CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2012-5583 MEDIUM · 5.8 phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the… Apereo
- CVE-2012-5390 HIGH · 10.0 The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers… Condor Project
- CVE-2014-2503 HIGH · 7.5 The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers… Emc
- CVE-2014-3470 MEDIUM · 4.3 De functie ssl3_send_client_key_exchange in s3_clnt.c in OpenSSL vóór 0.9.8za, 1.0.0 vóór 1.0.0m en 1.0.1 vóór 1.0.1h, wanneer een anonieme ECDH-coderingssuite wordt gebruikt, stelt externe aanvallers… Openssl Redhat Fedoraproject Mariadb
- CVE-2014-0224 HIGH · 7.4 OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use… Openssl Redhat Fedoraproject Opensuse
- CVE-2014-0221 MEDIUM · 4.3 The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service… Openssl Redhat Fedoraproject Mariadb
- CVE-2014-0195 MEDIUM · 6.8 The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello… Openssl Mariadb Opensuse Fedoraproject
- CVE-2014-3969 HIGH · 7.4 Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges… Xen
- CVE-2014-3968 MEDIUM · 5.5 Met de HVMOP_inject_msi-functie in Xen 4.2.x, 4.3.x en 4.4.x kunnen lokale HVM-beheerders een denial of service (hostcrash) veroorzaken via een groot aantal vervaardigde verzoeken, waardoor… Xen Opensuse
- CVE-2014-3967 MEDIUM · 5.5 The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM… Xen Opensuse
- CVE-2014-3469 MEDIUM · 5.0 The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and… Gnu Redhat Debian Suse
- CVE-2014-3468 HIGH · 7.5 The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers… Gnu Redhat Debian Suse
- CVE-2014-3467 MEDIUM · 5.0 Meerdere niet-gespecificeerde kwetsbaarheden in de DER-DECODER in GNU Libtasn1 vóór 3.6, zoals gebruikt in GnuTLS, stellen externe aanvallers in staat om een denial of service… Gnu Redhat Debian Suse
- CVE-2013-4860 HIGH · 8.3 Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation… Radiothermostat
- CVE-2013-3739 MEDIUM · 5.0 Directory traversal kwetsbaarheid in editor.php in Network Weathermap 0.97c en eerder stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot… Network-weathermap
- CVE-2013-2618 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in editor.php in Network Weathermap vóór 0.97b stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Network-weathermap
- CVE-2013-2130 MEDIUM · 4.0 ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork,… Znc
- CVE-2013-0733 HIGH · 9.3 Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL… Corel
- CVE-2012-4728 MEDIUM · 4.3 The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote attackers to cause a… Corel
- CVE-2014-3976 MEDIUM · 5.0 Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service… A10networks
- CVE-2014-3975 MEDIUM · 5.0 Absolute padtraversale kwetsbaarheid in filemanager.php in AuraCMS 3.0 stelt externe aanvallers in staat om een map te vermelden via een volledige padnaam in de viewdir-parameter. Auracms
- CVE-2014-3974 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter. Auracms
- CVE-2014-3973 HIGH · 7.5 Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Frontaccounting
- CVE-2014-3940 MEDIUM · 4.0 The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory… Redhat Linux
- CVE-2014-3917 LOW · 3.3 kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from… Suse Redhat Linux
- CVE-2014-3912 HIGH · 9.3 Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary… Samsung
- CVE-2014-3878 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de webclient-interface in Ipswitch IMail Server 12.3 en 12.4, mogelijk vóór 12.4.1.15, stellen externe aanvallers in staat om willekeurig… Ipswitch
- CVE-2014-2577 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server before 4.3.1 Patch 8 and 5.x before 5.2 Patch… Bottomline
- CVE-2014-2346 MEDIUM · 4.0 COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build… Copadata
- CVE-2014-2345 HIGH · 7.1 COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build… Copadata
- CVE-2014-1998 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via… N-i-agroinformatics
- CVE-2014-1997 HIGH · 7.8 The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors. Aten
- CVE-2014-2051 HIGH · 7.5 ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login… Owncloud
- CVE-2013-0304 MEDIUM · 4.0 ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to… Owncloud
- CVE-2013-0302 MEDIUM · 5.0 Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain sensitive information via unspecified vectors related to "inclusion of the Amazon SDK testing… Owncloud Amazon
- CVE-2012-6143 HIGH · 7.5 Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a… Ingy
- CVE-2012-6142 HIGH · 7.5 Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a… Jochen Wiedmann
- CVE-2012-6141 HIGH · 7.5 The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a… Stephen Adkins
- CVE-2014-3963 MEDIUM · 4.0 ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors. Owncloud
- CVE-2014-3962 HIGH · 7.5 Meerdere kwetsbaarheden voor SQL-injectie in Videos Tube 1.0 stellen externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de URL-parameter naar (1) videocat.php… Videos Tube Project
- CVE-2014-3961 HIGH · 7.5 SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands… Xnau
- CVE-2014-3960 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Opennms
- CVE-2014-3949 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de lay-outwizard in de Grid Elements (gridelements) -extensie vóór 1.5.1 en 2.0.x vóór 2.0.3 voor TYPO3 stelt externe geverifieerde backend-gebruikers… Jo Hasenau Typo3
- CVE-2014-3948 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to… Alex Kellner Typo3
- CVE-2014-3913 HIGH · 10.0 Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. Ericom
- CVE-2014-3838 MEDIUM · 4.0 ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of… Owncloud
- CVE-2014-3837 MEDIUM · 4.0 De documenttoepassing in ownCloud Server vóór 6.0.3 gebruikt sequentiële waarden voor de file_id, waarmee op afstand geverifieerde gebruikers gedeelde bestanden kunnen opsommen via niet-gespecificeerde vectoren. Owncloud
- CVE-2014-3836 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in ownCloud Server vóór 6.0.3 stellen externe aanvallers in staat om de authenticatie van gebruikers te kapen voor verzoeken… Owncloud
- CVE-2014-3835 MEDIUM · 5.5 ownCloud Server vóór 5.0.16 en 6.0.x vóór 6.0.3 controleert de machtigingen voor de files_external applicatie niet, waardoor op afstand geverifieerde gebruikers externe opslag kunnen toevoegen… Owncloud
- CVE-2014-3834 HIGH · 7.5 ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address… Owncloud