CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1513 HIGH · 8.8 TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during… Mozilla Debian Suse Opensuse
- CVE-2014-1512 HIGH · 10.0 Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey… Mozilla Debian Canonical Redhat
- CVE-2014-1511 CRITICAL · 9.8 Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via… Mozilla Canonical Debian Redhat
- CVE-2014-1510 CRITICAL · 9.8 Met de Web IDL-implementatie in Mozilla Firefox vóór 28.0, Firefox ESR 24.x vóór 24.4, Thunderbird vóór 24.4 en SeaMonkey vóór 2.25 kunnen externe aanvallers willekeurige… Mozilla Canonical Debian Redhat
- CVE-2014-1509 HIGH · 8.8 Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey… Mozilla Redhat Canonical Suse
- CVE-2014-1508 CRITICAL · 9.1 The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain… Mozilla Redhat Debian Canonical
- CVE-2014-1507 HIGH · 9.3 Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify… Oracle Mozilla
- CVE-2014-1506 MEDIUM · 6.4 Directory traversal kwetsbaarheid in Android Crash Reporter in Mozilla Firefox vóór 28.0 op Android stelt aanvallers in staat om de overdracht van lokale bestanden naar… Mozilla Google Oracle
- CVE-2014-1505 HIGH · 7.5 The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to… Mozilla Canonical Debian Redhat
- CVE-2014-1504 LOW · 2.6 The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes… Mozilla Opensuse Oracle Suse
- CVE-2014-1502 MEDIUM · 6.8 Met de functies (1) WebGL.compressedTexImage2D en (2) WebGL.compressedTexSubImage2D in Mozilla Firefox vóór 28.0 en SeaMonkey vóór 2.25 kunnen externe aanvallers het Same Origin Policy omzeilen… Opensuse Opensuse Project Suse Oracle
- CVE-2014-1501 MEDIUM · 5.8 Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open… Oracle Mozilla Google Suse
- CVE-2014-1500 MEDIUM · 5.0 Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events… Opensuse Opensuse Project Oracle Mozilla
- CVE-2014-1499 MEDIUM · 4.3 Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission… Suse Mozilla Oracle Opensuse
- CVE-2014-1498 MEDIUM · 5.0 De crypto.generateCRMFRequest-methode in Mozilla Firefox vóór 28.0 en SeaMonkey vóór 2.25 valideert een bepaald type sleutel niet correct, waardoor externe aanvallers een denial of service… Suse Oracle Opensuse Opensuse Project
- CVE-2014-1497 HIGH · 8.8 The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain… Mozilla Debian Suse Opensuse
- CVE-2014-1496 MEDIUM · 5.5 Mozilla Firefox vóór 28.0, Firefox ESR 24.x vóór 24.4, Thunderbird vóór 24.4 en SeaMonkey vóór 2.25 kunnen lokale gebruikers privileges geven door de geëxtraheerde MAR-inhoud… Mozilla Suse
- CVE-2014-1494 HIGH · 9.3 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service… Mozilla Suse Oracle Opensuse
- CVE-2014-1493 CRITICAL · 9.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow… Mozilla Canonical Debian Redhat
- CVE-2014-2122 MEDIUM · 5.0 Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory… Cisco
- CVE-2014-2121 MEDIUM · 5.0 The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors,… Cisco
- CVE-2014-2537 HIGH · 7.8 Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption)… Sophos
- CVE-2014-2536 MEDIUM · 4.3 Directory traversal vulnerability in McAfee Cloud Identity Manager 3.0, 3.1, and 3.5.1, McAfee Cloud Single Sign On (MCSSO) before 4.0.1, and Intel Expressway Cloud Access… Intel Mcafee
- CVE-2014-2535 MEDIUM · 4.0 Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary… Mcafee
- CVE-2014-2241 MEDIUM · 6.8 De (1) cf2_initLocalRegionBuffer en (2) cf2_initGlobalRegionBuffer-functies in cff/cf2ft.c in FreeType vóór 2.5.3 controleren niet goed of er een subroutine bestaat, waardoor externe aanvallers een denial… Freetype Canonical
- CVE-2014-2087 HIGH · 9.3 Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows… Freedownloadmanager
- CVE-2014-1608 HIGH · 7.5 SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope… Mantisbt Debian
- CVE-2014-0132 MEDIUM · 6.5 The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the… Fedoraproject
- CVE-2014-0057 HIGH · 7.5 The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors. Redhat
- CVE-2013-3938 HIGH · 9.3 Integer-overloop in xnview.exe in XnView 2.13 stelt externe aanvallers in staat om willekeurige code uit te voeren via een groot NUM_Elements-veld in een IFD_entry-structuur in… Xnview
- CVE-2013-2643 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in Sophos Web Appliance vóór 3.7.8.2 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Sophos
- CVE-2013-2642 HIGH · 9.3 Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when… Sophos
- CVE-2013-2641 MEDIUM · 5.0 Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter. Sophos
- CVE-2013-2619 MEDIUM · 5.0 Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot) to the default URI. Aspen
- CVE-2013-0201 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING… Owncloud
- CVE-2012-5650 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject… Apache
- CVE-2012-5641 MEDIUM · 5.0 Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x… Apache Mochiweb Project
- CVE-2014-2534 MEDIUM · 4.9 /sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as… Blackberry
- CVE-2014-2533 HIGH · 7.2 /sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument. Blackberry
- CVE-2014-2532 MEDIUM · 4.2 sshd in OpenSSH voor 6.6 ondersteunt niet goed jokertekens op AcceptEnv-lijnen in sshd_config, waardoor externe aanvallers bedoelde omgevingsbeperkingen kunnen omzeilen door een substring te gebruiken… Oracle Openbsd
- CVE-2014-1976 MEDIUM · 5.8 The Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Yumenomachi
- CVE-2014-1975 MEDIUM · 5.8 Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted… R-company
- CVE-2014-0098 MEDIUM · 5.0 De log_cookie-functie in mod_log_config.c in de mod_log_config-module in de Apache HTTP-server vóór 2.4.8 stelt externe aanvallers in staat om een denial of service (segmentatiefout en… Apache Oracle Canonical
- CVE-2013-6438 MEDIUM · 5.0 The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections,… Apache Oracle Canonical
- CVE-2014-2259 HIGH · 7.8 Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets. Siemens
- CVE-2014-2257 HIGH · 7.8 Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets. Siemens
- CVE-2014-2255 HIGH · 7.8 Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets. Siemens
- CVE-2014-2253 MEDIUM · 6.1 Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets. Siemens
- CVE-2014-2251 HIGH · 8.3 The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote… Siemens
- CVE-2014-2249 MEDIUM · 5.8 Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before… Siemens