CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1891 MEDIUM · 5.2 Multiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4) FLASK_CONTEXT_TO_SID suboperations in the flask hypercall in Xen 4.3.x, 4.2.x, 4.1.x, 3.2.x,… Xen
- CVE-2013-7350 HIGH · 10.0 Meerdere niet-gespecificeerde kwetsbaarheden in Check Point Security Gateway 80 R71.x vóór R71.45 (730159141) en R75.20.x vóór R75.20.4 en 600 en 1100 apparaten R75.20.x vóór R… Checkpoint
- CVE-2013-7348 MEDIUM · 4.6 Dubbele gratis kwetsbaarheid in de ioctx_alloc-functie in fs/aio.c in de Linux-kernel vóór 3.12.4 stelt lokale gebruikers in staat om een denial of service (systeemcrash) te… Linux
- CVE-2013-1869 MEDIUM · 4.3 CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP… Redhat
- CVE-2012-0032 LOW · 3.7 Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to… Redhat
- CVE-2011-4573 LOW · 3.5 Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update… Redhat
- CVE-2011-3346 MEDIUM · 4.0 Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access… Qemu Redhat Xen
- CVE-2014-2590 MEDIUM · 5.0 The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote… Siemens
- CVE-2014-0635 HIGH · 7.5 Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors. Emc
- CVE-2014-0634 MEDIUM · 6.0 EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it… Emc
- CVE-2014-0633 HIGH · 7.7 De GUI in EMC VPLEX GeoSynchrony 4.x en 5.x voor 5.3 valideert de sessietime-outwaarden niet goed, wat het voor externe aanvallers gemakkelijker zou kunnen maken… Emc
- CVE-2014-0632 HIGH · 9.0 Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors. Emc
- CVE-2014-0050 HIGH · 7.5 MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of… Oracle Apache
- CVE-2013-0662 HIGH · 9.3 Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large… Schneider-electric Schneider Electric
- CVE-2014-2034 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Sonatype Nexus Oss en Pro 2.4.0 tot 2.7.1 stelt aanvallers in staat om willekeurige gebruikersaccounts aan te maken via onbekende vectoren met… Sonatype
- CVE-2013-7349 HIGH · 7.5 Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter to news/send.php, (2) thread_id parameter… Raoul Proenca
- CVE-2013-5640 HIGH · 7.5 Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) answer_id or (2) question_id parameter to polls/vote.php,… Raoul Proenca
- CVE-2013-2278 HIGH · 10.0 Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and… Jgaa
- CVE-2009-5141 MEDIUM · 4.0 Format string kwetsbaarheid in War FTP Daemon (warftpd) 1.82 RC 12 stelt op afstand geverifieerde gebruikers in staat om een denial of service (crash) te… Jgaa
- CVE-2014-2671 MEDIUM · 6.8 Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a… Microsoft
- CVE-2013-6775 HIGH · 10.0 Het Chainfire SuperSU-pakket voor Android vóór versie 1.69 stelt aanvallers in staat om privileges te verkrijgen via de (1) backtick of (2) $() type shell-metatekens… Chainfire Google
- CVE-2013-6774 HIGH · 10.0 Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and… Chainfire Google Androidsu Koushik Dutta
- CVE-2013-6770 HIGH · 7.6 The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon… Koushik Dutta Google
- CVE-2013-6769 HIGH · 10.0 The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su. Koushik Dutta Google
- CVE-2013-6768 MEDIUM · 5.0 Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse… Koushik Dutta Google
- CVE-2013-7347 LOW · 3.7 Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading… Redhat
- CVE-2012-3359 LOW · 3.7 Luci in Red Hat Conga slaat de gebruikersnaam en het wachtwoord van de gebruiker op in een Base64-gecodeerde tekenreeks in de __ac sessiecookie, waarmee aanvallers… Redhat
- CVE-2014-1982 HIGH · 10.0 De administratieve interface in Allied Telesis AT-RG634A ADSL Breedbandrouter 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4 en iMG646BD firmware 3.5 stelt externe aanvallers in staat… Alliedtelesis
- CVE-2014-0983 MEDIUM · 6.9 Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D… Oracle
- CVE-2014-0981 MEDIUM · 4.4 VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local… Oracle
- CVE-2014-2669 MEDIUM · 6.5 Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to… Postgresql
- CVE-2014-0086 MEDIUM · 4.3 De doFilter-functie in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5 en 5.x stelt externe aanvallers in staat om een denial of service (geheugenverbruik en out-of-memory fout)… Redhat
- CVE-2014-0067 MEDIUM · 4.6 The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a… Apple Postgresql
- CVE-2014-0066 MEDIUM · 4.0 De chkpass-extensie in PostgreSQL vóór 8.4.20, 9.0.x vóór 9.0.16, 9.1.x vóór 9.1.12, 9.2.x vóór 9.2.7 en 9.3.x vóór 9.3.3 controleert de retourwaarde van de cryptbibliotheekfunctie… Postgresql
- CVE-2014-0065 MEDIUM · 6.5 Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to… Postgresql
- CVE-2014-0064 MEDIUM · 6.5 Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x… Postgresql
- CVE-2014-0063 MEDIUM · 6.5 Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users… Postgresql
- CVE-2014-0062 MEDIUM · 4.9 Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before… Postgresql
- CVE-2014-0061 MEDIUM · 6.5 Met de validatiefuncties voor de proceduretalen (PL's) in PostgreSQL vóór 8.4.20, 9.0.x vóór 9.0.16, 9.1.x vóór 9.1.12, 9.2.x vóór 9.2.7 en 9.3.x vóór 9.3.3 kunnen… Postgresql
- CVE-2014-0060 MEDIUM · 4.0 PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which… Postgresql
- CVE-2014-2670 LOW · 3.5 Cross-site scripting (XSS) vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to inject arbitrary web script or HTML via… Zohocorp
- CVE-2014-1516 MEDIUM · 5.0 The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0.1 on Android relies on Android's weak approach to seeding the Math.random function, which makes it… Mozilla Google
- CVE-2014-0344 MEDIUM · 6.5 Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using… Zohocorp
- CVE-2014-2131 MEDIUM · 6.1 The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems… Cisco
- CVE-2014-1645 HIGH · 7.5 SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands… Symantec
- CVE-2014-1644 HIGH · 7.5 The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by… Symantec
- CVE-2014-0880 HIGH · 7.5 IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2… Ibm
- CVE-2013-6211 HIGH · 7.8 Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System… Hp
- CVE-2014-2668 MEDIUM · 5.0 Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids. Apache
- CVE-2014-2599 MEDIUM · 4.9 The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x for 64-bit allow local guest administrators to cause a denial of… Xen