CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0633 HIGH · 7.7 De GUI in EMC VPLEX GeoSynchrony 4.x en 5.x voor 5.3 valideert de sessietime-outwaarden niet goed, wat het voor externe aanvallers gemakkelijker zou kunnen maken… Emc
- CVE-2014-0632 HIGH · 9.0 Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors. Emc
- CVE-2014-0050 HIGH · 7.5 MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of… Oracle Apache
- CVE-2013-0662 HIGH · 9.3 Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large… Schneider-electric Schneider Electric
- CVE-2014-2034 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Sonatype Nexus Oss en Pro 2.4.0 tot 2.7.1 stelt aanvallers in staat om willekeurige gebruikersaccounts aan te maken via onbekende vectoren met… Sonatype
- CVE-2013-7349 HIGH · 7.5 Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter to news/send.php, (2) thread_id parameter… Raoul Proenca
- CVE-2013-5640 HIGH · 7.5 Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) answer_id or (2) question_id parameter to polls/vote.php,… Raoul Proenca
- CVE-2013-2278 HIGH · 10.0 Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and… Jgaa
- CVE-2009-5141 MEDIUM · 4.0 Format string kwetsbaarheid in War FTP Daemon (warftpd) 1.82 RC 12 stelt op afstand geverifieerde gebruikers in staat om een denial of service (crash) te… Jgaa
- CVE-2014-2671 MEDIUM · 6.8 Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a… Microsoft
- CVE-2013-6775 HIGH · 10.0 Het Chainfire SuperSU-pakket voor Android vóór versie 1.69 stelt aanvallers in staat om privileges te verkrijgen via de (1) backtick of (2) $() type shell-metatekens… Chainfire Google
- CVE-2013-6774 HIGH · 10.0 Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and… Chainfire Google Androidsu Koushik Dutta
- CVE-2013-6770 HIGH · 7.6 The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon… Koushik Dutta Google
- CVE-2013-6769 HIGH · 10.0 The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su. Koushik Dutta Google
- CVE-2013-6768 MEDIUM · 5.0 Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse… Koushik Dutta Google
- CVE-2013-7347 LOW · 3.7 Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading… Redhat
- CVE-2012-3359 LOW · 3.7 Luci in Red Hat Conga slaat de gebruikersnaam en het wachtwoord van de gebruiker op in een Base64-gecodeerde tekenreeks in de __ac sessiecookie, waarmee aanvallers… Redhat
- CVE-2014-1982 HIGH · 10.0 De administratieve interface in Allied Telesis AT-RG634A ADSL Breedbandrouter 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4 en iMG646BD firmware 3.5 stelt externe aanvallers in staat… Alliedtelesis
- CVE-2014-0983 MEDIUM · 6.9 Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D… Oracle
- CVE-2014-0981 MEDIUM · 4.4 VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local… Oracle
- CVE-2014-2669 MEDIUM · 6.5 Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to… Postgresql
- CVE-2014-0086 MEDIUM · 4.3 De doFilter-functie in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5 en 5.x stelt externe aanvallers in staat om een denial of service (geheugenverbruik en out-of-memory fout)… Redhat
- CVE-2014-0067 MEDIUM · 4.6 The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a… Apple Postgresql
- CVE-2014-0066 MEDIUM · 4.0 De chkpass-extensie in PostgreSQL vóór 8.4.20, 9.0.x vóór 9.0.16, 9.1.x vóór 9.1.12, 9.2.x vóór 9.2.7 en 9.3.x vóór 9.3.3 controleert de retourwaarde van de cryptbibliotheekfunctie… Postgresql
- CVE-2014-0065 MEDIUM · 6.5 Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to… Postgresql
- CVE-2014-0064 MEDIUM · 6.5 Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x… Postgresql
- CVE-2014-0063 MEDIUM · 6.5 Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users… Postgresql
- CVE-2014-0062 MEDIUM · 4.9 Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before… Postgresql
- CVE-2014-0061 MEDIUM · 6.5 Met de validatiefuncties voor de proceduretalen (PL's) in PostgreSQL vóór 8.4.20, 9.0.x vóór 9.0.16, 9.1.x vóór 9.1.12, 9.2.x vóór 9.2.7 en 9.3.x vóór 9.3.3 kunnen… Postgresql
- CVE-2014-0060 MEDIUM · 4.0 PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which… Postgresql
- CVE-2014-2670 LOW · 3.5 Cross-site scripting (XSS) vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to inject arbitrary web script or HTML via… Zohocorp
- CVE-2014-1516 MEDIUM · 5.0 The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0.1 on Android relies on Android's weak approach to seeding the Math.random function, which makes it… Mozilla Google
- CVE-2014-0344 MEDIUM · 6.5 Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using… Zohocorp
- CVE-2014-2131 MEDIUM · 6.1 The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems… Cisco
- CVE-2014-1645 HIGH · 7.5 SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands… Symantec
- CVE-2014-1644 HIGH · 7.5 The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by… Symantec
- CVE-2014-0880 HIGH · 7.5 IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2… Ibm
- CVE-2013-6211 HIGH · 7.8 Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System… Hp
- CVE-2014-2668 MEDIUM · 5.0 Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids. Apache
- CVE-2014-2599 MEDIUM · 4.9 The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x for 64-bit allow local guest administrators to cause a denial of… Xen
- CVE-2014-2525 MEDIUM · 6.8 Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters… Pyyaml Opensuse
- CVE-2014-0133 HIGH · 7.5 Op heap gebaseerde bufferoverloop in de SPDY-implementatie in nginx 1.3.15 vóór 1.4.7 en 1.5.x vóór 1.5.12 stelt externe aanvallers in staat om willekeurige code uit… F5 Opensuse
- CVE-2013-2695 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML… Wpsymposiumpro
- CVE-2013-2694 MEDIUM · 5.8 Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct… Wpsymposiumpro
- CVE-2013-0807 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or… Gpeasy
- CVE-2013-0734 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via… Cartpauj Wordpress
- CVE-2014-2118 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary… Cisco
- CVE-2014-2113 HIGH · 7.8 Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote… Cisco
- CVE-2014-2112 HIGH · 7.8 Met de SSL VPN-functie (ook bekend als WebVPN) in Cisco IOS 15.1 tot en met 15.4 kunnen externe aanvallers een denial of service (geheugenverbruik) veroorzaken… Cisco
- CVE-2014-2111 HIGH · 7.1 De Application Layer Gateway (alg) -module in Cisco IOS 12.2 tot en met 12.4 en 15.0 tot en met 15.4, wanneer nat wordt gebruikt, stelt… Cisco