CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1957 MEDIUM · 6.5 FortiGuard FortiWeb vóór 5.0.3 stelt op afstand geverifieerde gebruikers in staat om privileges te verkrijgen via niet-gespecificeerde vectoren. Fortinet
- CVE-2014-1956 MEDIUM · 5.0 CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Fortinet
- CVE-2014-1955 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in FortiGuard FortiWeb vóór 5.0.3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Fortinet
- CVE-2014-0471 MEDIUM · 5.0 Directory traversal kwetsbaarheid in de uitpakfunctionaliteit in dpkg vóór 1.15.9, 1.16.x vóór 1.16.13 en 1.17.x vóór 1.17.8 stelt externe aanvallers in staat om willekeurige bestanden… Debian Canonical
- CVE-2014-0470 HIGH · 7.2 super.c in Super 3.30.0 controleert niet de retourwaarde van de setuid-functie wanneer de -F-vlag is ingesteld, waardoor lokale gebruikers privileges kunnen verkrijgen via niet-gespecificeerde vectoren,… Super Project
- CVE-2013-6990 HIGH · 9.0 FortiGuard FortiAuthenticator before 3.0 stelt externe beheerders in staat om privileges te verkrijgen via de opdrachtregelinterface. Fortinet
- CVE-2013-6445 MEDIUM · 5.0 Cumin (ook bekend als MRG Management Console), zoals gebruikt in Red Hat Enterprise MRG 2.5, gebruikt de DES-gebaseerde cryptfunctie om wachtwoorden te hashen, wat het… Redhat
- CVE-2014-2545 MEDIUM · 5.0 Tibco Managed File Transfer Internet Server voor 7.2.2, Managed File Transfer Command Center voor 7.2.2, Slingshot voor 1.9.1 en Vault voor 1.0.1 stellen externe aanvallers… Tibco
- CVE-2014-2186 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka… Cisco
- CVE-2014-1532 CRITICAL · 9.8 Use-after-free kwetsbaarheid in de nsHostResolver:: ConditionallyRefreshRecord-functie in libxul.so in Mozilla Firefox vóór 29.0, Firefox ESR 24.x vóór 24.5, Thunderbird vóór 24.5 en SeaMonkey vóór 2.26… Mozilla Fedoraproject Canonical Debian
- CVE-2014-1531 HIGH · 8.8 Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote… Mozilla Canonical Debian Redhat
- CVE-2014-1530 MEDIUM · 6.1 The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger… Mozilla Fedoraproject Canonical Debian
- CVE-2014-1529 HIGH · 8.8 The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to… Mozilla Canonical Debian Redhat
- CVE-2014-1528 HIGH · 10.0 De functie sse2_composite_src_x888_8888 in Pixman, zoals gebruikt in Caïro in Mozilla Firefox 28.0 en SeaMonkey 2.25 op Windows, stelt aanvallers op afstand in staat om… Canonical Opensuse Opensuse Project Oracle
- CVE-2014-1527 MEDIUM · 5.0 Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the… Fedoraproject Mozilla Google Oracle
- CVE-2014-1526 MEDIUM · 6.8 Met de XrayWrapper-implementatie in Mozilla Firefox vóór 29.0 en SeaMonkey vóór 2.26 kunnen door de gebruiker ondersteunde externe aanvallers de beoogde toegangsbeperkingen omzeilen via een… Mozilla Canonical Opensuse Fedoraproject
- CVE-2014-1525 HIGH · 9.3 De functie mozilla::dom::TextTrack::AddCue in Mozilla Firefox vóór versie 29.0 en SeaMonkey vóór versie 2.26 voert geen correcte garbage collection uit voor variabelen van Text Track… Mozilla Canonical Opensuse Fedoraproject
- CVE-2014-1524 CRITICAL · 9.8 The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether… Mozilla Canonical Debian Redhat
- CVE-2014-1523 MEDIUM · 6.5 Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows… Mozilla Fedoraproject Debian Canonical
- CVE-2014-1522 HIGH · 9.3 De mozilla::dom:: OscillatorNodeEngine:: ComputeCustom-functie in het Web Audio-subsysteem in Mozilla Firefox vóór 29.0 en SeaMonkey vóór 2.26 stelt externe aanvallers in staat om willekeurige code… Fedoraproject Canonical Opensuse Mozilla
- CVE-2014-1520 MEDIUM · 6.9 maintenservice_installer.exe in de Maintenance Service Installer in Mozilla Firefox voor 29.0 en Firefox ESR 24.x voor 24.5 op Windows stelt lokale gebruikers in staat om… Mozilla Microsoft Fedoraproject
- CVE-2014-1519 HIGH · 9.3 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service… Mozilla Canonical Opensuse Fedoraproject
- CVE-2014-1518 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow… Mozilla Fedoraproject Canonical Debian
- CVE-2014-0364 MEDIUM · 5.0 De ParseRoster-component in de Ignite Realtime Smack XMPP API vóór 4.0.0-rc1 verifieert niet het from-attribuut van een roosterquery IQ stanza, waarmee externe aanvallers IQ-reacties kunnen… Igniterealtime
- CVE-2014-0363 MEDIUM · 5.8 The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers,… Igniterealtime
- CVE-2014-0114 HIGH · 7.5 Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the… Apache
- CVE-2013-7373 HIGH · 7.5 Android voor 4.4 zorgt niet goed voor seeding van de OpenSSL PRNG, wat het voor aanvallers gemakkelijker maakt om cryptografische beschermingsmechanismen te verslaan door gebruik… Google
- CVE-2013-7372 MEDIUM · 5.0 The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture (JCA) in Android before… Apache Google
- CVE-2013-1804 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to… Php-fusion
- CVE-2014-2853 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via… Mediawiki
- CVE-2014-0088 HIGH · 7.5 The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code… F5
- CVE-2013-7302 MEDIUM · 6.8 Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option… Ubercart Drupal
- CVE-2013-7284 MEDIUM · 6.8 The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request,… Malcolm Nooning
- CVE-2013-7273 LOW · 2.1 GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login)… Gnome
- CVE-2013-7259 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as… Neo4j
- CVE-2013-7236 HIGH · 7.5 Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username. Simplemachines
- CVE-2013-7235 HIGH · 7.5 Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters. Simplemachines
- CVE-2013-7234 MEDIUM · 4.3 Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header. Simplemachines
- CVE-2013-7221 MEDIUM · 4.6 The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically… Gnome
- CVE-2013-7220 MEDIUM · 4.6 js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus… Gnome
- CVE-2013-7134 HIGH · 7.5 Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related… Phusion
- CVE-2013-7111 MEDIUM · 5.0 The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command… Basespace Ruby Sdk Project
- CVE-2013-7068 MEDIUM · 4.9 The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to… Organic Groups Project
- CVE-2013-7066 MEDIUM · 4.3 The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that… Entity Reference Project
- CVE-2013-7065 MEDIUM · 5.8 The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group… Organic Groups Project
- CVE-2013-7064 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance… Freelance-it-consultant
- CVE-2013-7063 MEDIUM · 5.0 The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views. Invitation Project
- CVE-2014-2185 MEDIUM · 4.0 The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous… Cisco
- CVE-2014-2184 MEDIUM · 5.0 The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka… Cisco
- CVE-2014-2183 MEDIUM · 6.3 The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP… Cisco