CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-4016 MEDIUM · 6.5 SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011,… Ibm
- CVE-2014-3867 MEDIUM · 5.0 The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not include the HTTPOnly flag in a Set-Cookie header for an… Ibm
- CVE-2013-2998 LOW · 3.5 frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to… Ibm
- CVE-2012-3333 MEDIUM · 4.3 CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers… Ibm
- CVE-2014-3014 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de Meeting Server in IBM Sametime 8.x tot 8.5.2.1 en 9.x tot 9.0.0.1 stelt externe geverifieerde gebruikers in staat om… Ibm
- CVE-2014-0906 MEDIUM · 4.3 De Meeting Server in IBM Sametime 8.x tot en met 8.5.2.1 en 9.x tot en met 9.0.0.1 controleert niet of een sessiecookie nog geldig is,… Ibm
- CVE-2013-3984 LOW · 2.9 The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspecified cookie in an… Ibm
- CVE-2013-3982 MEDIUM · 5.0 De Meeting Server in IBM Sametime 8.x t/m 8.5.2.1 en 9.x t/m 9.0.0.1 stelt externe aanvallers in staat om niet-gespecificeerde installatie-informatie en technische gegevens te… Ibm
- CVE-2013-3981 MEDIUM · 5.0 Met de Meeting Server in IBM Sametime 8.x t/m 8.5.2.1 en 9.x t/m 9.0.0.1 kunnen externe aanvallers avatarfoto's van willekeurige gebruikers downloaden via niet-gespecificeerde vectoren. Ibm
- CVE-2013-3980 MEDIUM · 5.0 The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denial of service (room unusability) by… Ibm
- CVE-2013-3977 MEDIUM · 4.3 The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a… Ibm
- CVE-2013-3975 MEDIUM · 5.0 Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names,… Ibm
- CVE-2013-3046 MEDIUM · 4.3 The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for… Ibm
- CVE-2014-3261 HIGH · 7.6 Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before… Cisco
- CVE-2014-3015 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack… Ibm
- CVE-2014-2607 HIGH · 8.5 Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the… Hp
- CVE-2014-2201 HIGH · 7.8 The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers… Cisco
- CVE-2014-2200 HIGH · 7.1 Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within… Cisco
- CVE-2013-1191 HIGH · 7.1 Cisco NX-OS 6.1 vóór 6.1(5) op Nexus 7000-apparaten, wanneer lokale authenticatie en meerdere VDC's zijn ingeschakeld, stelt op afstand geverifieerde gebruikers in staat om privileges… Cisco
- CVE-2014-3276 MEDIUM · 4.0 Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple… Cisco
- CVE-2014-3275 MEDIUM · 6.5 SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated users to execute arbitrary… Cisco
- CVE-2014-3274 MEDIUM · 4.3 Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive… Cisco
- CVE-2014-3272 MEDIUM · 6.0 The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka… Cisco
- CVE-2014-3267 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary… Cisco
- CVE-2014-3266 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML… Cisco
- CVE-2014-2504 HIGH · 9.0 EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to… Emc
- CVE-2014-2196 HIGH · 9.3 Cisco Wide Area Application Services (waas) 5.1.1 vóór 5.1.1e, wanneer SharePoint prefetch-optimalisatie is ingeschakeld, kunnen externe SharePoint-servers willekeurige code uitvoeren via een onjuist geformatteerd antwoord,… Cisco
- CVE-2014-3284 MEDIUM · 6.1 Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed… Cisco
- CVE-2014-0943 HIGH · 7.1 IBM WebSphere Commerce 6.0 Feature Pack 2 tot en met Feature Pack 5, 7.0.0.0 tot en met 7.0.0.8 en 7.0 Feature Pack 1 tot en… Ibm
- CVE-2014-0639 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3 allow remote attackers to inject arbitrary web script or HTML… Emc
- CVE-2014-3849 MEDIUM · 4.3 The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a request containing… Imember360
- CVE-2014-3848 MEDIUM · 5.0 De iMember360-plug-in vóór 3.9.001 voor WordPress beperkt de toegang niet goed, waardoor externe aanvallers databasegegevens kunnen verkrijgen via de parameter i4w_dbinfo. Imember360
- CVE-2014-3801 LOW · 3.5 OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to… Openstack
- CVE-2014-3450 HIGH · 7.2 Niet-gespecificeerde kwetsbaarheid in Panda Gold Protection en Global Protection 2014 7.01.01 en eerder, Internet Security 2014 19.01.01 en eerder, en AV Pro 2014 13.01.01 en… Pandasecurity
- CVE-2014-3442 MEDIUM · 4.3 Winamp 5.666 en eerder stelt externe aanvallers in staat om een denial of service (geheugenbeschadiging en crash) te veroorzaken via een MISVORMD .flv-bestand, gerelateerd aan… Nullsoft
- CVE-2013-4223 MEDIUM · 5.0 The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file. Gentoo
- CVE-2013-2758 MEDIUM · 5.0 Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C uses a hash of a predictable sequence, which makes… Apache Citrix
- CVE-2013-2757 HIGH · 7.5 Citrix CloudPlatform (voorheen Citrix CloudStack) 3.0.x vóór 3.0.6 Patch C beperkt de toegang tot VNC-poorten op het beheernetwerk niet goed, waardoor externe aanvallers via onbekende… Citrix
- CVE-2013-2756 MEDIUM · 5.0 Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication… Apache Citrix
- CVE-2013-2713 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create… Krisonav
- CVE-2013-2712 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter. Krisonav
- CVE-2013-1864 MEDIUM · 4.3 The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote… Opalvoip Ekiga Suse
- CVE-2013-1668 HIGH · 8.5 Met de uploadFile-functie in upload/index.php in CosCMS vóór 1.822 kunnen beheerders op afstand willekeurige opdrachten uitvoeren via shell-metakarakters in de naam van een geüpload bestand. Coscms
- CVE-2013-0289 MEDIUM · 4.3 Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of… Isync Project
- CVE-2012-5649 MEDIUM · 6.8 Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe… Apache
- CVE-2013-2107 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for… Mail On Update Project
- CVE-2010-5299 MEDIUM · 6.8 Op stapels gebaseerde bufferoverloop in MicroP 0.1.1.1600 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd .mppl-bestand. OPMERKING: ER is… Microp Project
- CVE-2014-3789 HIGH · 7.5 GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors. Cogentdatahub
- CVE-2014-3788 HIGH · 7.5 Op heap gebaseerde bufferoverloop in de webserver in Cogent Real-Time Systems Cogent DataHub vóór 7.3.5 stelt externe aanvallers in staat om willekeurige code uit te… Cogentdatahub
- CVE-2012-6648 LOW · 2.1 gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users to delete arbitrary files via a… Gdm-guest-session Project Canonical