Project
- CVE-2013-7196 MEDIUM · 5.5 static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a… Phpfox
- CVE-2013-7195 MEDIUM · 5.5 PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request that specifies the ID… Phpfox
- CVE-2013-4279 MEDIUM · 5.0 imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site. Imapsync Project
- CVE-2014-2856 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via… Apple
- CVE-2014-2844 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in F-Secure Messaging Secure Gateway 7.5.0 vóór Patch 1862 stelt externe geverifieerde beheerders in staat om willekeurig webscript of HTML via… F-secure
- CVE-2014-0150 MEDIUM · 4.9 Integer-overloop in de virtio_net_handle_mac-functie in hw/net/virtio-net.c in QEMU 2.0 en eerder stelt lokale gastgebruikers in staat om willekeurige code uit te voeren via een Mac-adressen-tabelupdateverzoek,… Qemu Redhat
- CVE-2013-7369 HIGH · 7.5 SQL-injectiekwetsbaarheid in een niet-gespecificeerde DLL in het FSDBCom ActiveX-besturingselement in F-Secure Anti-Virus voor Microsoft Exchange Server vóór HF02, Anti-Virus voor Windows-servers 9.00 vóór HF09, Anti-Virus… F-secure
- CVE-2013-4290 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in OpenJPEG vóór 1.5.2 stelt externe aanvallers in staat om niet-gespecificeerde impact te hebben via onbekende vectoren naar (1) lib/openjp3d/opj_jp3d_compress.c, (2)… Uclouvain
- CVE-2013-4289 HIGH · 10.0 Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow. Uclouvain
- CVE-2012-6646 LOW · 2.1 F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via… F-secure
- CVE-2012-0871 MEDIUM · 6.3 The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink… Systemd Project Opensuse
- CVE-2014-2880 MEDIUM · 5.8 Open redirect-kwetsbaarheid in de Oracle Identity Manager-component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1 en 11.1.2.2 stelt externe aanvallers in staat om gebruikers om te… Oracle
- CVE-2014-2879 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in Dell SonicWALL Email Security 7.4.5 en eerder stellen externe geverifieerde beheerders in staat om willekeurig webscript of HTML te… Sonicwall
- CVE-2014-2707 HIGH · 8.3 cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related… Linuxfoundation
- CVE-2014-2469 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in lighttpd in Oracle Solaris 11.1 stelt aanvallers in staat om een denial of service te veroorzaken via onbekende vectoren. Oracle
- CVE-2014-2310 MEDIUM · 5.0 The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object… Net-snmp
- CVE-2014-1933 LOW · 2.1 The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files… Python Pythonware
- CVE-2014-1932 MEDIUM · 4.4 De (1) load_djpeg-functie in JpegImagePlugin.py, (2) Ghostscript-functie in EpsImagePlugin.py, (3) load-functie in IptcImagePlugin.py en (4) _copy-functie in Image.py in Python Image Library (PIL) 1.1.7 en… Python Pythonware
- CVE-2014-0984 MEDIUM · 4.3 The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry… Sap
- CVE-2014-0111 MEDIUM · 6.5 Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions,… Apache
- CVE-2014-0085 LOW · 2.1 JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users.… Redhat
- CVE-2014-0071 MEDIUM · 6.4 PackStack in Red Hat OpenStack 4.0 dwingt de standaardbeveiligingsgroepen niet af wanneer deze worden geïmplementeerd in Neutron, waardoor externe aanvallers de beoogde toegangsbeperkingen kunnen omzeilen… Redhat
- CVE-2014-0054 MEDIUM · 6.8 De Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework vóór 3.2.8 en 4.0.0 vóór 4.0.2 schakelt de resolutie van externe entiteiten niet uit, waardoor externe aanvallers… Springsource Vmware
- CVE-2014-0036 MEDIUM · 6.8 De rbovirt gem voor 0.0.24 voor Ruby gebruikt de rest-client gem met SSL-verificatie uitgeschakeld, waarmee externe aanvallers man-in-the-middle-aanvallen kunnen uitvoeren via niet-gespecificeerde vectoren. Amos Benari
- CVE-2013-2143 MEDIUM · 6.5 The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users… Redhat Theforeman
- CVE-2011-3154 LOW · 1.9 DistUpgrade/DistUpgradeViewKDE.py in Update Manager vóór 1: 0.87.31.1, 1: 0.134.x vóór 1: 0.134.11.1, 1: 0.142.x vóór 1: 0.142.23.1, 1: 0.150.x vóór 1: 0.150.5.1 en 1: 0.152.x… Canonical
- CVE-2014-0645 MEDIUM · 4.7 EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin… Emc
- CVE-2014-0644 HIGH · 7.8 EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration… Emc
- CVE-2013-4694 HIGH · 7.5 Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Nullsoft
- CVE-2014-2338 MEDIUM · 6.4 IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the… Strongswan
- CVE-2014-1453 MEDIUM · 4.0 The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a… Freebsd
- CVE-2013-1764 LOW · 2.1 The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method. Packagekit Project
- CVE-2011-4406 LOW · 3.6 The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified… Canonical
- CVE-2011-4195 HIGH · 7.5 kiwi vóór 4.98.05, zoals gebruikt in SUSE Studio Onsite 1.2 vóór 1.2.1 en SUSE Studio Extension for System z 1.2 vóór 1.2.1, stelt aanvallers in… Suse
- CVE-2011-4193 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before… Suse
- CVE-2011-4192 HIGH · 7.5 kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to… Suse
- CVE-2011-4089 MEDIUM · 4.6 The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to… Bzip
- CVE-2011-3180 HIGH · 7.5 kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to… Suse
- CVE-2011-0993 LOW · 2.1 SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors. Novell
- CVE-2011-0460 MEDIUM · 6.3 The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Kbd-project Opensuse
- CVE-2014-2471 MEDIUM · 4.3 Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner… Oracle
- CVE-2014-2470 HIGH · 7.5 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and… Oracle
- CVE-2014-2468 MEDIUM · 4.3 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to… Oracle
- CVE-2014-2467 LOW · 3.5 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown… Oracle