CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-1822 LOW · 2.1 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via… Owncloud
- CVE-2013-1399 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet… Puppet Puppetlabs
- CVE-2013-1398 HIGH · 8.5 The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated… Puppet Puppetlabs
- CVE-2012-5158 MEDIUM · 4.0 Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via… Puppet Puppetlabs
- CVE-2012-0891 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject… Puppet
- CVE-2014-2324 MEDIUM · 5.0 Meerdere kwetsbaarheden voor directorytraversal in (1) mod_evhost en (2) mod_simple_vhost in lighttpd vóór 1.4.35 stellen externe aanvallers in staat om willekeurige bestanden te lezen via… Lighttpd Debian Opensuse Suse
- CVE-2014-2323 CRITICAL · 9.8 SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. Lighttpd Debian Opensuse Suse
- CVE-2014-2292 HIGH · 7.2 Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before… Juniper
- CVE-2014-2291 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de Pulse Collaboration (Secure Meeting) gebruikerspagina's in Juniper Junos Pulse Secure Access Service (ook bekend als SSL VPN) met IVE… Juniper
- CVE-2014-2270 MEDIUM · 4.3 softmagic.c in bestand vóór 5.17 en libmagic stelt contextafhankelijke aanvallers in staat om een denial of service (toegang tot geheugen buiten de grenzen en crash)… File Project Php Debian Canonical
- CVE-2014-0467 MEDIUM · 5.0 Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related… Mutt Opensuse
- CVE-2014-0017 LOW · 1.9 The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which… Libssh
- CVE-2013-6476 MEDIUM · 4.4 The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse… Canonical Debian Fedoraproject Linuxfoundation
- CVE-2013-6475 MEDIUM · 6.8 Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary… Canonical Debian Fedoraproject Linuxfoundation
- CVE-2013-6474 MEDIUM · 6.8 Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file. Linuxfoundation Canonical Debian Fedoraproject
- CVE-2013-6473 MEDIUM · 6.8 Meerdere op heap gebaseerde bufferoverlopen in het urftopdf-filter in cups-filters 1.0.25 vóór 1.0.47 stellen externe aanvallers in staat om willekeurige code uit te voeren via… Canonical Linuxfoundation
- CVE-2013-0307 LOW · 3.5 Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via… Owncloud
- CVE-2013-0298 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted iCalendar… Owncloud
- CVE-2013-0297 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote authenticated administrators to inject arbitrary web script or HTML via… Owncloud
- CVE-2014-2325 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the (1) state… Proxmox
- CVE-2014-2024 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in classes/controller/error.php in Open Classifieds 2 before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO… Openclassifieds
- CVE-2013-2671 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via… Brother
- CVE-2013-2670 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Brother MFC-9970CDW-printer met firmware G (1.03) en L (1.10) stelt externe aanvallers in staat om willekeurig webscript of HTML… Brother
- CVE-2013-2507 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de Brother MFC-9970CDW-printer met firmware G (1.03) stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Brother
- CVE-2013-1759 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Responsive Logo Slideshow-plug-in voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het… Opensource Technologies
- CVE-2013-1758 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad… Marekkis
- CVE-2014-2319 MEDIUM · 5.0 The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier… Powerarchiver
- CVE-2014-2265 MEDIUM · 5.0 Rock Lobster Contact Form 7 voor 3.7.2 stelt externe aanvallers in staat om het captcha-beschermingsmechanisme te omzeilen en willekeurige formuliergegevens in te dienen door de… Rocklobster Wordpress
- CVE-2014-1294 MEDIUM · 6.8 WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of… Apple
- CVE-2014-1293 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1 en Apple TV vóór 6.1, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-1292 MEDIUM · 6.8 WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of… Apple
- CVE-2014-1291 MEDIUM · 6.8 WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of… Apple
- CVE-2014-1290 MEDIUM · 6.8 WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of… Apple
- CVE-2014-1289 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 7.1 en Apple TV vóór 6.1, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-1287 HIGH · 7.2 USB Host in Apple iOS vóór 7.1 en Apple TV vóór 6.1 staat fysiek nabije aanvallers toe om willekeurige code uit te voeren of een… Apple
- CVE-2014-1286 MEDIUM · 5.0 SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service (lock-screen hang) by leveraging a state-management error. Apple
- CVE-2014-1285 MEDIUM · 5.8 Springboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended access restrictions and read the home screen by leveraging an application crash… Apple
- CVE-2014-1282 MEDIUM · 5.8 The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name. Apple
- CVE-2014-1281 LOW · 1.9 Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo… Apple
- CVE-2014-1280 HIGH · 7.1 De videostuurprogramma's in Apple iOS vóór versie 7.1 en Apple TV vóór versie 6.1 stellen externe aanvallers in staat een denial-of-service-aanval (dereferentie van een NULL-pointer… Apple
- CVE-2014-1279 LOW · 2.1 Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data. Apple
- CVE-2014-1278 HIGH · 7.2 The ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause… Apple
- CVE-2014-1276 MEDIUM · 5.0 IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an… Apple
- CVE-2014-1275 MEDIUM · 6.8 Bufferoverloop in ImageIO in Apple iOS vóór 7.1 en Apple TV vóór 6.1 stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-1274 LOW · 2.1 FaceTime in Apple iOS vóór 7.1 stelt fysiek naaste aanvallers in staat om gevoelige FaceTime-contactinformatie te verkrijgen door het vergrendelingsscherm te gebruiken voor een ongeldig… Apple
- CVE-2014-1273 MEDIUM · 5.8 dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a… Apple
- CVE-2014-1272 MEDIUM · 6.3 Met CrashHouseKeeping in Crash Reporting in Apple iOS vóór 7.1 en Apple TV vóór 6.1 kunnen lokale gebruikers willekeurige bestandsmachtigingen wijzigen door gebruik te maken… Apple
- CVE-2014-1271 HIGH · 7.8 CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial… Apple
- CVE-2014-1267 MEDIUM · 5.8 The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration… Apple
- CVE-2014-0784 HIGH · 8.3 Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Yokogawa