CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2573 LOW · 2.3 The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass… Openstack
- CVE-2014-2386 MEDIUM · 5.0 Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1)… Icinga Opensuse
- CVE-2013-5951 LOW · 2.6 Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML… Extplorer
- CVE-2014-1515 LOW · 1.9 Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive… Mozilla Google
- CVE-2014-1492 MEDIUM · 4.3 The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in… Mozilla
- CVE-2014-0628 MEDIUM · 5.0 The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause… Dell
- CVE-2014-0076 LOW · 1.9 The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local… Openssl
- CVE-2014-2284 MEDIUM · 5.0 De Linux-implementatie van de ICMP-MIB in Net-SNMP 5.5 vóór 5.5.2.1, 5.6.x vóór 5.6.2.1 en 5.7.x vóór 5.7.2.1 valideert invoer niet goed, waardoor aanvallers op afstand… Net-snmp
- CVE-2013-1408 MEDIUM · 6.5 Meerdere SQL-injectiekwetsbaarheden in de Wysija Newsletters-plug-in vóór 2.2.1 voor WordPress stellen externe geverifieerde beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de (1)… Wysija Newsletters Project
- CVE-2012-6430 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary… Opensolution
- CVE-2012-4886 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in wpsio.dll in Kingsoft WPS Office 2012, mogelijk 8.1.0.3238, stelt externe aanvallers in staat om willekeurige code uit te voeren via… Kingsoft
- CVE-2014-2568 LOW · 2.9 Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging… Linux Canonical
- CVE-2014-2523 HIGH · 10.0 net/netfilter/nf_conntrack_proto_dccp.c in de Linux-kernel tot en met 3.13.6 gebruikt een DCCP-headeraanwijzer onjuist, waardoor externe aanvallers een denial of service (systeemcrash) kunnen veroorzaken of mogelijk willekeurige… Linux Canonical
- CVE-2014-0131 LOW · 2.9 Use-after-free kwetsbaarheid in de skb_segment-functie in net/core/skbuff.c in de Linux-kernel via 3.13.6 stelt aanvallers in staat om gevoelige informatie uit het kernelgeheugen te verkrijgen door… Linux Opensuse Suse
- CVE-2013-7339 MEDIUM · 4.7 The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system… Linux
- CVE-2014-2589 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script… Sonicwall
- CVE-2014-2588 MEDIUM · 4.0 Directory traversal kwetsbaarheid in servlet/downloadRapport in McAfee Asset Manager 6.6 stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te lezen via een ..… Mcafee
- CVE-2014-2587 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 stelt externe geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via de gebruikersnaam van een… Mcafee
- CVE-2014-2586 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or… Mcafee
- CVE-2014-2585 MEDIUM · 4.9 ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's… Owncloud
- CVE-2014-2057 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in ownCloud vóór 6.0.2 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Owncloud
- CVE-2014-0016 MEDIUM · 4.3 stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with… Stunnel
- CVE-2013-7345 MEDIUM · 5.0 Het BEGIN van de reguliere expressie in de awk-scriptdetector in Magic/Magdir/commando's in het bestand vóór 5.15 gebruikt meerdere jokertekens met onbeperkte herhalingen, waardoor contextafhankelijke aanvallers… Christos Zoulas Php Debian
- CVE-2013-7344 MEDIUM · 6.5 Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE:… Owncloud
- CVE-2013-0303 MEDIUM · 6.5 Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE:… Owncloud
- CVE-2014-2572 MEDIUM · 4.0 mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified… Moodle
- CVE-2014-2571 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the quiz_question_tostring function in mod/quiz/editlib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows… Moodle
- CVE-2014-2258 HIGH · 7.8 Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets,… Siemens
- CVE-2014-2256 HIGH · 7.8 Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets,… Siemens
- CVE-2014-2254 HIGH · 7.8 Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets,… Siemens
- CVE-2014-2252 MEDIUM · 6.1 Siemens SIMATIC S7-1200 CPU PLC-apparaten met firmware vóór 4.0 stellen externe aanvallers in staat om een denial of service (overgang naar defectmodus) te veroorzaken via… Siemens
- CVE-2014-2250 HIGH · 8.3 De willekeurige nummergenerator op Siemens SIMATIC S7-1200 CPU PLC-apparaten met firmware vóór 4.0 heeft niet voldoende entropie, wat het voor externe aanvallers gemakkelijker maakt om… Siemens
- CVE-2014-0129 MEDIUM · 4.0 badges/mybadges.php in Moodle 2.5.x vóór 2.5.5 en 2.6.x vóór 2.6.2 volgt de gebruiker aan wie een badge is uitgegeven niet goed, waardoor op afstand geverifieerde… Moodle
- CVE-2014-0127 MEDIUM · 4.9 The time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete_guest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote… Moodle
- CVE-2014-0126 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in enrol/imsenterprise/importnow.php in Moodle via 2.3.11, 2.4.x vóór 2.4.9, 2.5.x vóór 2.5.5 en 2.6.x vóór 2.6.2 stelt externe aanvallers in… Moodle
- CVE-2014-0125 MEDIUM · 5.8 repository/alfresco/lib.php in Moodle via 2.3.11, 2.4.x vóór 2.4.9, 2.5.x vóór 2.5.5 en 2.6.x vóór 2.6.2 plaatst een sessiesleutel in een URL, waarmee externe aanvallers bedoelde… Moodle
- CVE-2014-0124 MEDIUM · 4.0 The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 do not properly restrict… Moodle
- CVE-2014-0123 MEDIUM · 4.9 Het wikisubsysteem in Moodle via 2.3.11, 2.4.x vóór 2.4.9, 2.5.x vóór 2.5.5 en 2.6.x vóór 2.6.2 beperkt de (1) toegang tot bekijken en (2) bewerken… Moodle
- CVE-2014-0122 MEDIUM · 4.9 mod/chat/chat_ajax.php in Moodle via 2.3.11, 2.4.x vóór 2.4.9, 2.5.x vóór 2.5.5 en 2.6.x vóór 2.6.2 controleert niet goed op de mod/chat:chat-mogelijkheid tijdens chatsessies, waardoor op… Moodle
- CVE-2013-7343 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML… Flowplayer
- CVE-2013-7342 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.1 allows remote attackers to inject arbitrary web script or HTML… Flowplayer
- CVE-2013-7341 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before… Flowplayer Moodle
- CVE-2014-2497 MEDIUM · 4.3 The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer… Php Canonical Suse Redhat
- CVE-2014-2276 MEDIUM · 5.0 The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5 does not properly restrict additions to the Connectrix Manager repository, which allows… Emc
- CVE-2014-2567 MEDIUM · 4.3 Met de OpenConnectionTask:: handleStateHelper-functie in Imap/Tasks/OpenConnectionTask.cpp in Trojita vóór 0.4.1 kunnen man-in-the-middle-aanvallers het gebruik van cleartext activeren voor het opslaan van een bericht in een… Trojita Project
- CVE-2014-0879 HIGH · 9.3 Stack-based buffer overflow in the Taskmaster Capture ActiveX control in IBM Datacap Taskmaster Capture 8.0.1, and 8.1 before FP2, allows remote attackers to execute arbitrary… Ibm
- CVE-2014-0829 MEDIUM · 6.5 Meerdere bufferoverlopen in IBM Rational ClearCase 7.x vóór 7.1.2.13, 8.0.0.x vóór 8.0.0.10 en 8.0.1.x vóór 8.0.1.3 staan externe geverifieerde gebruikers toe om bevoorrechte toegang te… Ibm
- CVE-2013-6729 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM QuickFile 1.0.0.0 before iFix 4 and 1.1.0.1 before iFix 3 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2013-5401 MEDIUM · 5.0 De command-port listener in IBM WebSphere MQ Internet Pass-Thru (MQIPT) 2.x vóór 2.1.0.1 stelt externe aanvallers in staat om een denial of service (uitval van… Ibm
- CVE-2014-0003 HIGH · 7.5 The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via… Apache