CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0895 HIGH · 7.5 Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted… Ibm
- CVE-2014-0873 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM)… Ibm
- CVE-2014-0850 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Reference Data Management (RDM) Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to… Ibm
- CVE-2014-0339 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Webmin
- CVE-2014-0338 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script… Watchguard
- CVE-2013-6210 HIGH · 7.5 Unspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1932. Hp
- CVE-2013-6208 HIGH · 7.2 Unspecified vulnerability in HP Smart Update Manager 5.3.5 before build 70 on Linux allows local users to gain privileges via unknown vectors. Hp Linux
- CVE-2013-4059 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in IBM InfoSphere Information Server 8.x tot en met 8.5 FP3, 8.7.x tot en met 8.7 FP2 en 9.1.x tot… Ibm
- CVE-2013-4058 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users… Ibm
- CVE-2013-4057 MEDIUM · 6.8 Een CSRF-kwetsbaarheid (cross-site request forgery) in het XML-pakket van IBM InfoSphere Information Server 8.5.x tot en met 8.5 FP3, 8.7.x tot en met 8.7 FP2… Ibm
- CVE-2013-0301 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in ownCloud before 4.0.12 allows remote attackers to hijack the authentication of users for requests that change the… Owncloud
- CVE-2013-0300 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that (1) change… Owncloud
- CVE-2013-0299 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests… Owncloud
- CVE-2014-2049 MEDIUM · 5.0 The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors. Owncloud
- CVE-2014-2047 MEDIUM · 6.8 Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web… Owncloud
- CVE-2013-4963 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting… Puppet
- CVE-2013-2150 LOW · 3.5 Meerdere cross-site scripting (XSS) -kwetsbaarheden in js/viewer.js in ownCloud vóór 4.5.12 en 5.x vóór 5.0.7 stellen externe aanvallers in staat om willekeurig webscript of HTML… Owncloud
- CVE-2013-2149 LOW · 3.5 Meerdere XSS-kwetsbaarheden (cross-site scripting) in ownCloud vóór versie 4.0.16 en in versie 5.x vóór 5.0.7 stellen externe geauthenticeerde gebruikers in staat om willekeurige webscripts of… Owncloud
- CVE-2013-2089 MEDIUM · 4.6 Onvolledige blacklist-kwetsbaarheid in ownCloud vóór 5.0.6 stelt op afstand geverifieerde gebruikers in staat om willekeurige PHP-code uit te voeren door een vervaardigd bestand te uploaden… Owncloud
- CVE-2013-2086 MEDIUM · 5.0 De configuratielader in ownCloud 5.0.x vóór versie 5.0.6 stelt externe aanvallers in staat om CSRF-tokens en andere gevoelige informatie te verkrijgen door een niet-gespecificeerd JavaScript-bestand… Owncloud
- CVE-2013-2085 MEDIUM · 4.0 Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the… Owncloud
- CVE-2013-2048 MEDIUM · 6.5 ownCloud vóór 5.0.6 controleert de machtigingen niet goed, waardoor op afstand geverifieerde gebruikers willekeurige API-opdrachten kunnen uitvoeren via niet-gespecificeerde vectoren. OPMERKING: dit kan worden gebruikt… Owncloud
- CVE-2013-2047 LOW · 2.1 The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically… Owncloud
- CVE-2013-2044 MEDIUM · 5.8 Open redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Owncloud
- CVE-2013-2043 MEDIUM · 4.0 apps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download… Owncloud
- CVE-2013-2042 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in ownCloud vóór 4.0.15, 4.5.x vóór 4.5.11 en 5.0.x vóór 5.0.6 stellen op afstand geverifieerde gebruikers in staat om willekeurig… Owncloud
- CVE-2013-2041 LOW · 3.5 Meerdere cross-site scripting (XSS) -kwetsbaarheden in ownCloud 5.0.x vóór 5.0.6 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via… Owncloud
- CVE-2013-2040 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in ownCloud vóór 4.0.15, 4.5.x vóór 4.5.11 en 5.0.x vóór 5.0.6 stellen op afstand geverifieerde gebruikers in staat om willekeurig… Owncloud
- CVE-2013-2039 MEDIUM · 4.0 Directory traversal-kwetsbaarheid in lib/files/view.php in ownCloud vóór 4.0.15, 4.5.x 4.5.11 en 5.x vóór 5.0.6 geeft externe geverifieerde gebruikers toegang tot willekeurige bestanden via niet-gespecificeerde vectoren. Owncloud
- CVE-2013-1963 MEDIUM · 4.0 De contacttoepassing in ownCloud vóór 4.5.10 en 5.x vóór 5.0.5 controleert niet goed het eigendom van contacten, waardoor op afstand geverifieerde gebruikers willekeurige contacten kunnen… Owncloud
- CVE-2013-1939 MEDIUM · 5.0 The HTMLBrowser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly… Fruux Microsoft Owncloud
- CVE-2013-1851 LOW · 3.5 Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the user_migrate application is enabled, allows remote authenticated users to import… Owncloud
- CVE-2013-1850 MEDIUM · 6.5 Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud before 4.0.13 and 4.5.x before 4.5.8 allow remote authenticated users to… Owncloud
- CVE-2013-1822 LOW · 2.1 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via… Owncloud
- CVE-2013-1399 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet… Puppet Puppetlabs
- CVE-2013-1398 HIGH · 8.5 The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated… Puppet Puppetlabs
- CVE-2012-5158 MEDIUM · 4.0 Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via… Puppet Puppetlabs
- CVE-2012-0891 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject… Puppet
- CVE-2014-2324 MEDIUM · 5.0 Meerdere kwetsbaarheden voor directorytraversal in (1) mod_evhost en (2) mod_simple_vhost in lighttpd vóór 1.4.35 stellen externe aanvallers in staat om willekeurige bestanden te lezen via… Lighttpd Debian Opensuse Suse
- CVE-2014-2323 CRITICAL · 9.8 SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. Lighttpd Debian Opensuse Suse
- CVE-2014-2292 HIGH · 7.2 Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before… Juniper
- CVE-2014-2291 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de Pulse Collaboration (Secure Meeting) gebruikerspagina's in Juniper Junos Pulse Secure Access Service (ook bekend als SSL VPN) met IVE… Juniper
- CVE-2014-2270 MEDIUM · 4.3 softmagic.c in bestand vóór 5.17 en libmagic stelt contextafhankelijke aanvallers in staat om een denial of service (toegang tot geheugen buiten de grenzen en crash)… File Project Php Debian Canonical
- CVE-2014-0467 MEDIUM · 5.0 Bufferoverloop in copy.c in Mutt vóór 1.5.23 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een vervaardigde RFC2047-headerregel, gerelateerd… Mutt Opensuse
- CVE-2014-0017 LOW · 1.9 The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which… Libssh
- CVE-2013-6476 MEDIUM · 4.4 The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse… Canonical Debian Fedoraproject Linuxfoundation
- CVE-2013-6475 MEDIUM · 6.8 Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary… Canonical Debian Fedoraproject Linuxfoundation
- CVE-2013-6474 MEDIUM · 6.8 Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file. Linuxfoundation Canonical Debian Fedoraproject
- CVE-2013-6473 MEDIUM · 6.8 Meerdere op heap gebaseerde bufferoverlopen in het urftopdf-filter in cups-filters 1.0.25 vóór 1.0.47 stellen externe aanvallers in staat om willekeurige code uit te voeren via… Canonical Linuxfoundation
- CVE-2013-0307 LOW · 3.5 Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via… Owncloud