CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3042 MEDIUM · 4.0 IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause… Ibm
- CVE-2014-4012 MEDIUM · 5.0 SAP Open Hub Service heeft hardgecodeerde referenties, waardoor externe aanvallers gemakkelijker toegang kunnen krijgen via niet-gespecificeerde vectoren. Sap
- CVE-2014-4011 MEDIUM · 5.0 SAP Capacity Leveling heeft hardgecodeerde referenties, waardoor het voor externe aanvallers gemakkelijker wordt om toegang te krijgen via niet-gespecificeerde vectoren. Sap
- CVE-2014-4010 MEDIUM · 5.0 SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4009 MEDIUM · 5.0 SAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4008 MEDIUM · 5.0 SAP Web Services Tool (CA-WUI-WST) has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4007 MEDIUM · 5.0 The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4006 MEDIUM · 5.0 The SAP Trader's and Scheduler's Workbench (TSW) for SAP Oil & Gas has hardcoded credentials, which makes it easier for remote attackers to obtain access… Sap
- CVE-2014-4005 MEDIUM · 5.0 SAP Brazil add-on has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4004 MEDIUM · 5.0 De (1) Structuren en (2) Projectgeoriënteerde inkoopcomponenten in het SAP-projectsysteem hebben hardgecodeerde referenties, waardoor het voor externe aanvallers gemakkelijker wordt om toegang te krijgen via… Sap
- CVE-2014-4003 HIGH · 7.5 Met de System Landscape Directory (SLD) in SAP NetWeaver kunnen aanvallers op afstand informatie wijzigen via vectoren die verband houden met het toevoegen van een… Sap
- CVE-2013-7323 HIGH · 7.5 python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Vinay Sajip
- CVE-2013-6223 LOW · 2.1 LiveZilla vóór 5.1.1.0 slaat de admin Base64 gecodeerde gebruikersnaam en wachtwoord op in een 1click-bestand, waarmee lokale gebruikers toegang kunnen krijgen door het bestand te… Livezilla
- CVE-2013-5760 MEDIUM · 5.0 QNAP Photo Station vóór firmware 4.0.3 build0912 stelt externe aanvallers in staat om gebruikersaccounts van het besturingssysteem te vermelden via een verzoek aan photo/p/api/list.php. Qnap
- CVE-2013-4599 MEDIUM · 4.3 De Misery-module 6.x-2.x vóór 6.x-2.5 en 7.x-2.x vóór 7.x-2.2 voor Drupal, wanneer de configuratie "delay misery" is ingesteld op een hoge waarde, stelt externe aanvallers… Misery Project
- CVE-2013-4597 MEDIUM · 4.0 The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows… Rik De Boer
- CVE-2013-4595 MEDIUM · 4.3 De module Beveiligde pagina's 6.x-2.x vóór 6.x-2.0 voor Drupal komt niet goed overeen met URL's, waardoor HTTP wordt gebruikt in plaats van HTTPS en het… Gordon Heydon
- CVE-2013-3082 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in plugins/jojo_core/forgot_password.php in Jojo vóór 1.2.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de zoekparameter… Jojocms
- CVE-2013-3081 HIGH · 7.5 SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP… Jojocms
- CVE-2013-2564 MEDIUM · 5.0 Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file. Mambo-foundation
- CVE-2013-2563 LOW · 2.1 Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file. Mambo-foundation
- CVE-2013-2562 LOW · 2.1 Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors. Mambo-foundation
- CVE-2013-1973 MEDIUM · 4.0 The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node… Autocomplete Widgets Project
- CVE-2013-1756 HIGH · 7.5 The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code… Mark Evans Ruby On Rails
- CVE-2014-3977 MEDIUM · 6.9 libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file.… Ibm
- CVE-2014-3048 MEDIUM · 6.0 Unspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local users to gain privileges by leveraging the TSSC service-user role to enter a… Ibm
- CVE-2014-3038 LOW · 3.6 IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging… Ibm
- CVE-2014-3036 MEDIUM · 4.3 Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and… Ibm
- CVE-2014-0936 MEDIUM · 4.3 IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which… Ibm
- CVE-2014-0929 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary… Ibm
- CVE-2014-3986 LOW · 3.3 include/tests_webservers in Lynis vóór 1.5.5 stelt lokale gebruikers in staat om willekeurige bestanden te overschrijven via een symlink-aanval op een /tmp/lynis.*.ongesorteerd bestand met een gemakkelijk… Cisofy
- CVE-2014-3982 LOW · 3.3 include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file. Cisofy
- CVE-2014-3981 LOW · 3.3 acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the… Php
- CVE-2014-0961 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0… Ibm
- CVE-2014-3291 MEDIUM · 5.7 Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value… Cisco
- CVE-2014-3286 MEDIUM · 5.0 The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information… Cisco
- CVE-2014-3281 MEDIUM · 5.0 Het webframework in VOSS in Cisco Unified Communications Domain Manager (CDM) implementeert toegangscontrole niet goed, waardoor externe aanvallers mogelijk gevoelige gebruikersinformatie kunnen verkrijgen door een… Cisco
- CVE-2014-3278 MEDIUM · 5.0 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to enumerate accounts… Cisco
- CVE-2014-2508 HIGH · 7.5 EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to conduct… Emc
- CVE-2014-2507 HIGH · 8.5 Met EMC Documentum Content Server vóór 6.7 SP1 P28, 6.7 SP2 vóór P14, 7.0 vóór P15 en 7.1 vóór P05 kunnen op afstand geverifieerde gebruikers… Emc
- CVE-2014-2506 HIGH · 8.5 Met EMC Documentum Content Server vóór 6.7 SP1 P28, 6.7 SP2 vóór P14, 7.0 vóór P15 en 7.1 vóór P05 kunnen op afstand geverifieerde gebruikers… Emc
- CVE-2014-3984 HIGH · 10.0 Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors. Libav
- CVE-2014-3966 LOW · 2.6 Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to… Mediawiki
- CVE-2014-2575 MEDIUM · 6.5 Directory traversal kwetsbaarheid in de File Manager component in DevExpress ASPxFileManager Control voor ASP.NET WebForms en MVC vóór 13.1.10 en 13.2.x vóór 13.2.9 stelt externe… Devexpress
- CVE-2013-4728 MEDIUM · 5.0 DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a .. (dot dot)… Ddsn
- CVE-2013-4727 MEDIUM · 5.0 DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 en mogelijk andere versies, stelt aanvallers op afstand in staat om gevoelige informatie te verkrijgen via… Ddsn
- CVE-2013-4725 MEDIUM · 5.0 DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an… Ddsn
- CVE-2013-4724 MEDIUM · 5.0 DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 en mogelijk andere versies, bevat niet de HTTPOnly-vlag in een Set-Cookie-header voor een niet-gespecificeerde cookie, waardoor… Ddsn
- CVE-2013-2602 HIGH · 9.3 Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to execute arbitrary code via the (1) seTokensArray, or (2)… Myheritage
- CVE-2013-0250 MEDIUM · 5.0 The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial… Corosync