CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0071 MEDIUM · 6.4 PackStack in Red Hat OpenStack 4.0 dwingt de standaardbeveiligingsgroepen niet af wanneer deze worden geïmplementeerd in Neutron, waardoor externe aanvallers de beoogde toegangsbeperkingen kunnen omzeilen… Redhat
- CVE-2014-0054 MEDIUM · 6.8 De Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework vóór 3.2.8 en 4.0.0 vóór 4.0.2 schakelt de resolutie van externe entiteiten niet uit, waardoor externe aanvallers… Springsource Vmware
- CVE-2014-0036 MEDIUM · 6.8 De rbovirt gem voor 0.0.24 voor Ruby gebruikt de rest-client gem met SSL-verificatie uitgeschakeld, waarmee externe aanvallers man-in-the-middle-aanvallen kunnen uitvoeren via niet-gespecificeerde vectoren. Amos Benari
- CVE-2013-2143 MEDIUM · 6.5 The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users… Redhat Theforeman
- CVE-2011-3154 LOW · 1.9 DistUpgrade/DistUpgradeViewKDE.py in Update Manager vóór 1: 0.87.31.1, 1: 0.134.x vóór 1: 0.134.11.1, 1: 0.142.x vóór 1: 0.142.23.1, 1: 0.150.x vóór 1: 0.150.5.1 en 1: 0.152.x… Canonical
- CVE-2014-0645 MEDIUM · 4.7 EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin… Emc
- CVE-2014-0644 HIGH · 7.8 EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration… Emc
- CVE-2013-4694 HIGH · 7.5 Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Nullsoft
- CVE-2014-2338 MEDIUM · 6.4 IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the… Strongswan
- CVE-2014-1453 MEDIUM · 4.0 The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a… Freebsd
- CVE-2013-1764 LOW · 2.1 The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method. Packagekit Project
- CVE-2011-4406 LOW · 3.6 The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified… Canonical
- CVE-2011-4195 HIGH · 7.5 kiwi vóór 4.98.05, zoals gebruikt in SUSE Studio Onsite 1.2 vóór 1.2.1 en SUSE Studio Extension for System z 1.2 vóór 1.2.1, stelt aanvallers in… Suse
- CVE-2011-4193 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before… Suse
- CVE-2011-4192 HIGH · 7.5 kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to… Suse
- CVE-2011-4089 MEDIUM · 4.6 The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to… Bzip
- CVE-2011-3180 HIGH · 7.5 kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to… Suse
- CVE-2011-0993 LOW · 2.1 SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors. Novell
- CVE-2011-0460 MEDIUM · 6.3 The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Kbd-project Opensuse
- CVE-2014-2471 MEDIUM · 4.3 Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner… Oracle
- CVE-2014-2470 HIGH · 7.5 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and… Oracle
- CVE-2014-2468 MEDIUM · 4.3 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to… Oracle
- CVE-2014-2467 LOW · 3.5 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown… Oracle
- CVE-2014-2466 LOW · 2.1 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality via unknown… Oracle
- CVE-2014-2465 MEDIUM · 4.3 Niet-gespecificeerde kwetsbaarheid in de Oracle Agile PLM Framework-component in Oracle Supply Chain Products Suite 9.3.3 stelt externe aanvallers in staat om de integriteit te beïnvloeden… Oracle
- CVE-2014-2464 LOW · 3.5 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3.0 allows remote authenticated users to affect confidentiality via unknown… Oracle
- CVE-2014-2463 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via… Oracle
- CVE-2014-2461 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote… Oracle
- CVE-2014-2460 MEDIUM · 4.0 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote… Oracle
- CVE-2014-2459 LOW · 3.7 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.2 and 6.3.3 allows local users to affect confidentiality, integrity, and… Oracle
- CVE-2014-2458 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via… Oracle
- CVE-2014-2457 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via… Oracle
- CVE-2014-2455 MEDIUM · 6.0 Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via… Oracle
- CVE-2014-2454 MEDIUM · 4.3 Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to… Oracle
- CVE-2014-2453 MEDIUM · 4.3 Ongespecificeerde kwetsbaarheid in de Hyperion Common Admin-component in Oracle Hyperion 11.1.2.2 en 11.1.2.3 stelt externe aanvallers in staat om de integriteit te beïnvloeden via onbekende… Oracle
- CVE-2014-2452 MEDIUM · 4.0 Een niet nader gespecificeerde kwetsbaarheid in de Oracle Access Manager-component van Oracle Fusion Middleware 11.1.1.5 stelt externe geauthenticeerde gebruikers in staat de beschikbaarheid te beïnvloeden… Oracle
- CVE-2014-2451 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.6.15 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren met… Oracle
- CVE-2014-2450 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.6.15 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren met… Oracle
- CVE-2014-2449 MEDIUM · 4.0 Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and 9.2 allows remote authenticated users to affect… Oracle
- CVE-2014-2448 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in de PeopleSoft Enterprise PT PeopleTools-component in Oracle PeopleSoft Products 8.52 en 8.53 stelt externe aanvallers in staat om de vertrouwelijkheid te beïnvloeden… Oracle
- CVE-2014-2447 MEDIUM · 5.0 Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors… Oracle
- CVE-2014-2446 MEDIUM · 4.0 Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via vectors… Oracle
- CVE-2014-2445 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in de Oracle Agile PLM Framework-component in Oracle Supply Chain Products Suite 9.3.3 stelt externe geverifieerde gebruikers in staat om de integriteit te… Oracle
- CVE-2014-2444 MEDIUM · 6.5 Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to InnoDB. Oracle
- CVE-2014-2443 MEDIUM · 4.3 Niet-gespecificeerde kwetsbaarheid in de PeopleSoft Enterprise PT PeopleTools-component in Oracle PeopleSoft Products 8.52 en 8.53 stelt externe aanvallers in staat om de integriteit te beïnvloeden… Oracle
- CVE-2014-2442 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.6.15 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via vectoren gerelateerd aan… Oracle
- CVE-2014-2441 MEDIUM · 4.4 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.32, 4.2.24, and 4.3.10 allows local users to affect confidentiality, integrity, and… Oracle
- CVE-2014-2440 MEDIUM · 5.1 Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and… Oracle Mariadb Redhat
- CVE-2014-2439 MEDIUM · 6.4 Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect confidentiality and integrity via… Oracle
- CVE-2014-2438 LOW · 3.5 Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Oracle Mariadb Redhat