CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2543 HIGH · 7.5 Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before… Tibco
- CVE-2014-2542 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd) en Rendezvous Secure Routing Daemon (rvsrd) in Tibco… Tibco
- CVE-2014-2541 MEDIUM · 5.0 The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance… Tibco
- CVE-2012-6645 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers… Danielb
- CVE-2012-6644 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in ClipBucket 2.6 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) Cat parameter… Clip-bucket
- CVE-2012-6643 HIGH · 7.5 Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter… Clip-bucket
- CVE-2012-6642 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. NOTE: the… Clip-bucket
- CVE-2012-1561 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web… Danielb
- CVE-2012-0033 MEDIUM · 5.0 The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service (crash) via… Znc
- CVE-2011-5278 HIGH · 7.5 SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the… Advanced Forum Signatures Project
- CVE-2011-5277 HIGH · 7.5 Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands… Advanced Forum Signatures Project
- CVE-2011-4958 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web… Silverstripe
- CVE-2012-6641 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules/socolissimo/) in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML… Prestashop
- CVE-2012-2095 MEDIUM · 6.9 De SetWiredProperty-functie in de D-Bus-interface in WICD vóór 1.7.2 stelt lokale gebruikers in staat om willekeurige configuratie-instellingen te schrijven en privileges te verkrijgen via een… David Paleino Fedoraproject
- CVE-2012-1834 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de functie cms_tpv_admin_head in functions.php in de CMS Tree Page View-plug-in vóór 0.8.9 voor WordPress stelt externe aanvallers in staat… Cms Tree Page View Project
- CVE-2013-5680 MEDIUM · 6.8 Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child… Lee Howard
- CVE-2013-1946 MEDIUM · 4.3 The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned… Restful Web Services Project Drupal
- CVE-2012-6640 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to… Horde
- CVE-2012-5567 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Horde Kronolith Calendar Application H4 vóór 3.0.18, zoals gebruikt in Horde Groupware Webmail Edition vóór 4.0.9, stellen externe aanvallers… Horde
- CVE-2012-5566 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Horde Kronolith Calendar Application H4 vóór 3.0.17, zoals gebruikt in Horde Groupware Webmail Edition vóór 4.0.8, stellen externe aanvallers… Horde
- CVE-2012-5565 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote… Horde
- CVE-2001-1593 LOW · 2.1 The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify… Gnu
- CVE-2014-2730 MEDIUM · 5.0 The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during… Microsoft
- CVE-2014-2600 MEDIUM · 4.0 Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used,… Hp
- CVE-2014-2145 MEDIUM · 4.0 Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access… Cisco
- CVE-2014-2144 MEDIUM · 6.1 Cisco IOS XR beperkt ICMPv6-omleidingspakketten niet correct, waardoor externe aanvallers een denial of service (IPv4- en IPv6-transituitval) kunnen veroorzaken via vervaardigde omleidingsberichten, ook bekend als… Cisco
- CVE-2014-0827 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Ibm
- CVE-2014-0337 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de webinterface op Huawei Echo Life HG8247-routers met software vóór V100R006C00SPC127 stelt externe aanvallers in staat om willekeurig webscript of… Huawei
- CVE-2014-2210 HIGH · 7.5 Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information, bypass intended access restrictions, cause a denial of… Ca
- CVE-2014-2143 MEDIUM · 5.0 The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted… Cisco
- CVE-2014-2117 MEDIUM · 4.3 Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing… Cisco
- CVE-2014-2116 MEDIUM · 4.3 Cisco Emergency Responder (ER) 8.6 en eerder stelt externe aanvallers in staat om webpagina's te injecteren en dynamische inhoud te wijzigen via niet-gespecificeerde parameters, ook… Cisco
- CVE-2014-2115 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of… Cisco
- CVE-2014-2114 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2014-0789 MEDIUM · 5.0 Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5… Schneider-electric
- CVE-2014-0638 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or… Emc
- CVE-2014-0637 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users… Emc
- CVE-2014-0592 HIGH · 7.5 Barclamp (ook bekend als barclamp-netwerk) 1.7 voor het Crowbar Framework, zoals gebruikt in SUSE Cloud 3, maakt geen netfilter op bruggen mogelijk bij het maken… Crowbar Novell
- CVE-2013-3930 HIGH · 9.3 Op stapels gebaseerde bufferoverloop in Core FTP vóór 2.2 build 1785 stelt externe FTP-servers in staat om willekeurige code uit te voeren via een vervaardigde… Coreftp
- CVE-2013-2287 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in views/notify.php in de Uploader-plug-in 1.0.4 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Roberta Bramski
- CVE-2012-6429 HIGH · 10.0 Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a… Samsung
- CVE-2012-5648 HIGH · 7.5 Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb,… Theforeman
- CVE-2012-4920 MEDIUM · 5.0 Een directory traversal-kwetsbaarheid in de functie zing_forum_output in forum.php van de Zingiri Forum (ook bekend als Forums) plugin voor WordPress vóór versie 1.4.4 stelt externe… Zingiri Wordpress
- CVE-2014-2340 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that… Xcloner
- CVE-2014-0466 MEDIUM · 6.8 The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute… Gnu
- CVE-2014-0093 MEDIUM · 5.8 Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file,… Redhat
- CVE-2013-7352 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL… B2evolution
- CVE-2013-0735 HIGH · 7.5 Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the… Cartpauj Wordpress
- CVE-2014-1313 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple Safari vóór 6.1.3 en 7.x vóór 7.0.3, stelt externe aanvallers in staat om willekeurige code uit te voeren of een… Apple
- CVE-2014-1312 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple Safari vóór 6.1.3 en 7.x vóór 7.0.3, stelt externe aanvallers in staat om willekeurige code uit te voeren of een… Apple