CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2554 MEDIUM · 4.3 OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element. Opensuse Otrs
- CVE-2014-2328 MEDIUM · 6.5 lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. Cacti Fedoraproject Opensuse Debian
- CVE-2014-2327 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Cacti 0.8.7g, 0.8.8b en eerder stelt externe aanvallers in staat om de authenticatie van gebruikers voor niet-gespecificeerde opdrachten te… Cacti Debian Opensuse
- CVE-2014-0474 HIGH · 10.0 The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7… Canonical Djangoproject
- CVE-2014-0473 MEDIUM · 5.0 The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for… Djangoproject Canonical
- CVE-2014-0472 MEDIUM · 5.1 The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and… Djangoproject Canonical
- CVE-2014-2154 MEDIUM · 5.0 Geheugenlek in de SIP-inspectie-engine in Cisco Adaptive Security Appliance (ASA) -software stelt externe aanvallers in staat om een denial of service (geheugenverbruik en instabiliteit) te… Cisco
- CVE-2014-1648 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script… Symantec
- CVE-2014-1322 MEDIUM · 4.9 The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it… Apple
- CVE-2014-1321 LOW · 3.3 Energiebeheer in Apple OS X 10.9.x tot en met 10.9.2 stelt fysiek nabije aanvallers in staat om een beoogde overgang naar de vergrendelde schermstatus te… Apple
- CVE-2014-1320 MEDIUM · 4.9 IOKit in Apple iOS vóór 7.1.1, Apple OS X tot en met 10.9.2 en Apple TV vóór 6.1.1 plaatst kernelwijzers in een objectdatastructuur, waardoor het… Apple
- CVE-2014-1319 MEDIUM · 6.8 Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application… Apple
- CVE-2014-1318 HIGH · 10.0 The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via… Apple
- CVE-2014-1316 MEDIUM · 5.0 Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon exit) via ASN.1 data… Apple
- CVE-2014-1315 MEDIUM · 6.8 Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service… Apple
- CVE-2014-1314 HIGH · 10.0 WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism… Apple
- CVE-2014-1296 MEDIUM · 4.3 CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is… Apple
- CVE-2014-1295 MEDIUM · 6.8 Beveiligd transport in Apple iOS vóór 7.1.1, Apple OS X 10.8.x en 10.9.x tot en met 10.9.2 en Apple TV vóór 6.1.1 garandeert niet dat… Apple
- CVE-2012-5427 MEDIUM · 4.0 Cisco IOS Unified Border Element (CUBE) in Cisco IOS vóór 15.3(2)T stelt op afstand geverifieerde gebruikers in staat om een denial of service (invoerwachtrijwig) te… Cisco
- CVE-2012-5422 MEDIUM · 6.8 Niet-gespecificeerde kwetsbaarheid in Cisco IOS vóór 15.3(2)T op AS5400-apparaten stelt op afstand geverifieerde gebruikers in staat om een denial of service (valse fouten) te veroorzaken… Cisco
- CVE-2012-5044 MEDIUM · 5.4 Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption)… Cisco
- CVE-2012-5039 MEDIUM · 4.3 The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path… Cisco
- CVE-2012-5037 MEDIUM · 4.6 The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload)… Cisco
- CVE-2012-5036 MEDIUM · 6.8 Cisco IOS vóór 12.2(50)SY1 stelt op afstand geverifieerde gebruikers in staat om een denial of service (geheugenverbruik) te veroorzaken via een reeks VTY-beheersessies (ook bekend… Cisco
- CVE-2012-5032 MEDIUM · 6.4 The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the forwarding… Cisco
- CVE-2012-5017 MEDIUM · 6.8 Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed… Cisco
- CVE-2012-5014 MEDIUM · 6.3 Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and… Cisco
- CVE-2012-4658 MEDIUM · 5.0 The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that… Cisco
- CVE-2012-4651 MEDIUM · 4.3 Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied… Cisco
- CVE-2012-4638 MEDIUM · 4.9 Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318. Cisco
- CVE-2012-3918 MEDIUM · 4.3 Cisco IOS vóór versie 15.3(1)T op Cisco 2900-apparaten, wanneer een VWIC2-2MFT-T1/E1-kaart is geconfigureerd voor TDM/HDLC-modus, maakt het voor externe aanvallers mogelijk om een denial-of-service-aanval (uitval… Cisco
- CVE-2012-3062 MEDIUM · 5.7 Cisco IOS vóór 15.1(1)SY, wanneer Multicast Listener Discovery (mld) snooping is ingeschakeld, stelt externe aanvallers in staat om een denial of service (CPU-verbruik of apparaatcrash)… Cisco
- CVE-2012-1366 MEDIUM · 6.1 Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial… Cisco
- CVE-2012-1317 MEDIUM · 5.4 The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a… Cisco
- CVE-2012-0360 MEDIUM · 5.0 Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted… Cisco
- CVE-2014-2900 MEDIUM · 5.8 wolfSSL CyaSSL vóór 2.9.4 valideert X.509-certificaten niet goed met onbekende kritieke extensies, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen via een vervaardigd X.509-certificaat. Yassl
- CVE-2014-2899 MEDIUM · 5.0 wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when… Yassl
- CVE-2014-2892 HIGH · 7.5 Op heap gebaseerde bufferoverloop in de get_answer-functie in mmsh.c in libmms vóór 0.6.4 stelt externe aanvallers in staat om willekeurige code uit te voeren via… Libmms Project
- CVE-2014-2890 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the… Siege
- CVE-2014-2737 HIGH · 7.5 SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL… Knowledgetree
- CVE-2014-2659 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication… Papercut
- CVE-2014-2654 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1)… Mobfox
- CVE-2014-1615 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Carbon Black vóór 4.1.0 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Carbonblack
- CVE-2013-7338 HIGH · 7.1 Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than… Python Apple
- CVE-2013-4472 LOW · 3.3 De openTempFile-functie in goo/gfile.cc in Xpdf en Poppler 0.24.3 en eerder, bij gebruik op een ander systeem dan Unix, stelt lokale gebruikers in staat om… Freedesktop
- CVE-2013-4116 LOW · 3.3 lib/npm.js in Node Packaged Modules (npm) vóór 1.3.3 stelt lokale gebruikers in staat om willekeurige bestanden te overschrijven via een symlink-aanval op tijdelijke bestanden met… Node Packaged Modules Project
- CVE-2013-2187 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via… Apache
- CVE-2013-2105 LOW · 3.3 Met de Show In Browser (show_in_browser) gem 0.0.3 voor Ruby kunnen lokale gebruikers willekeurig webscript of HTML injecteren via een symlink-aanval op /tmp/browser.html. Jonathan Leung
- CVE-2013-1421 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Craig Knudsen WebCalendar vóór 1.2.5, 1.2.6 en andere versies vóór 1.2.7 stelt externe aanvallers in staat om willekeurig webscript of… Webcalendar Project
- CVE-2014-2925 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web… T-mobile Asus