CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2175 HIGH · 7.8 Cisco TelePresence TC Software 4.x en 5.x en TE Software 4.x en 6.0 stellen externe aanvallers in staat om een denial of service (geheugenverbruik) te… Cisco
- CVE-2014-2173 HIGH · 7.2 Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local… Cisco
- CVE-2014-2172 MEDIUM · 6.6 Bufferoverloop in Cisco TelePresence TC Software 4.x en 5.x en TE Software 4.x en 6.0 stelt lokale gebruikers in staat om privileges te verkrijgen door… Cisco
- CVE-2014-2171 HIGH · 10.0 Op heap gebaseerde bufferoverloop in Cisco TelePresence TC Software 4.x tot en met 6.x vóór 6.0.1 en TE Software 4.x en 6.0.x vóór 6.0.2 stelt… Cisco
- CVE-2014-2170 HIGH · 9.0 Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute… Cisco
- CVE-2014-2169 HIGH · 9.0 Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using… Cisco
- CVE-2014-2168 HIGH · 7.6 Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted… Cisco
- CVE-2014-2167 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of… Cisco
- CVE-2014-2166 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via… Cisco
- CVE-2014-2165 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of… Cisco
- CVE-2014-2164 HIGH · 7.8 De SIP-implementatie in Cisco TelePresence TC Software 4.x en 5.x en TE Software 4.x en 6.0 stelt externe aanvallers in staat om een denial of… Cisco
- CVE-2014-2163 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device… Cisco
- CVE-2014-2162 HIGH · 7.8 The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of… Cisco
- CVE-2014-2161 HIGH · 7.8 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2014-2160 HIGH · 7.8 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2014-2159 HIGH · 7.8 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2014-2158 HIGH · 7.8 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug… Cisco
- CVE-2014-2157 HIGH · 7.1 Cisco TelePresence System MXP Series Software vóór F9.3.1 stelt externe aanvallers in staat om een denial of service (herladen van het apparaat) te veroorzaken via… Cisco
- CVE-2014-2156 HIGH · 7.1 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug… Cisco
- CVE-2014-1989 MEDIUM · 6.0 Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Cybozu
- CVE-2014-1988 LOW · 3.5 The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified… Cybozu
- CVE-2014-1443 MEDIUM · 4.0 Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with… Coreftp
- CVE-2014-1442 MEDIUM · 4.0 Directory traversal kwetsbaarheid in Core FTP Server 1.2 vóór build 515 stelt op afstand geverifieerde gebruikers in staat om het bestaan van willekeurige bestanden te… Coreftp
- CVE-2014-1441 MEDIUM · 4.3 Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command… Coreftp
- CVE-2013-7110 MEDIUM · 4.3 Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an… Transifex
- CVE-2013-2073 MEDIUM · 4.3 Transifex-opdrachtregelclient vóór 0.9 valideert geen X.509-certificaten, waardoor man-in-the-middle-aanvallers een Transifex-server kunnen vervalsen via een willekeurig certificaat. Transifex
- CVE-2014-3138 MEDIUM · 6.5 SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3… Xerox
- CVE-2014-0942 LOW · 3.5 Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2014-0941 LOW · 3.5 Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2014-0896 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request. Ibm
- CVE-2014-0859 MEDIUM · 5.0 The web-server plugin in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows… Ibm
- CVE-2014-0857 MEDIUM · 4.0 The Administrative Console in IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via… Ibm
- CVE-2014-0823 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL. Ibm
- CVE-2014-0646 MEDIUM · 6.9 The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03,… Emc
- CVE-2013-6323 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and… Ibm
- CVE-2014-2882 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in de beheer-GUI in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór 9.3-66.5 en 10.x vóór 10.1-122.17 heeft niet-gespecificeerde impact en… Citrix
- CVE-2014-2881 HIGH · 10.0 Niet gespecificeerde kwetsbaarheid in de Diffie-Hellman sleutelovereenkomst implementatie in de management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór… Citrix
- CVE-2013-7374 MEDIUM · 4.6 The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the… Canonical
- CVE-2014-0786 HIGH · 7.5 Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. Ecava
- CVE-2014-2260 LOW · 3.5 Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command… Ajenti
- CVE-2013-1807 MEDIUM · 5.0 PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain… Php-fusion
- CVE-2013-1806 MEDIUM · 6.5 Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include and execute arbitrary files via a .. (dot dot) in the… Php-fusion
- CVE-2014-3135 MEDIUM · 4.3 Meerdere XSS-kwetsbaarheden (cross-site scripting) in vBulletin 5.1.1 Alpha 9 stellen externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via (1) de PATH_INFO… Vbulletin
- CVE-2014-3134 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de InfoView-applicatie in SAP BusinessObjects stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Sap
- CVE-2014-3133 MEDIUM · 5.0 SAP Netweaver Java Application Server beperkt de toegang niet goed, waardoor externe aanvallers de lijst met SAP-systemen die op een SLD zijn geregistreerd, kunnen verkrijgen… Sap
- CVE-2014-3132 MEDIUM · 4.0 SAP Background Processing beperkt de toegang niet op de juiste manier, waardoor op afstand geverifieerde gebruikers gevoelige informatie kunnen verkrijgen via een niet-gespecificeerde RFC-functie, gerelateerd… Sap
- CVE-2014-3131 MEDIUM · 4.0 SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP… Sap
- CVE-2014-3130 MEDIUM · 4.6 De ABAP Help documentatie- en vertaaltools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server beperken de toegang niet goed, waardoor lokale gebruikers privileges kunnen… Sap
- CVE-2014-3129 MEDIUM · 5.0 Met de Java Server-pagina's in de Software Lifecycle Manager (SLM) in SAP NetWeaver kunnen externe aanvallers gevoelige informatie verkrijgen via een vervaardigd verzoek, gerelateerd aan… Sap
- CVE-2014-2565 MEDIUM · 6.5 The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to… Bluecoat