CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2922 MEDIUM · 6.4 The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.1.0 does not properly handle an object obtained by unserializing a pathname,… Pimcore
- CVE-2014-2921 HIGH · 7.5 De functie getObjectByToken in Newsletter.php van de module Pimcore_Tool_Newsletter in Pimcore 1.4.9 tot en met 2.0.0 verwerkt een object dat is verkregen door het deserialiseren… Pimcore
- CVE-2014-0932 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users… Ibm
- CVE-2014-0361 LOW · 3.0 De standaardconfiguratie van IBM 4690 OS, zoals gebruikt in Toshiba Global Commerce Solutions 4690 POS en andere producten, bevat wachtwoorden met het ADXCRYPT-algoritme, waardoor het… Toshibacommerce
- CVE-2013-5459 MEDIUM · 5.5 Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated… Ibm
- CVE-2014-2665 MEDIUM · 4.0 includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt,… Mediawiki
- CVE-2014-1517 MEDIUM · 4.0 Het inlogformulier in Bugzilla 2.x, 3.x, 4.x vóór 4.4.3 en 4.5.x vóór 4.5.3 behandelt een correct geverifieerde maar onbedoelde inlogpoging niet correct, waardoor het voor… Mozilla Fedoraproject
- CVE-2014-2155 MEDIUM · 5.0 The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6… Cisco
- CVE-2013-6219 LOW · 3.8 Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors. Hp
- CVE-2013-6218 HIGH · 10.0 Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors. Hp
- CVE-2013-6215 HIGH · 8.5 Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown… Hp
- CVE-2013-6212 MEDIUM · 6.5 Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown… Hp
- CVE-2014-2733 MEDIUM · 5.0 Siemens SINEMA Server vóór 12 SP1 stelt externe aanvallers in staat om een denial of service (storing van de webinterface) te veroorzaken via vervaardigde HTTP-verzoeken… Siemens
- CVE-2014-2732 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP… Siemens
- CVE-2014-2731 HIGH · 9.3 Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic… Siemens
- CVE-2014-1990 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers… Toshibatec
- CVE-2014-1984 MEDIUM · 6.8 De kwetsbaarheid voor sessiefixatie in het beheerscherm in Cybozu Remote Service Manager via 2.3.0 en 3.x vóór 3.1.1 stelt externe aanvallers in staat websessies te… Cybozu
- CVE-2014-1983 HIGH · 7.8 Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via… Cybozu
- CVE-2014-1974 MEDIUM · 6.4 Directory traversal-kwetsbaarheid in de LYSESOFT AndExplorer-applicatie vóór 20140403 en AndExplorerPro-applicatie vóór 20140405 voor Android stelt aanvallers in staat om willekeurige bestanden te overschrijven of te… Lyesoft
- CVE-2014-0778 MEDIUM · 4.3 TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information.… Progea
- CVE-2013-6214 MEDIUM · 4.0 Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via… Hp
- CVE-2013-6213 HIGH · 10.0 Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833. Hp
- CVE-2014-2597 MEDIUM · 4.9 PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to… Remote-rac
- CVE-2014-2522 MEDIUM · 4.0 curl en libcurl 7.27.0 tot en met 7.35.0, wanneer ze op Windows worden uitgevoerd en de SChannel/Winssl TLS-backend gebruiken, verifiëren niet dat de serverhostnaam overeenkomt… Haxx Microsoft
- CVE-2014-2289 LOW · 3.5 res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service (crash) via… Digium
- CVE-2014-2288 MEDIUM · 4.3 The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is enabled on an AOR and the remote SIP server challenges for… Digium
- CVE-2014-2287 LOW · 3.5 channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2,… Digium Fedoraproject
- CVE-2014-2286 HIGH · 7.5 main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2,… Digium Fedoraproject
- CVE-2014-2014 MEDIUM · 4.3 imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain… Imapsync Project
- CVE-2013-7196 MEDIUM · 5.5 static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a… Phpfox
- CVE-2013-7195 MEDIUM · 5.5 PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request that specifies the ID… Phpfox
- CVE-2013-4279 MEDIUM · 5.0 imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site. Imapsync Project
- CVE-2014-2856 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via… Apple
- CVE-2014-2844 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in F-Secure Messaging Secure Gateway 7.5.0 vóór Patch 1862 stelt externe geverifieerde beheerders in staat om willekeurig webscript of HTML via… F-secure
- CVE-2014-0150 MEDIUM · 4.9 Integer-overloop in de virtio_net_handle_mac-functie in hw/net/virtio-net.c in QEMU 2.0 en eerder stelt lokale gastgebruikers in staat om willekeurige code uit te voeren via een Mac-adressen-tabelupdateverzoek,… Qemu Redhat
- CVE-2013-7369 HIGH · 7.5 SQL-injectiekwetsbaarheid in een niet-gespecificeerde DLL in het FSDBCom ActiveX-besturingselement in F-Secure Anti-Virus voor Microsoft Exchange Server vóór HF02, Anti-Virus voor Windows-servers 9.00 vóór HF09, Anti-Virus… F-secure
- CVE-2013-4290 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in OpenJPEG vóór 1.5.2 stelt externe aanvallers in staat om niet-gespecificeerde impact te hebben via onbekende vectoren naar (1) lib/openjp3d/opj_jp3d_compress.c, (2)… Uclouvain
- CVE-2013-4289 HIGH · 10.0 Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow. Uclouvain
- CVE-2012-6646 LOW · 2.1 F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via… F-secure
- CVE-2012-0871 MEDIUM · 6.3 The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink… Systemd Project Opensuse
- CVE-2014-2880 MEDIUM · 5.8 Open redirect-kwetsbaarheid in de Oracle Identity Manager-component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1 en 11.1.2.2 stelt externe aanvallers in staat om gebruikers om te… Oracle
- CVE-2014-2879 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in Dell SonicWALL Email Security 7.4.5 en eerder stellen externe geverifieerde beheerders in staat om willekeurig webscript of HTML te… Sonicwall
- CVE-2014-2707 HIGH · 8.3 cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related… Linuxfoundation
- CVE-2014-2469 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in lighttpd in Oracle Solaris 11.1 stelt aanvallers in staat om een denial of service te veroorzaken via onbekende vectoren. Oracle
- CVE-2014-2310 MEDIUM · 5.0 The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object… Net-snmp
- CVE-2014-1933 LOW · 2.1 The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files… Python Pythonware
- CVE-2014-1932 MEDIUM · 4.4 De (1) load_djpeg-functie in JpegImagePlugin.py, (2) Ghostscript-functie in EpsImagePlugin.py, (3) load-functie in IptcImagePlugin.py en (4) _copy-functie in Image.py in Python Image Library (PIL) 1.1.7 en… Python Pythonware
- CVE-2014-0984 MEDIUM · 4.3 The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry… Sap
- CVE-2014-0111 MEDIUM · 6.5 Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions,… Apache
- CVE-2014-0085 LOW · 2.1 JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users.… Redhat