CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2011-5280 MEDIUM · 5.0 Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or… Universityofcalifornia
- CVE-2014-3936 HIGH · 10.0 Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and… Dlink
- CVE-2014-3935 HIGH · 7.5 SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter. Xoops
- CVE-2014-3934 HIGH · 7.5 SQL-injectiekwetsbaarheid in de Submit_News-module voor PHP-Nuke 8.3 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de parameter topics[] naar modules.php. Phpnuke
- CVE-2014-3933 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de veldindeling voor adrescomponenten in de module AddressField Tokens 7.x-1.x vóór 7.x-1.4 voor Drupal stelt op afstand geverifieerde gebruikers in… Newsignature
- CVE-2014-3932 HIGH · 7.5 SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL… Cososys
- CVE-2014-3925 MEDIUM · 5.0 sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext… Canonical Redhat
- CVE-2014-3790 HIGH · 9.0 Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail. Vmware
- CVE-2014-0238 MEDIUM · 5.0 The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of… Php Debian
- CVE-2014-0237 MEDIUM · 5.0 The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of… Php Debian
- CVE-2014-3793 MEDIUM · 5.8 VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when… Vmware
- CVE-2014-0119 MEDIUM · 4.3 Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with… Apache
- CVE-2014-0099 MEDIUM · 4.3 Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers… Apache
- CVE-2014-0096 MEDIUM · 4.3 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows… Apache
- CVE-2014-0095 MEDIUM · 5.0 java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request… Apache
- CVE-2014-0075 MEDIUM · 5.0 Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause… Apache
- CVE-2014-2354 MEDIUM · 6.0 Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a… Cogentdatahub
- CVE-2014-2353 HIGH · 7.1 Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Cogentdatahub
- CVE-2014-2352 HIGH · 7.8 The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a… Cogentdatahub
- CVE-2014-2343 LOW · 1.2 Triangle MicroWorks SCADA Data Gateway before 3.00.0635 stelt fysiek nabije aanvallers in staat om een denial of service (overmatige gegevensverwerking) te veroorzaken via een vervaardigd… Trianglemicroworks
- CVE-2014-2342 MEDIUM · 4.3 Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet. Trianglemicroworks
- CVE-2014-0907 HIGH · 7.2 Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and… Ibm
- CVE-2013-6744 HIGH · 8.5 The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to… Ibm Microsoft
- CVE-2014-0925 LOW · 3.5 Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect… Ibm
- CVE-2014-3865 MEDIUM · 6.4 Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with… Debian
- CVE-2014-3864 MEDIUM · 6.4 Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that… Debian
- CVE-2014-3227 MEDIUM · 6.4 dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature,… Debian
- CVE-2014-3010 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before… Ibm
- CVE-2014-3924 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in Webmin vóór 1.690 en Usermin vóór 1.600 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Webmin
- CVE-2014-3923 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or… Digitalzoomstudio
- CVE-2014-3922 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via… Trendmicro
- CVE-2014-3921 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via… Simple Popup Project
- CVE-2014-3780 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Citrix VDI-In-A-Box 5.3.x vóór 5.3.8 en 5.4.x vóór 5.4.4 stelt externe aanvallers in staat om authenticatie te omzeilen via niet-gespecificeerde vectoren, gerelateerd… Citrix
- CVE-2014-0202 LOW · 2.1 The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dwh) package before 3.3.3, stores the history database password… Redhat
- CVE-2013-6788 HIGH · 7.5 The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to… Bitrix
- CVE-2013-5919 MEDIUM · 5.0 Suricata vóór 1.4.6 stelt aanvallers op afstand in staat om een denial of service (crash) te veroorzaken via een misvormd SSL-record. Oisf Openinfosecfoundation
- CVE-2013-4143 LOW · 2.1 The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by… David Bagley
- CVE-2012-5877 MEDIUM · 5.0 Met Nero MediaHome 4.5.8.0 en eerder kunnen externe aanvallers een denial of service (NULL pointer dereference en crash) veroorzaken via een HTTP-header zonder naam. Nero
- CVE-2012-5876 MEDIUM · 5.0 Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string… Nero
- CVE-2012-5572 MEDIUM · 5.0 CRLF-injectiekwetsbaarheid in de cookiemethode (lib/Dancer/Cookie.pm) in Dancer vóór 1.3114 stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren en HTTP-antwoordsplitsingsaanvallen uit te voeren via… Dancer
- CVE-2012-5560 LOW · 2.1 The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call. Mate-desktop
- CVE-2014-3285 MEDIUM · 5.0 Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to… Cisco
- CVE-2014-3283 MEDIUM · 5.8 Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows… Cisco
- CVE-2014-3282 MEDIUM · 4.0 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control,… Cisco
- CVE-2014-3279 MEDIUM · 5.0 De beheer-GUI in het webframework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) en eerder implementeert toegangscontrole niet correct, waardoor externe aanvallers accountnamen… Cisco
- CVE-2014-3277 MEDIUM · 4.0 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control,… Cisco
- CVE-2014-3417 MEDIUM · 6.5 uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a… Jasig
- CVE-2014-3416 MEDIUM · 6.5 uPortal vóór versie 4.0.13.1 controleert de MANAGE-rechten niet correct, waardoor externe geauthenticeerde gebruikers willekeurige portlets kunnen beheren door gebruik te maken van de SUBSCRIBE-rechten voor… Jasig
- CVE-2014-3415 MEDIUM · 6.5 SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the invite_users[] parameter to the /invite page for… Sharetronix
- CVE-2014-3414 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authentication of administrators for requests that add administrative privileges to… Sharetronix