CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3833 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers… Owncloud
- CVE-2014-3832 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via… Owncloud
- CVE-2014-3786 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via… Lucidcrew
- CVE-2014-2056 HIGH · 7.5 PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or… Owncloud Phpdocx
- CVE-2014-2055 HIGH · 7.5 SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of… Fruux Owncloud
- CVE-2014-2054 HIGH · 7.5 PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote… Owncloud Phpexcel Project
- CVE-2014-2053 HIGH · 7.5 getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of… Getid3 Owncloud
- CVE-2013-1941 MEDIUM · 5.0 The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the… Owncloud
- CVE-2013-0204 MEDIUM · 4.6 settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings. Owncloud
- CVE-2012-5336 MEDIUM · 4.0 lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related… Owncloud
- CVE-2012-5057 MEDIUM · 4.3 CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the url… Owncloud
- CVE-2012-5056 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) readyCallback parameter… Owncloud
- CVE-2014-3956 LOW · 1.9 The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local… Freebsd Hp Fedoraproject Sendmail
- CVE-2014-0935 MEDIUM · 4.6 Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related… Ibm
- CVE-2014-2502 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in rsa_fso.swf in EMC RSA Adaptive Authentication (Hosted) 11.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Emc
- CVE-2014-3959 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller 11.2.1 through 11.5.1,… F5
- CVE-2014-3946 MEDIUM · 4.0 The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users… Typo3
- CVE-2014-3945 MEDIUM · 4.0 The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password… Typo3
- CVE-2014-3944 MEDIUM · 5.8 De authenticatiecomponent in TYPO3 6.2.0 vóór 6.2.3 maakt getimede gebruikerssessies niet correct ongeldig, waardoor externe aanvallers authenticatie via niet-gespecificeerde vectoren kunnen omzeilen. Typo3
- CVE-2014-3943 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0… Typo3
- CVE-2014-3942 MEDIUM · 6.0 The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to… Typo3
- CVE-2014-3941 MEDIUM · 5.0 TYPO3 4.5.0 vóór 4.5.34, 4.7.0 vóór 4.7.19, 6.0.0 vóór 6.0.14, 6.1.0 vóór 6.1.9 en 6.2.0 vóór 6.2.3 stelt externe aanvallers in staat om niet-gespecificeerde impact… Typo3
- CVE-2014-3466 MEDIUM · 6.8 Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a… Gnu
- CVE-2013-0191 MEDIUM · 5.0 libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via… Lucas Clemente Vella
- CVE-2014-3280 MEDIUM · 4.0 Het webframework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) en eerder implementeert toegangscontrole niet correct, waardoor op afstand geverifieerde gebruikers mogelijk gevoelige… Cisco
- CVE-2014-2959 HIGH · 9.0 logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1… Dell Quantum
- CVE-2014-2946 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.858 allows remote attackers to hijack the… Huawei
- CVE-2014-2939 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Alfresco Enterprise vóór 4.1.6.13 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via (1) een… Alfresco
- CVE-2014-3937 HIGH · 7.5 SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Ajaydsouza
- CVE-2014-0042 MEDIUM · 4.3 OpenStack Heat Templates (heat-templates), zoals gebruikt in Red Hat Enterprise Linux OpenStack Platform 4.0, stelt gpgcheck in op 0 voor bepaalde sjablonen, waardoor GPG-handtekeningcontrole op… Redhat
- CVE-2014-0041 MEDIUM · 4.3 OpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets sslverify to false for certain Yum repositories, which disables SSL… Redhat
- CVE-2014-0040 MEDIUM · 4.3 OpenStack Heat Templates (heat-templates), zoals gebruikt in Red Hat Enterprise Linux OpenStack Platform 4.0, gebruikt een HTTP-verbinding om (1) pakketten en (2) ondertekeningssleutels te downloaden… Redhat
- CVE-2013-7387 MEDIUM · 6.8 Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie. Dleviet
- CVE-2013-7386 MEDIUM · 5.0 Format string kwetsbaarheid in het PROJECT::write_account_file functie in client/cs_account.cpp in BOINC, mogelijk 7.2.33, stelt externe aanvallers in staat om een denial of service (crash) te… Universityofcalifornia
- CVE-2013-6470 MEDIUM · 5.0 The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid,… Redhat
- CVE-2013-6433 HIGH · 7.6 De standaardconfiguratie in het Red Hat openstack-neutron-pakket vóór 2013.2.3-7 stelt niet correct een configuratiebestand in voor rootwrap, waarmee externe aanvallers privileges kunnen verkrijgen via een… Openstack Canonical
- CVE-2013-4596 MEDIUM · 5.8 De Node Access Keys-module 7.x-1.x voor 7.x-1.1 voor Drupal controleert de machtigingen niet goed, waardoor externe aanvallers toegangsbeperkingen kunnen omzeilen via een knooppuntvermelding. Danielkorte
- CVE-2013-3476 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de WordPress Related Posts-plug-in vóór 2.6.2 voor WordPress stelt externe aanvallers in staat om de authenticatie van gebruikers te… Zemanta
- CVE-2013-3258 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de Digg Digg-plug-in vóór 5.3.5 voor WordPress stelt externe aanvallers in staat om de authenticatie van gebruikers te kapen… Bufferapp
- CVE-2013-3257 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de plug-in Gerelateerde berichten vóór 2.7.2 voor WordPress stelt externe aanvallers in staat om de authenticatie van gebruikers te… Zemanta
- CVE-2013-2710 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for… Ajaydsouza
- CVE-2013-2298 HIGH · 9.3 Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the… Universityofcalifornia
- CVE-2013-2019 HIGH · 9.3 Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elements. Universityofcalifornia
- CVE-2013-2014 MEDIUM · 5.0 OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests. Openstack Fedoraproject
- CVE-2013-1818 MEDIUM · 5.0 maintenance/mwdoc-filter.php in MediaWiki vóór 1.20.3 stelt aanvallers op afstand in staat om willekeurige bestanden te lezen via niet-gespecificeerde vectoren. Mediawiki
- CVE-2013-1412 HIGH · 7.5 DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function… Dleviet
- CVE-2013-1397 HIGH · 7.5 Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse… Sensiolabs
- CVE-2013-1348 HIGH · 7.5 The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397. Sensiolabs
- CVE-2012-5395 MEDIUM · 6.8 Session fixation vulnerability in the CentralAuth extension for MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions… Mediawiki
- CVE-2012-5391 MEDIUM · 6.8 Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the… Mediawiki