CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2860 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to inject arbitrary web script or HTML via… Paperthin
- CVE-2014-2859 HIGH · 7.5 PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a direct request. Paperthin
- CVE-2014-0924 MEDIUM · 4.6 IBM MessageSight 1.x vóór 1.1.0.0-IBM-IMA-IT01015 controleert niet of alle tekens van een wachtwoord correct zijn, waardoor het voor externe geauthenticeerde gebruikers gemakkelijker is om beoogde… Ibm
- CVE-2014-0923 MEDIUM · 4.3 IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon restart) via crafted MQ Telemetry Transport (MQTT) authentication data. Ibm
- CVE-2014-0922 MEDIUM · 4.3 IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (resource consumption) via WebSockets MQ Telemetry Transport (MQTT) data. Ibm
- CVE-2014-0921 MEDIUM · 4.3 De server in IBM MessageSight 1.x vóór 1.1.0.0-IBM-IMA-IT01015 stelt externe aanvallers in staat om een denial of service (daemon-crash en verlies van berichtgegevens) te veroorzaken… Ibm
- CVE-2014-0642 MEDIUM · 5.5 EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass… Emc
- CVE-2014-2384 MEDIUM · 4.9 vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service… Vmware
- CVE-2014-1986 MEDIUM · 5.8 The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via… Kokuyo
- CVE-2014-0514 HIGH · 9.3 The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via… Adobe
- CVE-2014-2580 MEDIUM · 4.4 The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a… Xen
- CVE-2014-0107 HIGH · 7.5 The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass… Apache Oracle
- CVE-2013-7368 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Gnew 2013.1 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de gnew_template parameter naar… Raoul Proenca
- CVE-2014-2842 HIGH · 7.8 Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) via a malformed SSL/TLS packet. Juniper
- CVE-2014-2828 HIGH · 7.8 The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption)… Openstack
- CVE-2014-2690 LOW · 2.1 Citrix VDI-in-a-Box 5.3.x voor 5.3.6 en 5.4.x voor 5.4.3 stelt lokale gebruikers in staat om beheerdersreferenties te verkrijgen door het logboek te lezen. Citrix
- CVE-2014-0167 MEDIUM · 6.0 The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1)… Openstack
- CVE-2014-0157 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to… Openstack Opensuse
- CVE-2014-0139 MEDIUM · 5.8 cURL en libcurl 7.1 vóór 7.36.0, bij gebruik van de OpenSSL-, axtls-, qsossl- of gskit-bibliotheken voor TLS, een wildcard-IP-adres herkennen in het veld Common Name… Haxx
- CVE-2014-0138 MEDIUM · 6.4 The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP,… Haxx Debian
- CVE-2014-0105 MEDIUM · 6.0 The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows… Openstack
- CVE-2014-0359 HIGH · 9.0 Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer. Xangati
- CVE-2014-0358 HIGH · 7.8 Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read arbitrary files via a .. (dot dot)… Xangati
- CVE-2014-0357 MEDIUM · 5.0 Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID… Amtelco
- CVE-2014-0356 HIGH · 7.9 The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1)… Zyxel
- CVE-2014-0355 HIGH · 7.9 Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a… Zyxel
- CVE-2014-0354 HIGH · 7.8 The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an unspecified account, which allows remote attackers to… Zyxel
- CVE-2014-0353 MEDIUM · 6.1 Met de ZyXEL Wireless N300 NetUSB NBG-419N router met firmware 1.00(BFQ.6)C0 kunnen externe aanvallers authenticatie omzeilen door %2F sequenties te gebruiken in plaats van /… Zyxel
- CVE-2014-0348 LOW · 3.5 The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2… Ontariosystems
- CVE-2014-0342 HIGH · 7.5 Meerdere, onbeperkte kwetsbaarheden in fileupload.php in PivotX vóór versie 2.3.9 stellen geauthenticeerde gebruikers op afstand in staat om willekeurige PHP-code uit te voeren door een… Pivotx
- CVE-2014-0341 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in PivotX vóór 2.3.9 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML via het titelveld te… Pivotx
- CVE-2013-5705 MEDIUM · 5.0 apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP… Trustwave Debian
- CVE-2013-5704 MEDIUM · 5.0 The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion… Apache Redhat Oracle Apple
- CVE-2014-2851 MEDIUM · 6.9 Integer-overloop in de ping_init_sock-functie in net/ipv4/ping.c in de Linux-kernel via 3.14.1 stelt lokale gebruikers in staat om een denial of service (use-after-free en systeemcrash) te… Linux Debian
- CVE-2014-2739 MEDIUM · 4.6 The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet (aka RoCE) address that is… Linux
- CVE-2014-2706 HIGH · 7.1 Raceconditie in het mac80211-subsysteem in de Linux-kernel vóór 3.13.7 stelt externe aanvallers in staat om een denial of service (systeemcrash) te veroorzaken via netwerkverkeer dat… Linux Oracle Suse
- CVE-2014-0155 MEDIUM · 5.5 The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to… Linux
- CVE-2014-0077 MEDIUM · 5.5 drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause… Linux
- CVE-2010-5298 MEDIUM · 4.0 Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or… Openssl Mariadb Fedoraproject Suse
- CVE-2014-2852 MEDIUM · 5.0 OpenAFS vóór 1.6.7 vertraagt de luisterreeks wanneer een RXS_CheckResponse faalt, waardoor externe aanvallers een denial of service (prestatievermindering) kunnen veroorzaken via een ongeldig pakket. Openafs
- CVE-2014-2714 HIGH · 7.1 The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before… Juniper
- CVE-2014-2713 MEDIUM · 5.0 Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used… Juniper
- CVE-2014-2712 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in J-Web in Juniper Junos vóór 10.0S25, 10.4 vóór 10.4R10, 11.4 vóór 11.4R11, 12.1 vóór 12.1R9, 12.1X44 vóór 12.1X44-D30, 12.1X45 vóór… Juniper
- CVE-2014-2711 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in J-Web in Juniper Junos vóór 11.4R11, 11.4X27 vóór 11.4X27.62 (BBE), 12.1 vóór 12.1R9, 12.1X44 vóór 12.1X44-D35, 12.1X45 vóór 12.1X45-D25, 12.1X46… Juniper
- CVE-2014-0614 HIGH · 7.1 Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service (kernel panic and… Juniper
- CVE-2014-0612 MEDIUM · 5.0 Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, and 12.1X46 before 12.1X46-D10, when Dynamic IPsec… Juniper
- CVE-2014-0159 MEDIUM · 5.0 Bufferoverloop in de GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 vóór 1.6.7 stelt externe aanvallers in staat om een denial of service (crash) te… Openafs Debian
- CVE-2014-0128 MEDIUM · 5.0 Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a… Squid-cache Opensuse
- CVE-2014-2389 HIGH · 9.3 Stapelgebaseerde bufferoverloop in een bepaalde decoderingsfunctie in qconnDoor op BlackBerry Z10-apparaten met software 10.1.0.2312, wanneer de ontwikkelaarsmodus eerder is ingeschakeld, stelt externe aanvallers in staat… Blackberry
- CVE-2014-2142 MEDIUM · 5.0 Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP… Cisco