CVE-database
126.937 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2010-4634 MEDIUM · 5.0 Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a… Enhancesoft
- CVE-2010-4478 CRITICAL · 9.8 OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass… Openbsd
- CVE-2010-3190 HIGH · 7.8 Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and… Apple Microsoft
- CVE-2010-2965 CRITICAL · 9.8 De WDB-doelagent debug-service in Wind River VxWorks 6.x, 5.x en eerder, zoals gebruikt op de Rockwell Automation 1756-ENBT-serie A met firmware 3.2.6 en 3.6.1 en… Rockwellautomation Windriver
- CVE-2010-0606 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in scp/ajax.php in osTicket voor 1.6.0 Stabiel stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren… Enhancesoft Osticket
- CVE-2010-0605 HIGH · 7.5 SQL-injectiekwetsbaarheid in scp/ajax.php in osTicket vóór 1.6.0 Stable stelt op afstand geverifieerde gebruikers, met "Staff" -machtigingen, in staat om willekeurige SQL-opdrachten uit te voeren via… Enhancesoft Osticket
- CVE-2010-0386 HIGH · 8.1 The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers… Sun
- CVE-2009-3555 CRITICAL · 9.8 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP… Apache Gnu Mozilla Openssl
- CVE-2009-3720 MEDIUM · 5.0 The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a… Libexpat Project Python Apache
- CVE-2009-2495 MEDIUM · 6.5 The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005… Microsoft
- CVE-2009-2493 HIGH · 8.8 The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005… Microsoft
- CVE-2009-0901 HIGH · 8.8 The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and… Microsoft
- CVE-2009-2361 HIGH · 7.5 SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter. Enhancesoft
- CVE-2003-1567 HIGH · 7.5 The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which… Microsoft
- CVE-2004-2761 CRITICAL · 9.8 The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the… Ietf
- CVE-2008-5161 LOW · 3.7 Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8;… Openbsd Ssh
- CVE-2008-4309 HIGH · 7.5 Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause… Net-snmp
- CVE-2007-5894 HIGH · 9.3 The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain… Mit
- CVE-2007-0896 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or… Sage
- CVE-2006-5407 HIGH · 7.5 PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. Enhancesoft
- CVE-2006-4339 CRITICAL · 9.1 A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash.… Openssl
- CVE-2006-2389 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-1316 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-0033 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-2936 HIGH · 7.8 The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory… Linux
- CVE-2006-2451 MEDIUM · 4.6 The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of… Linux
- CVE-2006-2910 MEDIUM · 5.1 Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with… Cowon America
- CVE-2006-2934 MEDIUM · 5.0 SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash)… Linux
- CVE-2006-2199 HIGH · 7.6 Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox… Openoffice Sun
- CVE-2006-2198 HIGH · 7.6 OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious… Openoffice Sun
- CVE-2006-2200 MEDIUM · 5.1 Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of… Mimms Xine
- CVE-2006-1471 MEDIUM · 4.6 Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via… Apple
- CVE-2006-1470 MEDIUM · 5.0 OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request… Apple
- CVE-2006-1469 HIGH · 7.5 Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly… Apple
- CVE-2006-1468 MEDIUM · 5.0 Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders… Apple
- CVE-2006-3011 MEDIUM · 4.6 The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a… Php
- CVE-2006-2310 MEDIUM · 5.0 BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file… New Atlanta Communications
- CVE-2006-2918 MEDIUM · 5.0 The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it… Lanap Botdetect
- CVE-2006-3014 MEDIUM · 5.1 Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player… Microsoft
- CVE-2006-3096 HIGH · 7.5 Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm… Ipostmx
- CVE-2006-2656 HIGH · 7.5 Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE:… Libtiff
- CVE-2006-2073 MEDIUM · 5.0 Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated… Isc
- CVE-2006-1283 HIGH · 7.2 opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which… Freebsd
- CVE-2006-0987 MEDIUM · 5.0 The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary… Isc
- CVE-2005-4459 HIGH · 10.0 Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote… Vmware
- CVE-2005-2096 HIGH · 7.5 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description… Zlib
- CVE-2005-1794 MEDIUM · 6.4 Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows… Microsoft
- CVE-2005-1439 HIGH · 7.5 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. Enhancesoft
- CVE-2005-1436 MEDIUM · 6.8 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2)… Enhancesoft
- CVE-1999-1373 MEDIUM · 5.0 FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via… Fore