CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2880 MEDIUM · 5.8 Open redirect-kwetsbaarheid in de Oracle Identity Manager-component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1 en 11.1.2.2 stelt externe aanvallers in staat om gebruikers om te… Oracle
- CVE-2014-2879 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in Dell SonicWALL Email Security 7.4.5 en eerder stellen externe geverifieerde beheerders in staat om willekeurig webscript of HTML te… Sonicwall
- CVE-2014-2707 HIGH · 8.3 cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related… Linuxfoundation
- CVE-2014-2469 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in lighttpd in Oracle Solaris 11.1 stelt aanvallers in staat om een denial of service te veroorzaken via onbekende vectoren. Oracle
- CVE-2014-2310 MEDIUM · 5.0 The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object… Net-snmp
- CVE-2014-1933 LOW · 2.1 The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files… Python Pythonware
- CVE-2014-1932 MEDIUM · 4.4 De (1) load_djpeg-functie in JpegImagePlugin.py, (2) Ghostscript-functie in EpsImagePlugin.py, (3) load-functie in IptcImagePlugin.py en (4) _copy-functie in Image.py in Python Image Library (PIL) 1.1.7 en… Python Pythonware
- CVE-2014-0984 MEDIUM · 4.3 The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry… Sap
- CVE-2014-0111 MEDIUM · 6.5 Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions,… Apache
- CVE-2014-0085 LOW · 2.1 JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users.… Redhat
- CVE-2014-0071 MEDIUM · 6.4 PackStack in Red Hat OpenStack 4.0 dwingt de standaardbeveiligingsgroepen niet af wanneer deze worden geïmplementeerd in Neutron, waardoor externe aanvallers de beoogde toegangsbeperkingen kunnen omzeilen… Redhat
- CVE-2014-0054 MEDIUM · 6.8 De Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework vóór 3.2.8 en 4.0.0 vóór 4.0.2 schakelt de resolutie van externe entiteiten niet uit, waardoor externe aanvallers… Springsource Vmware
- CVE-2014-0036 MEDIUM · 6.8 De rbovirt gem voor 0.0.24 voor Ruby gebruikt de rest-client gem met SSL-verificatie uitgeschakeld, waarmee externe aanvallers man-in-the-middle-aanvallen kunnen uitvoeren via niet-gespecificeerde vectoren. Amos Benari
- CVE-2013-2143 MEDIUM · 6.5 The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users… Redhat Theforeman
- CVE-2011-3154 LOW · 1.9 DistUpgrade/DistUpgradeViewKDE.py in Update Manager vóór 1: 0.87.31.1, 1: 0.134.x vóór 1: 0.134.11.1, 1: 0.142.x vóór 1: 0.142.23.1, 1: 0.150.x vóór 1: 0.150.5.1 en 1: 0.152.x… Canonical
- CVE-2014-0645 MEDIUM · 4.7 EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin… Emc
- CVE-2014-0644 HIGH · 7.8 EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration… Emc
- CVE-2013-4694 HIGH · 7.5 Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Nullsoft
- CVE-2014-2338 MEDIUM · 6.4 IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the… Strongswan
- CVE-2014-1453 MEDIUM · 4.0 The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a… Freebsd
- CVE-2013-1764 LOW · 2.1 The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method. Packagekit Project
- CVE-2011-4406 LOW · 3.6 The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified… Canonical
- CVE-2011-4195 HIGH · 7.5 kiwi vóór 4.98.05, zoals gebruikt in SUSE Studio Onsite 1.2 vóór 1.2.1 en SUSE Studio Extension for System z 1.2 vóór 1.2.1, stelt aanvallers in… Suse
- CVE-2011-4193 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before… Suse
- CVE-2011-4192 HIGH · 7.5 kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to… Suse
- CVE-2011-4089 MEDIUM · 4.6 The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to… Bzip
- CVE-2011-3180 HIGH · 7.5 kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to… Suse
- CVE-2011-0993 LOW · 2.1 SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors. Novell
- CVE-2011-0460 MEDIUM · 6.3 The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Kbd-project Opensuse
- CVE-2014-2471 MEDIUM · 4.3 Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner… Oracle
- CVE-2014-2470 HIGH · 7.5 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and… Oracle
- CVE-2014-2468 MEDIUM · 4.3 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to… Oracle
- CVE-2014-2467 LOW · 3.5 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown… Oracle
- CVE-2014-2466 LOW · 2.1 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality via unknown… Oracle
- CVE-2014-2465 MEDIUM · 4.3 Niet-gespecificeerde kwetsbaarheid in de Oracle Agile PLM Framework-component in Oracle Supply Chain Products Suite 9.3.3 stelt externe aanvallers in staat om de integriteit te beïnvloeden… Oracle
- CVE-2014-2464 LOW · 3.5 Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3.0 allows remote authenticated users to affect confidentiality via unknown… Oracle
- CVE-2014-2463 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via… Oracle
- CVE-2014-2461 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote… Oracle
- CVE-2014-2460 MEDIUM · 4.0 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote… Oracle
- CVE-2014-2459 LOW · 3.7 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.3.2 and 6.3.3 allows local users to affect confidentiality, integrity, and… Oracle
- CVE-2014-2458 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via… Oracle
- CVE-2014-2457 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via… Oracle
- CVE-2014-2455 MEDIUM · 6.0 Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via… Oracle
- CVE-2014-2454 MEDIUM · 4.3 Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to… Oracle
- CVE-2014-2453 MEDIUM · 4.3 Ongespecificeerde kwetsbaarheid in de Hyperion Common Admin-component in Oracle Hyperion 11.1.2.2 en 11.1.2.3 stelt externe aanvallers in staat om de integriteit te beïnvloeden via onbekende… Oracle
- CVE-2014-2452 MEDIUM · 4.0 Een niet nader gespecificeerde kwetsbaarheid in de Oracle Access Manager-component van Oracle Fusion Middleware 11.1.1.5 stelt externe geauthenticeerde gebruikers in staat de beschikbaarheid te beïnvloeden… Oracle
- CVE-2014-2451 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.6.15 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren met… Oracle
- CVE-2014-2450 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.6.15 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren met… Oracle
- CVE-2014-2449 MEDIUM · 4.0 Unspecified vulnerability in the PeopleSoft Enterprise HRMS Talent Acquisition Manager component in Oracle PeopleSoft Products 9.0, 9.1, and 9.2 allows remote authenticated users to affect… Oracle
- CVE-2014-2448 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in de PeopleSoft Enterprise PT PeopleTools-component in Oracle PeopleSoft Products 8.52 en 8.53 stelt externe aanvallers in staat om de vertrouwelijkheid te beïnvloeden… Oracle