CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1320 MEDIUM · 4.9 IOKit in Apple iOS vóór 7.1.1, Apple OS X tot en met 10.9.2 en Apple TV vóór 6.1.1 plaatst kernelwijzers in een objectdatastructuur, waardoor het… Apple
- CVE-2014-1319 MEDIUM · 6.8 Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application… Apple
- CVE-2014-1318 HIGH · 10.0 The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via… Apple
- CVE-2014-1316 MEDIUM · 5.0 Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon exit) via ASN.1 data… Apple
- CVE-2014-1315 MEDIUM · 6.8 Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service… Apple
- CVE-2014-1314 HIGH · 10.0 WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism… Apple
- CVE-2014-1296 MEDIUM · 4.3 CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is… Apple
- CVE-2014-1295 MEDIUM · 6.8 Beveiligd transport in Apple iOS vóór 7.1.1, Apple OS X 10.8.x en 10.9.x tot en met 10.9.2 en Apple TV vóór 6.1.1 garandeert niet dat… Apple
- CVE-2012-5427 MEDIUM · 4.0 Cisco IOS Unified Border Element (CUBE) in Cisco IOS vóór 15.3(2)T stelt op afstand geverifieerde gebruikers in staat om een denial of service (invoerwachtrijwig) te… Cisco
- CVE-2012-5422 MEDIUM · 6.8 Niet-gespecificeerde kwetsbaarheid in Cisco IOS vóór 15.3(2)T op AS5400-apparaten stelt op afstand geverifieerde gebruikers in staat om een denial of service (valse fouten) te veroorzaken… Cisco
- CVE-2012-5044 MEDIUM · 5.4 Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption)… Cisco
- CVE-2012-5039 MEDIUM · 4.3 The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path… Cisco
- CVE-2012-5037 MEDIUM · 4.6 The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload)… Cisco
- CVE-2012-5036 MEDIUM · 6.8 Cisco IOS vóór 12.2(50)SY1 stelt op afstand geverifieerde gebruikers in staat om een denial of service (geheugenverbruik) te veroorzaken via een reeks VTY-beheersessies (ook bekend… Cisco
- CVE-2012-5032 MEDIUM · 6.4 The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding… Cisco
- CVE-2012-5017 MEDIUM · 6.8 Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed… Cisco
- CVE-2012-5014 MEDIUM · 6.3 Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and… Cisco
- CVE-2012-4658 MEDIUM · 5.0 The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that… Cisco
- CVE-2012-4651 MEDIUM · 4.3 Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied… Cisco
- CVE-2012-4638 MEDIUM · 4.9 Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318. Cisco
- CVE-2012-3918 MEDIUM · 4.3 Cisco IOS vóór versie 15.3(1)T op Cisco 2900-apparaten, wanneer een VWIC2-2MFT-T1/E1-kaart is geconfigureerd voor TDM/HDLC-modus, maakt het voor externe aanvallers mogelijk om een denial-of-service-aanval (uitval… Cisco
- CVE-2012-3062 MEDIUM · 5.7 Cisco IOS vóór 15.1(1)SY, wanneer Multicast Listener Discovery (mld) snooping is ingeschakeld, stelt externe aanvallers in staat om een denial of service (CPU-verbruik of apparaatcrash)… Cisco
- CVE-2012-1366 MEDIUM · 6.1 Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial… Cisco
- CVE-2012-1317 MEDIUM · 5.4 The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a… Cisco
- CVE-2012-0360 MEDIUM · 5.0 Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted… Cisco
- CVE-2014-2900 MEDIUM · 5.8 wolfSSL CyaSSL vóór 2.9.4 valideert X.509-certificaten niet goed met onbekende kritieke extensies, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen via een vervaardigd X.509-certificaat. Yassl
- CVE-2014-2899 MEDIUM · 5.0 wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when… Yassl
- CVE-2014-2892 HIGH · 7.5 Op heap gebaseerde bufferoverloop in de get_answer-functie in mmsh.c in libmms vóór 0.6.4 stelt externe aanvallers in staat om willekeurige code uit te voeren via… Libmms Project
- CVE-2014-2890 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the… Siege
- CVE-2014-2737 HIGH · 7.5 SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL… Knowledgetree
- CVE-2014-2659 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication… Papercut
- CVE-2014-2654 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1)… Mobfox
- CVE-2014-1615 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Carbon Black vóór 4.1.0 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Carbonblack
- CVE-2013-7338 HIGH · 7.1 Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than… Python Apple
- CVE-2013-4472 LOW · 3.3 De openTempFile-functie in goo/gfile.cc in Xpdf en Poppler 0.24.3 en eerder, bij gebruik op een ander systeem dan Unix, stelt lokale gebruikers in staat om… Freedesktop
- CVE-2013-4116 LOW · 3.3 lib/npm.js in Node Packaged Modules (npm) vóór 1.3.3 stelt lokale gebruikers in staat om willekeurige bestanden te overschrijven via een symlink-aanval op tijdelijke bestanden met… Node Packaged Modules Project
- CVE-2013-2187 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via… Apache
- CVE-2013-2105 LOW · 3.3 Met de Show In Browser (show_in_browser) gem 0.0.3 voor Ruby kunnen lokale gebruikers willekeurig webscript of HTML injecteren via een symlink-aanval op /tmp/browser.html. Jonathan Leung
- CVE-2013-1421 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Craig Knudsen WebCalendar vóór 1.2.5, 1.2.6 en andere versies vóór 1.2.7 stelt externe aanvallers in staat om willekeurig webscript of… Webcalendar Project
- CVE-2014-2925 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web… T-mobile Asus
- CVE-2014-2735 MEDIUM · 5.8 WinSCP vóór 5.5.3, wanneer FTP met TLS wordt gebruikt, controleert niet of de hostnaam van de server overeenkomt met een domeinnaam in het veld Common… Winscp
- CVE-2014-2719 MEDIUM · 6.3 Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator… Asus T-mobile
- CVE-2014-2341 MEDIUM · 6.8 Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter. Cubecart
- CVE-2014-2269 MEDIUM · 6.4 modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 stelt externe aanvallers in staat om het wachtwoord voor willekeurige gebruikers opnieuw in te stellen via een… Vtiger
- CVE-2014-1216 HIGH · 7.5 FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing… Fitnesse
- CVE-2014-0173 MEDIUM · 5.8 The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2,… Automattic
- CVE-2013-6469 MEDIUM · 6.5 JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression.… Redhat
- CVE-2013-6371 MEDIUM · 5.0 The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. Json-c Fedoraproject
- CVE-2013-6370 MEDIUM · 5.0 Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. Json-c Fedoraproject
- CVE-2013-5948 HIGH · 8.5 The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary… T-mobile Asus