CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2525 MEDIUM · 6.8 Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters… Pyyaml Opensuse
- CVE-2014-0133 HIGH · 7.5 Op heap gebaseerde bufferoverloop in de SPDY-implementatie in nginx 1.3.15 vóór 1.4.7 en 1.5.x vóór 1.5.12 stelt externe aanvallers in staat om willekeurige code uit… F5 Opensuse
- CVE-2013-2695 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML… Wpsymposiumpro
- CVE-2013-2694 MEDIUM · 5.8 Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct… Wpsymposiumpro
- CVE-2013-0807 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or… Gpeasy
- CVE-2013-0734 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de Mingle Forum-plug-in vóór 1.0.34 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Cartpauj Wordpress
- CVE-2014-2118 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary… Cisco
- CVE-2014-2113 HIGH · 7.8 Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote… Cisco
- CVE-2014-2112 HIGH · 7.8 Met de SSL VPN-functie (ook bekend als WebVPN) in Cisco IOS 15.1 tot en met 15.4 kunnen externe aanvallers een denial of service (geheugenverbruik) veroorzaken… Cisco
- CVE-2014-2111 HIGH · 7.1 De Application Layer Gateway (alg) -module in Cisco IOS 12.2 tot en met 12.4 en 15.0 tot en met 15.4, wanneer nat wordt gebruikt, stelt… Cisco
- CVE-2014-2109 HIGH · 7.8 The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial… Cisco
- CVE-2014-2108 HIGH · 7.8 Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to… Cisco
- CVE-2014-2107 HIGH · 7.1 Cisco IOS 12.2 en 15.0 tot en met 15.3, bij gebruik met de Kailash FPGA vóór 2.6 op RSP720-3C-10GE- en RSP720-3CXL-10GE-apparaten, stelt externe aanvallers in… Cisco
- CVE-2014-2106 HIGH · 7.8 Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP… Cisco
- CVE-2014-2326 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Fedoraproject Opensuse Cacti Debian
- CVE-2014-0089 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark… Theforeman
- CVE-2013-7346 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection… Getsymphony
- CVE-2013-3481 HIGH · 9.3 Op stapels gebaseerde bufferoverloop in Artweaver Plus en Free vóór 3.1.5 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd… B-e-soft
- CVE-2013-2559 MEDIUM · 6.5 SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this… Getsymphony
- CVE-2013-0732 HIGH · 9.3 Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in… Nuance
- CVE-2014-2653 MEDIUM · 6.5 The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking… Openbsd
- CVE-2014-0623 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Self-Service Console in EMC RSA Authentication Manager 7.1 vóór SP4 P32 stelt externe aanvallers in staat om willekeurig webscript… Emc
- CVE-2014-0512 HIGH · 10.0 Met Adobe Reader 11.0.06 kunnen aanvallers een PDF-sandboxbeveiligingsmechanisme omzeilen via niet-gespecificeerde vectoren, zoals aangetoond door VUPEN tijdens een Pwn2Own-wedstrijd op CanSecWest 2014. Adobe
- CVE-2014-0511 HIGH · 10.0 Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition… Adobe
- CVE-2014-0510 HIGH · 10.0 Op heap gebaseerde bufferoverloop in Adobe Flash Player 12.0.0.77 stelt externe aanvallers in staat om willekeurige code uit te voeren en een sandbox-beveiligingsmechanisme te omzeilen… Adobe
- CVE-2014-0506 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe… Adobe Microsoft
- CVE-2014-1303 HIGH · 10.0 Een bufferoverloop in Apple Safari 7.0.2 maakt het voor externe aanvallers mogelijk om willekeurige code uit te voeren en een sandbox-beveiligingsmechanisme te omzeilen via ongespecificeerde… Apple
- CVE-2014-1300 HIGH · 10.0 Unspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary code with root privileges via unknown vectors, as demonstrated by… Apple
- CVE-2014-0055 MEDIUM · 5.5 The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not… Redhat
- CVE-2014-1828 MEDIUM · 4.3 The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service (disk consumption)… Ithoughts
- CVE-2014-1827 MEDIUM · 4.3 The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing… Ithoughts
- CVE-2014-1826 LOW · 2.6 Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to… Ithoughts
- CVE-2014-0904 HIGH · 7.6 Het updateproces in IBM Security AppScan Standard 7.9 tot en met 8.8 vereist geen integriteitscontroles van gedownloade bestanden, waardoor aanvallers op afstand willekeurige code kunnen… Ibm
- CVE-2014-0848 LOW · 3.5 The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values,… Ibm
- CVE-2013-3998 LOW · 3.5 CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject… Ibm
- CVE-2013-3997 MEDIUM · 4.9 Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect… Ibm
- CVE-2013-3976 LOW · 2.1 The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy… Ibm
- CVE-2014-0887 HIGH · 7.1 The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges… Ibm
- CVE-2014-0886 HIGH · 7.1 The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute… Ibm
- CVE-2014-0885 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x vóór 2.8.1-22905 stelt op afstand geverifieerde gebruikers… Ibm
- CVE-2014-0884 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject… Ibm
- CVE-2014-0343 MEDIUM · 4.9 The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to… Virtualaccess
- CVE-2013-5445 MEDIUM · 5.0 IBM Cognos Express 9.0 vóór IFIX 2, 9.5 vóór IFIX 2, 10.1 vóór IFIX 2 en 10.2.1 vóór FP1 stelt lokale gebruikers in staat om… Ibm
- CVE-2013-5444 MEDIUM · 5.0 De server in IBM Cognos Express 9.0 vóór IFIX 2, 9.5 vóór IFIX 2, 10.1 vóór IFIX 2 en 10.2.1 vóór FP1 stelt externe aanvallers… Ibm
- CVE-2013-5443 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in IBM Cognos Express 9.0 vóór IFIX 2, 9.5 vóór IFIX 2, 10.1 vóór IFIX 2 en 10.2.1 vóór FP1… Ibm
- CVE-2014-2538 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in lib/rack/ssl.rb in het rack-ssl gem voor 1.4.0 voor Ruby stelt externe aanvallers in staat om willekeurig webscript of HTML via… Joshua Peek
- CVE-2014-2526 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sForumName or (2)… Barracudadrive
- CVE-2014-2016 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition… Oxid-esales
- CVE-2013-1605 HIGH · 7.5 Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long filename in a GET… Maygion
- CVE-2013-1604 MEDIUM · 5.0 Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary files via a .. (dot dot) in… Maygion