CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0465 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in de Oracle OpenSSO-component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 stelt externe geverifieerde gebruikers in staat om de integriteit te… Oracle
- CVE-2014-0464 MEDIUM · 4.3 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 8 stelt externe aanvallers in staat om de vertrouwelijkheid te beïnvloeden via onbekende vectoren met betrekking tot Scripting, een… Oracle
- CVE-2014-0463 MEDIUM · 4.3 Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464. Oracle
- CVE-2014-0461 HIGH · 9.3 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via… Canonical Oracle Debian Ibm
- CVE-2014-0460 MEDIUM · 5.8 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect… Oracle Canonical Juniper Debian
- CVE-2014-0459 MEDIUM · 4.3 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to… Canonical Oracle Debian
- CVE-2014-0458 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 6u71, 7u51 en 8, en Java SE Embedded 7u51, stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en… Canonical Oracle Debian
- CVE-2014-0457 HIGH · 10.0 Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to… Oracle Canonical Juniper Debian
- CVE-2014-0456 HIGH · 10.0 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via… Canonical Oracle Juniper Debian
- CVE-2014-0455 HIGH · 9.3 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown… Canonical Oracle Ibm Microsoft
- CVE-2014-0454 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 7u51 en 8, en Java SE Embedded 7u51, stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en beschikbaarheid… Canonical Oracle Ibm Microsoft
- CVE-2014-0453 MEDIUM · 4.0 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect… Oracle Canonical Juniper Debian
- CVE-2014-0452 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 6u71, 7u51 en 8, en Java SE Embedded 7u51, stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en… Canonical Oracle Debian
- CVE-2014-0451 HIGH · 7.5 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability… Canonical Oracle Debian
- CVE-2014-0450 MEDIUM · 5.0 Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect confidentiality via unknown vectors related… Oracle
- CVE-2014-0449 MEDIUM · 5.0 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related… Oracle
- CVE-2014-0448 HIGH · 7.6 Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Oracle Ibm Microsoft
- CVE-2014-0447 MEDIUM · 4.9 Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2013-5876. Oracle Sun
- CVE-2014-0446 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 5.0u61, 6u71, 7u51 en 8, en Java SE Embedded 7u51, stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit… Canonical Oracle Debian
- CVE-2014-0442 MEDIUM · 4.6 Unspecified vulnerability in Oracle Solaris 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Print Filter… Oracle Sun
- CVE-2014-0432 HIGH · 9.3 Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown… Oracle
- CVE-2014-0429 HIGH · 10.0 Een niet-gespecificeerde kwetsbaarheid in Oracle Java SE 5.0u61, 6u71, 7u51 en 8; JRockit R27.8.1 en R28.3.1; en Java SE Embedded 7u51 stelt externe aanvallers in… Canonical Oracle Juniper Debian
- CVE-2014-0426 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP… Oracle
- CVE-2014-0421 MEDIUM · 4.6 Unspecified vulnerability in Oracle Solaris 10, when running on the SPARC64-X Platform, allows local users to affect confidentiality, integrity, and availability via unknown vectors. Sun
- CVE-2014-0414 MEDIUM · 5.0 Een niet nader gespecificeerde kwetsbaarheid in de Oracle Containers for J2EE-component van Oracle Fusion Middleware 10.1.3.5 stelt externe aanvallers in staat de vertrouwelijkheid te schenden… Oracle
- CVE-2014-0413 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP… Oracle
- CVE-2014-0384 MEDIUM · 4.0 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via… Oracle Mariadb Redhat
- CVE-2013-4768 MEDIUM · 5.0 The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection… Eucalyptus
- CVE-2014-2858 MEDIUM · 5.0 Directory traversal-kwetsbaarheid in de Resources-plug-in 1.0.0 vóór 1.2.6 voor Pivotal Grails 2.0.0 tot 2.3.6 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen via… Gopivotal
- CVE-2014-2857 MEDIUM · 5.0 The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 does not properly restrict access to files in the… Gopivotal
- CVE-2014-0053 MEDIUM · 5.0 De standaardconfiguratie van de Resources-plug-in 1.0.0 vóór 1.2.6 voor Pivotal Grails 2.0.0 vóór 2.3.6 beperkt de toegang tot bestanden in de WEB-INF-directory niet correct, waardoor… Gopivotal
- CVE-2013-6456 MEDIUM · 5.8 The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink… Redhat Fedoraproject
- CVE-2012-0214 MEDIUM · 4.3 The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files,… Advanced Package Tool
- CVE-2011-3628 MEDIUM · 6.9 Untrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on… Canonical
- CVE-2010-2236 MEDIUM · 6.0 The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows… Redhat
- CVE-2008-3277 MEDIUM · 4.4 Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux… Openfabrics Redhat
- CVE-2014-2874 HIGH · 10.0 Met PaperThin CommonSpot voor 7.0.2 en 8.x voor 8.0.3 kunnen aanvallers op afstand willekeurige code uitvoeren via shell-metakarakters in een niet-gespecificeerde context. Paperthin
- CVE-2014-2873 MEDIUM · 5.0 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not require authentication for access to log files, which allows remote attackers to obtain sensitive server… Paperthin
- CVE-2014-2872 MEDIUM · 5.0 PaperThin CommonSpot voor 7.0.2 en 8.x voor 8.0.3 stelt externe aanvallers in staat om mogelijk gevoelige informatie uit een directory-lijst te verkrijgen via niet-gespecificeerde vectoren. Paperthin
- CVE-2014-2871 MEDIUM · 5.0 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain… Paperthin
- CVE-2014-2870 MEDIUM · 5.0 The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier… Paperthin
- CVE-2014-2869 MEDIUM · 5.0 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL… Paperthin
- CVE-2014-2868 HIGH · 7.5 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET… Paperthin
- CVE-2014-2867 HIGH · 10.0 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in PaperThin CommonSpot vóór 7.0.2 en 8.x vóór 8.0.3 stelt externe aanvallers in staat om willekeurige code uit… Paperthin
- CVE-2014-2866 HIGH · 10.0 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by… Paperthin
- CVE-2014-2865 HIGH · 7.5 Met PaperThin CommonSpot vóór 7.0.2 en 8.x vóór 8.0.3 kunnen aanvallers op afstand de beoogde toegangsbeperkingen omzeilen via een '' -teken, zoals wordt aangetoond door… Paperthin
- CVE-2014-2864 HIGH · 10.0 Multiple directory traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a filename parameter… Paperthin
- CVE-2014-2863 HIGH · 10.0 Meerdere absolute kwetsbaarheden voor het doorlopen van paden in PaperThin CommonSpot vóór 7.0.2 en 8.x vóór 8.0.3 stellen externe aanvallers in staat om een niet-gespecificeerde… Paperthin
- CVE-2014-2862 MEDIUM · 6.5 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown… Paperthin
- CVE-2014-2861 MEDIUM · 4.3 Onvolledige blacklist-kwetsbaarheid in PaperThin CommonSpot vóór 7.0.2 en 8.x vóór 8.0.3 stelt externe aanvallers in staat om cross-site scripting (XSS) -aanvallen uit te voeren via… Paperthin