CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-7367 HIGH · 7.5 SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attackers to gain privileges via unspecified vectors. Sap
- CVE-2013-7366 MEDIUM · 5.0 Met de SAP Software Deployment Manager (SDM) kunnen externe aanvallers in bepaalde niet-gespecificeerde omstandigheden een denial of service veroorzaken via vectoren met betrekking tot mislukte… Sap
- CVE-2013-7365 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in SAP Enterprise Portal stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde parameters. Sap
- CVE-2013-7364 HIGH · 7.5 Een niet-gespecificeerde J2EE-kerndienst in de J2EE-engine in SAP NetWeaver beperkt de toegang niet goed, waardoor externe aanvallers willekeurige bestanden via onbekende vectoren kunnen lezen en… Sap
- CVE-2013-7363 HIGH · 7.5 Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install… Sap
- CVE-2013-7362 HIGH · 7.5 Met een niet-gespecificeerde RFC-functie in SAP CCMS Agent kunnen aanvallers op afstand willekeurige opdrachten uitvoeren via onbekende vectoren. Sap
- CVE-2013-7361 MEDIUM · 5.0 Directory traversal-kwetsbaarheid in SAP CMS en CM Services stelt aanvallers in staat om willekeurige bestanden te uploaden via niet-gespecificeerde vectoren. Sap
- CVE-2013-7360 HIGH · 7.5 Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown vectors. Sap
- CVE-2013-7359 MEDIUM · 5.0 Unspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain sensitive port information via unknown vectors, related to an "internal port scanning" issue. Sap
- CVE-2013-7358 MEDIUM · 5.0 Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, profiles, and possibly other identity information via unknown vectors. Sap
- CVE-2013-7357 MEDIUM · 5.0 Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors. Sap
- CVE-2013-7356 MEDIUM · 5.0 Unspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to obtain the database password via unknown vectors. Sap
- CVE-2013-7355 HIGH · 7.5 SQL-injectiekwetsbaarheid in SAP BI Universal Data Integration stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren, gerelateerd aan het J2EE-schema. Sap
- CVE-2013-0740 MEDIUM · 5.8 Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Dell
- CVE-2012-6132 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter. Roundup-tracker
- CVE-2014-2708 HIGH · 7.5 Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2)… Cacti
- CVE-2014-2583 MEDIUM · 5.8 Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass… Linux-pam
- CVE-2014-1455 HIGH · 7.5 SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary… Pearson
- CVE-2014-0331 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML… Fortinet
- CVE-2013-6468 MEDIUM · 6.5 JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code… Redhat
- CVE-2013-3252 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in de opties admin pagina in de WP-PostViews plugin voor 1.63 voor WordPress stelt externe aanvallers in staat om de… Lesterchan
- CVE-2013-3251 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in de qTranslate plugin 2.5.34 en eerder voor WordPress stelt externe aanvallers in staat om de authenticatie van beheerders te… Qianqin
- CVE-2013-2699 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that… Underconstruction Project
- CVE-2013-2693 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators… Wp-plugins
- CVE-2013-2033 LOW · 2.1 Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with… Jenkins Cloudbees
- CVE-2012-4921 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of… Dvs Custom Notification Project
- CVE-2014-2141 MEDIUM · 4.0 The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users… Cisco
- CVE-2014-2129 HIGH · 7.1 The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows… Cisco
- CVE-2014-2128 MEDIUM · 5.0 The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before… Cisco
- CVE-2014-2127 HIGH · 8.5 Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3)… Cisco
- CVE-2014-2126 HIGH · 8.5 Cisco Adaptive Security Appliance (ASA) Software 8.2 voor 8.2(5.47), 8.4 voor 8.4(7.5), 8.7 voor 8.7(1.11), 9.0 voor 9.0(3.10) en 9.1 voor 9.1(3.4) stelt geverifieerde gebruikers… Cisco
- CVE-2014-2544 HIGH · 7.5 Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication Module in TIBCO Spotfire Server 3.3.x before 3.3.4, 4.5.x before 4.5.1, 5.0.x… Tibco
- CVE-2014-0166 MEDIUM · 6.4 The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it… Wordpress
- CVE-2014-0165 MEDIUM · 4.0 WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php. Wordpress
- CVE-2014-1729 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in Google V8 vóór 3.24.35.22, zoals gebruikt in Google Chrome vóór 34.0.1847.116, stellen aanvallers in staat om een denial of service te… Google
- CVE-2014-1728 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in Google Chrome vóór 34.0.1847.116 stellen aanvallers in staat om een denial of service te veroorzaken of mogelijk andere impact te hebben… Google
- CVE-2014-1727 HIGH · 7.5 Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via… Google
- CVE-2014-1726 MEDIUM · 4.3 The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer… Google
- CVE-2014-1725 MEDIUM · 5.0 De base64DecodeInterne functie in wtf/text/Base64.cpp in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.116, verwerkt geen stringgegevens die uitsluitend bestaan uit witruimte-tekens, waardoor externe aanvallers… Google
- CVE-2014-1724 HIGH · 7.5 Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service (application… Google
- CVE-2014-1723 HIGH · 7.5 The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote… Google
- CVE-2014-1722 HIGH · 7.5 Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of… Google
- CVE-2014-1721 HIGH · 7.5 Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service… Google
- CVE-2014-1720 HIGH · 7.5 Use-after-free kwetsbaarheid in het HTMLBodyElement:: insertedInto-functie in core/html/HTMLBodyElement.cpp in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.116, stelt externe aanvallers in staat om een denial… Google
- CVE-2014-1719 HIGH · 7.5 Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker_stub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial… Google
- CVE-2014-1718 HIGH · 7.5 Integer-overloop in de SoftwareFrameManager:: SwapToNewFrame-functie in content/browser/renderer_host/software_frame_manager.cc in de softwarecompositor in Google Chrome vóór 34.0.1847.116 stelt externe aanvallers in staat om een denial of service… Google
- CVE-2014-1717 HIGH · 7.5 Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote attackers to… Google
- CVE-2014-1716 HIGH · 7.5 Cross-site scripting (XSS) -kwetsbaarheid in de Runtime_SetPrototype-functie in runtime.cc in Google V8, zoals gebruikt in Google Chrome vóór 34.0.1847.116, stelt externe aanvallers in staat om… Google Debian Opensuse
- CVE-2014-1760 HIGH · 9.3 Met Microsoft Internet Explorer 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-1759 HIGH · 9.3 pubconv.dll in Microsoft Publisher 2003 SP3 en 2007 SP3 stelt externe aanvallers in staat om willekeurige code uit te voeren of een denial of service… Microsoft