CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2182 MEDIUM · 6.1 Cisco Adaptive Security Appliance (ASA) Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service (device reload) via a crafted… Cisco
- CVE-2014-2180 MEDIUM · 4.0 De component Documentbeheer in Cisco Unified Contact Center Express valideert een parameter niet correct, waardoor op afstand geverifieerde gebruikers bestanden kunnen uploaden naar willekeurige padnamen… Cisco
- CVE-2014-1843 MEDIUM · 5.0 Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an… Southrivertech
- CVE-2014-1842 MEDIUM · 5.0 Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go… Southrivertech
- CVE-2014-1841 MEDIUM · 5.0 Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder… Southrivertech
- CVE-2014-0515 HIGH · 10.0 Bufferoverloop in Adobe Flash Player vóór 11.7.700.279 en 11.8.x tot en met 13.0.x vóór 13.0.0.206 op Windows en OS X, en vóór 11.2.202.356 op Linux,… Adobe Linux Apple Microsoft
- CVE-2014-0113 HIGH · 7.5 CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote… Apache
- CVE-2014-0112 HIGH · 7.5 ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute… Apache
- CVE-2014-3008 HIGH · 10.0 Unitrends Enterprise Backup 7.3.0 stelt externe geverifieerde gebruikers in staat om willekeurige opdrachten uit te voeren via shell-metakarakters in de comm-parameter naar recoveryconsole/bpl/snmpd.php. Unitrends
- CVE-2014-2986 MEDIUM · 5.5 The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users… Xen
- CVE-2014-2980 MEDIUM · 4.3 Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which… Gnustep
- CVE-2014-2846 HIGH · 7.5 Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute… Westerndigital
- CVE-2014-2715 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in vwroomstemplateslogout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject arbitrary web script or HTML… Videowhisper
- CVE-2014-2658 MEDIUM · 5.0 Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors. Papercut
- CVE-2014-2657 HIGH · 7.5 Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors, related to embedded MFPs. Papercut
- CVE-2014-2383 MEDIUM · 6.8 dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and… Dompdf
- CVE-2014-2042 HIGH · 7.5 Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated users to execute arbitrary code by uploading a… Livetecs
- CVE-2014-1217 HIGH · 7.5 Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and… Livetecs
- CVE-2014-0187 HIGH · 9.0 Met het openvswitch-agent-proces in OpenStack Neutron 2013.1 vóór 2013.2.4 en 2014.1 vóór 2014.1.1 kunnen op afstand geverifieerde gebruikers beveiligingsgroepbeperkingen omzeilen via een ongeldige CIDR in… Openstack Canonical Opensuse
- CVE-2014-0079 MEDIUM · 5.0 De ValidateUserLogon-functie in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0 en eerder, bij het gebruik van bepaalde bouwvoorwaarden, stelt externe aanvallers in staat om een denial of… Zarafa
- CVE-2014-0037 MEDIUM · 5.0 Met de ValidateUserLogon-functie in provider/libserver/ECSession.cpp in Zarafa 5.00 vóór 7.1.8 beta2 kunnen externe aanvallers een denial of service (crash) veroorzaken via vectoren die verband houden… Zarafa
- CVE-2013-4285 LOW · 2.1 A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by… Dkorunic
- CVE-2014-2285 MEDIUM · 4.3 The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd… Net-snmp
- CVE-2013-6053 MEDIUM · 5.0 OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. Uclouvain
- CVE-2013-0296 MEDIUM · 4.4 Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of… Zlib
- CVE-2011-3603 MEDIUM · 4.4 De routeradvertentiedaemon (radvd) vóór 1.8.2 behandelt fouten in de privsep_init-functie niet correct, waardoor de radvd-daemon als root wordt uitgevoerd en een niet-gespecificeerde impact heeft. Litech
- CVE-2011-3602 MEDIUM · 6.4 Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite… Litech
- CVE-2014-3007 HIGH · 10.0 Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related… Python Pythonware
- CVE-2014-0162 MEDIUM · 6.0 The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to… Openstack
- CVE-2013-6887 MEDIUM · 6.4 OpenJPEG 1.5.1 stelt externe aanvallers in staat om een denial of service te veroorzaken via niet-gespecificeerde vectoren die NULL pointer dereferences, division-by-zero en andere fouten… Uclouvain
- CVE-2011-3152 MEDIUM · 6.4 DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does… Canonical
- CVE-2010-5105 LOW · 3.3 Het ongedaan maken van het opslaan van de afsluitroutine in de kernel in Blender 2.5, 2.63a en eerder stelt lokale gebruikers in staat om willekeurige… Blender
- CVE-2014-1766 HIGH · 9.3 Met Microsoft Internet Explorer 9 tot en met 11 kunnen aanvallers op afstand willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een… Microsoft
- CVE-2014-1765 HIGH · 7.6 Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt… Microsoft
- CVE-2014-1764 HIGH · 10.0 Met Microsoft Internet Explorer 7 tot en met 11 kunnen aanvallers op afstand willekeurige code uitvoeren en een sandbox-beveiligingsmechanisme omzeilen door gebruik te maken van… Microsoft
- CVE-2014-1763 HIGH · 10.0 Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors,… Microsoft
- CVE-2014-1762 HIGH · 7.5 Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism… Microsoft
- CVE-2014-2994 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 stelt externe aanvallers in staat om willekeurige code uit te voeren via… Acunetix
- CVE-2012-4410 NONE Reden voor afwijzing: GEBRUIK DIT KANDIDAATNUMMER NIET. ConsultID's: geen. Reden: Deze kandidaat is door zijn CNA teruggetrokken. Opmerkingen: geen
- CVE-2014-2889 MEDIUM · 4.6 Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a… Linux
- CVE-2014-0181 LOW · 2.1 De Netlink-implementatie in de Linux-kernel via 3.14.1 biedt geen mechanisme voor het autoriseren van socketbewerkingen op basis van de opener van een socket, waarmee lokale… Linux Opensuse Redhat Suse
- CVE-2014-1735 HIGH · 7.5 Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux,… Google Apple Microsoft Linux
- CVE-2014-1734 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of… Google Apple Microsoft Linux
- CVE-2014-1733 HIGH · 7.5 De PointerCompare-functie in codegen.cc in Seccomp-BPF, zoals gebruikt in Google Chrome vóór 34.0.1847.131 op Windows en OS X en vóór 34.0.1847.132 op Linux, voegt blokken… Google Apple Microsoft Linux
- CVE-2014-1732 HIGH · 7.5 Use-after-free kwetsbaarheid in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome vóór 34.0.1847.131 op Windows en OS X en vóór 34.0.1847.132 op Linux stelt externe aanvallers in staat om… Google Apple Microsoft Linux
- CVE-2014-1731 HIGH · 7.5 core/html/HTMLSelectElement.cpp in de DOM-implementatie in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.131 op Windows en OS X en vóór 34.0.1847.132 op Linux, controleert de… Google Apple Microsoft Linux
- CVE-2014-1730 HIGH · 7.8 Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata,… Google Apple Microsoft Linux
- CVE-2014-2993 MEDIUM · 6.4 The Birebin.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Birebin
- CVE-2014-2992 MEDIUM · 6.4 The Misli.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Misli
- CVE-2014-0350 MEDIUM · 6.4 The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records… Pocoproject