CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1758 HIGH · 9.3 Op stapels gebaseerde bufferoverloop in Microsoft Word 2003 SP3 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd document, ook… Microsoft
- CVE-2014-1757 HIGH · 9.3 Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc)… Microsoft
- CVE-2014-1755 HIGH · 9.3 Met Microsoft Internet Explorer 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-1753 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-1752 HIGH · 9.3 Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1751 HIGH · 9.3 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-0509 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on… Adobe Apple Microsoft Linux
- CVE-2014-0508 MEDIUM · 5.0 Adobe Flash Player vóór 11.7.700.275 en 11.8.x tot en met 13.0.x vóór 13.0.0.182 op Windows en OS X en vóór 11.2.202.350 op Linux, Adobe AIR… Adobe Linux Apple Microsoft
- CVE-2014-0507 HIGH · 9.3 Bufferoverloop in Adobe Flash Player vóór 11.7.700.275 en 11.8.x tot en met 13.0.x vóór 13.0.0.182 op Windows en OS X en vóór 11.2.202.350 op Linux,… Adobe Apple Microsoft Linux
- CVE-2014-0315 MEDIUM · 6.9 Onbetrouwbare zoekpadkwetsbaarheid in Microsoft Windows XP SP2 en SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7… Microsoft
- CVE-2014-2543 HIGH · 7.5 Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before… Tibco
- CVE-2014-2542 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd) en Rendezvous Secure Routing Daemon (rvsrd) in Tibco… Tibco
- CVE-2014-2541 MEDIUM · 5.0 The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance… Tibco
- CVE-2012-6645 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers… Danielb
- CVE-2012-6644 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in ClipBucket 2.6 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) Cat parameter… Clip-bucket
- CVE-2012-6643 HIGH · 7.5 Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter… Clip-bucket
- CVE-2012-6642 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. NOTE: the… Clip-bucket
- CVE-2012-1561 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web… Danielb
- CVE-2012-0033 MEDIUM · 5.0 The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service (crash) via… Znc
- CVE-2011-5278 HIGH · 7.5 SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the… Advanced Forum Signatures Project
- CVE-2011-5277 HIGH · 7.5 Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands… Advanced Forum Signatures Project
- CVE-2011-4958 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web… Silverstripe
- CVE-2012-6641 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules/socolissimo/) in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML… Prestashop
- CVE-2012-2095 MEDIUM · 6.9 De SetWiredProperty-functie in de D-Bus-interface in WICD vóór 1.7.2 stelt lokale gebruikers in staat om willekeurige configuratie-instellingen te schrijven en privileges te verkrijgen via een… David Paleino Fedoraproject
- CVE-2012-1834 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de functie cms_tpv_admin_head in functions.php in de CMS Tree Page View-plug-in vóór 0.8.9 voor WordPress stelt externe aanvallers in staat… Cms Tree Page View Project
- CVE-2013-5680 MEDIUM · 6.8 Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child… Lee Howard
- CVE-2013-1946 MEDIUM · 4.3 The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned… Restful Web Services Project Drupal
- CVE-2012-6640 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to… Horde
- CVE-2012-5567 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Horde Kronolith Calendar Application H4 vóór 3.0.18, zoals gebruikt in Horde Groupware Webmail Edition vóór 4.0.9, stellen externe aanvallers… Horde
- CVE-2012-5566 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Horde Kronolith Calendar Application H4 vóór 3.0.17, zoals gebruikt in Horde Groupware Webmail Edition vóór 4.0.8, stellen externe aanvallers… Horde
- CVE-2012-5565 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote… Horde
- CVE-2001-1593 LOW · 2.1 The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify… Gnu
- CVE-2014-2730 MEDIUM · 5.0 De XML-parser in Microsoft Office 2007 SP3, 2010 SP1 en SP2, en 2013, en Office voor Mac 2011, detecteert recursie niet goed tijdens entiteituitbreiding, waardoor… Microsoft
- CVE-2014-2600 MEDIUM · 4.0 Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used,… Hp
- CVE-2014-2145 MEDIUM · 4.0 Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access… Cisco
- CVE-2014-2144 MEDIUM · 6.1 Cisco IOS XR beperkt ICMPv6-omleidingspakketten niet correct, waardoor externe aanvallers een denial of service (IPv4- en IPv6-transituitval) kunnen veroorzaken via vervaardigde omleidingsberichten, ook bekend als… Cisco
- CVE-2014-0827 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Ibm
- CVE-2014-0337 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de webinterface op Huawei Echo Life HG8247-routers met software vóór V100R006C00SPC127 stelt externe aanvallers in staat om willekeurig webscript of… Huawei
- CVE-2014-2210 HIGH · 7.5 Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information, bypass intended access restrictions, cause a denial of… Ca
- CVE-2014-2143 MEDIUM · 5.0 The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted… Cisco
- CVE-2014-2117 MEDIUM · 4.3 Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing… Cisco
- CVE-2014-2116 MEDIUM · 4.3 Cisco Emergency Responder (ER) 8.6 en eerder stelt externe aanvallers in staat om webpagina's te injecteren en dynamische inhoud te wijzigen via niet-gespecificeerde parameters, ook… Cisco
- CVE-2014-2115 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of… Cisco
- CVE-2014-2114 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2014-0789 MEDIUM · 5.0 Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server (OFS) TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5… Schneider-electric
- CVE-2014-0638 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or… Emc
- CVE-2014-0637 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users… Emc
- CVE-2014-0592 HIGH · 7.5 Barclamp (ook bekend als barclamp-netwerk) 1.7 voor het Crowbar Framework, zoals gebruikt in SUSE Cloud 3, maakt geen netfilter op bruggen mogelijk bij het maken… Crowbar Novell
- CVE-2013-3930 HIGH · 9.3 Op stapels gebaseerde bufferoverloop in Core FTP vóór 2.2 build 1785 stelt externe FTP-servers in staat om willekeurige code uit te voeren via een vervaardigde… Coreftp
- CVE-2013-2287 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in views/notify.php in de Uploader-plug-in 1.0.4 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Roberta Bramski