CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3152 HIGH · 7.5 Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause… Fedoraproject Google
- CVE-2014-1749 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in Google Chrome vóór 35.0.1916.114 stellen aanvallers in staat om een denial of service te veroorzaken of mogelijk andere impact te hebben… Google
- CVE-2014-1748 MEDIUM · 5.0 The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting… Google
- CVE-2014-1747 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary… Google
- CVE-2014-1746 MEDIUM · 5.0 The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a… Google
- CVE-2014-1745 HIGH · 7.1 Use-after-free kwetsbaarheid in de SVG-implementatie in Blink, zoals gebruikt in Google Chrome vóór 35.0.1916.114, stelt externe aanvallers in staat om een denial of service te… Google
- CVE-2014-1744 HIGH · 7.5 Integer-overloop in de AudioInputRendererHost:: OnCreateStream-functie in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome vóór 35.0.1916.114 stelt externe aanvallers in staat om een denial of service te veroorzaken of… Google
- CVE-2014-1743 HIGH · 7.5 Use-after-free kwetsbaarheid in het StyleElement:: removedFromDocument-functie in core/dom/StyleElement.cpp in Blink, zoals gebruikt in Google Chrome vóór 35.0.1916.114, stelt externe aanvallers in staat om een denial… Google
- CVE-2014-3802 MEDIUM · 6.8 msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use… Microsoft
- CVE-2014-3792 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote attackers to hijack the authentication of administrators for requests that change… Beetel
- CVE-2014-3791 HIGH · 10.0 Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie… Efssoft
- CVE-2014-3776 HIGH · 7.5 Buffer overflow in the "read-u8vector!" procedure in the srfi-4 unit in CHICKEN stable 4.8.0.7 and development snapshots before 4.9.1 allows remote attackers to cause a… Call-cc
- CVE-2014-3749 HIGH · 7.5 SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp. Construtiva
- CVE-2014-3739 MEDIUM · 5.8 Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL… Zenoss
- CVE-2014-3738 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in Zenoss 4.2.5 stelt externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via de titel van een apparaat. Zenoss
- CVE-2014-3412 HIGH · 10.0 Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. Juniper
- CVE-2014-1855 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Seo Panel vóór 3.5.0 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1)… Seopanel
- CVE-2013-7383 HIGH · 9.0 x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks. X2go
- CVE-2013-4380 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with… Mediafront Drupal
- CVE-2013-4347 MEDIUM · 5.8 The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote… Urbanairship
- CVE-2013-4346 MEDIUM · 4.3 The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. Urbanairship
- CVE-2013-4321 MEDIUM · 6.5 The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified… Typo3
- CVE-2013-4320 MEDIUM · 5.5 The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to… Typo3
- CVE-2013-4250 MEDIUM · 6.5 De (1) bestandsuploadcomponent en (2) File Abstraction Layer (FAL) in TYPO3 6.0.x vóór 6.0.8 en 6.1.x vóór 6.1.3 controleren bestandsextensies niet goed, waardoor externe geverifieerde… Typo3
- CVE-2012-6146 MEDIUM · 4.0 De Backend History Module in TYPO3 4.5.x voor 4.5.21, 4.6.x voor 4.6.14 en 4.7.x voor 4.7.6 beperkt de toegang niet goed, waardoor op afstand geverifieerde… Typo3
- CVE-2014-3460 MEDIUM · 6.8 Directory traversal-kwetsbaarheid in de DumpToFile-methode in het NQMcsVarSet ActiveX-besturingselement in Agent Manager in NetIQ Sentinel stelt externe aanvallers in staat om willekeurige bestanden te maken… Microfocus
- CVE-2014-3444 HIGH · 9.3 The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write… Realnetworks
- CVE-2014-3273 MEDIUM · 6.1 The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282. Cisco
- CVE-2014-3271 MEDIUM · 5.0 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs… Cisco
- CVE-2014-3270 MEDIUM · 5.0 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID… Cisco
- CVE-2014-3269 MEDIUM · 6.8 Met de SNMP-module in Cisco IOS XE 3.5E kunnen op afstand geverifieerde gebruikers een denial of service (herladen van het apparaat) veroorzaken door regelmatig te… Cisco
- CVE-2014-3268 MEDIUM · 5.0 Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via… Cisco
- CVE-2014-3265 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary… Cisco
- CVE-2014-3264 MEDIUM · 6.3 Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in… Cisco
- CVE-2014-2351 HIGH · 7.5 SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained… Controlsystemworks
- CVE-2014-2199 MEDIUM · 5.0 meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite… Cisco
- CVE-2014-2195 MEDIUM · 4.3 Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names,… Cisco
- CVE-2014-2194 MEDIUM · 6.8 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity. Cisco
- CVE-2014-2193 MEDIUM · 4.3 Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid… Cisco
- CVE-2014-2192 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an… Cisco
- CVE-2013-6975 MEDIUM · 4.6 Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug… Cisco
- CVE-2014-3787 MEDIUM · 5.0 SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. Sap
- CVE-2014-3735 MEDIUM · 4.3 ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file. Intel
- CVE-2014-3717 LOW · 3.3 Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a… Xen
- CVE-2014-3716 LOW · 1.9 Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB… Xen
- CVE-2014-3715 LOW · 3.3 Bufferoverloop in Xen 4.4.x stelt lokale gebruikers in staat om systeemgeheugen te lezen of een denial of service (crash) te veroorzaken via een vervaardigde 32-bits… Xen
- CVE-2014-3714 LOW · 3.3 De ARM-IMAGE-LAADFUNCTIONALITEIT in Xen 4.4.x valideert de kernellengte niet goed, waardoor lokale gebruikers het systeemgeheugen kunnen lezen of een denial of service (crash) kunnen veroorzaken… Xen
- CVE-2014-3411 HIGH · 10.0 Een niet nader gespecificeerde kwetsbaarheid in de NSM XDB-service van Juniper NSM vóór versie 2012.2R8 stelt externe aanvallers in staat om willekeurige code uit te… Juniper
- CVE-2014-1402 MEDIUM · 4.4 The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted… Pocoo
- CVE-2014-0012 MEDIUM · 4.4 FileSystemBytecodeCache in Jinja2 2.7.2 maakt geen tijdelijke mappen aan, waardoor lokale gebruikers privileges kunnen krijgen door vooraf een tijdelijke map aan te maken met de… Pocoo