CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0877 MEDIUM · 5.0 IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then… Ibm
- CVE-2014-6252 MEDIUM · 6.5 Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to cause a denial of… Sap
- CVE-2014-6029 MEDIUM · 4.9 TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php. Torrentflux Project
- CVE-2014-6028 MEDIUM · 4.0 TorrentFlux 2.4 stelt op afstand geverifieerde gebruikers in staat om cookies van andere gebruikers te verkrijgen via de cid-parameter in een editCookies-actie naar profile.php. Torrentflux Project
- CVE-2014-5508 LOW · 3.5 Multiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote authenticated IRCops or HelpServ bot managers to cause a denial of service… Srvx
- CVE-2014-5036 LOW · 1.9 The Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows… Eucalyptus
- CVE-2014-0863 MEDIUM · 4.0 The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory, which… Ibm
- CVE-2014-0610 HIGH · 10.0 The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or… Novell Microsoft
- CVE-2014-6060 LOW · 3.3 The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHO_OPTIONSOVERLOADED option… Dhcpcd Project Google
- CVE-2014-5506 MEDIUM · 6.8 Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file. Sap
- CVE-2014-5505 MEDIUM · 6.8 Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file. Sap
- CVE-2014-5504 HIGH · 7.5 SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute… Solarwinds
- CVE-2014-5461 MEDIUM · 5.0 Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash)… Opensuse Canonical Debian Lua
- CVE-2014-5377 MEDIUM · 5.0 ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. Manageengine
- CVE-2014-5269 MEDIUM · 5.0 Plack::App::File in Plack before 1.0031 removes trailing slash characters from paths, which allows remote attackers to bypass the whitelist of generated files and obtain sensitive… Plack Project
- CVE-2014-3574 MEDIUM · 4.3 Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML… Apache
- CVE-2014-3529 MEDIUM · 4.3 The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity… Apache
- CVE-2014-2972 MEDIUM · 4.6 expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. Exim
- CVE-2014-2957 MEDIUM · 6.8 De dmarc_process-functie in dmarc.c in Exim vóór 4.82.1, wanneer EXPERIMENTAL_DMARC is ingeschakeld, stelt externe aanvallers in staat om willekeurige code uit te voeren via de… Exim
- CVE-2014-2685 HIGH · 7.5 De GenericConsumer-klasse in de Consumer-component in ZendOpenId vóór 2.0.2 en de Zend_OpenId_Consumer-klasse in Zend Framework 1 vóór 1.12.4 schenden het OpenID 2.0-protocol door ervoor te… Zend
- CVE-2012-6153 MEDIUM · 4.3 http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN)… Apache
- CVE-2012-4768 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the… Mikejolley
- CVE-2012-4234 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in het groepsmoderatiescherm in het controlecentrum (control.php) in Phorum vóór 5.2.19 stelt externe aanvallers in staat om willekeurig webscript of HTML… Phorum
- CVE-2014-5285 HIGH · 7.5 Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1… Tibco
- CVE-2014-4805 LOW · 2.1 IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information… Ibm Linux
- CVE-2014-4759 MEDIUM · 4.0 An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive… Ibm
- CVE-2014-4758 MEDIUM · 4.0 IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests… Ibm
- CVE-2014-3353 HIGH · 7.1 Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption… Cisco
- CVE-2014-3095 LOW · 3.5 The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX,… Ibm Linux Microsoft
- CVE-2014-3094 HIGH · 8.5 Stack-gebaseerde bufferoverloop in IBM DB2 9.7 tot en met FP9a, 9.8 tot en met FP5, 10.1 tot en met FP4 en 10.5 vóór FP4 op… Ibm Linux Microsoft
- CVE-2014-3075 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary… Ibm
- CVE-2014-5465 MEDIUM · 5.0 Directory traversal kwetsbaarheid in force-download.php in de Download Shortcode plugin 0.2.3 en eerder voor WordPress stelt externe aanvallers in staat om willekeurige bestanden te lezen… Werdswords
- CVE-2012-4226 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the… Qpw.famvanakkeren
- CVE-2014-1567 HIGH · 9.3 Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x… Mozilla
- CVE-2014-1566 MEDIUM · 4.3 Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows… Mozilla Google
- CVE-2014-1565 MEDIUM · 5.0 The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does… Mozilla
- CVE-2014-1564 MEDIUM · 4.3 Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote… Opensuse Mozilla
- CVE-2014-1563 HIGH · 10.0 Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to… Opensuse Oracle Mozilla
- CVE-2014-1562 HIGH · 10.0 Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8… Mozilla
- CVE-2014-1554 HIGH · 10.0 Meerdere niet-gespecificeerde kwetsbaarheden in de browser-engine in Mozilla Firefox vóór 32.0 stellen externe aanvallers in staat om een denial of service (geheugenbeschadiging en applicatiecrash) te… Mozilla
- CVE-2014-1553 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers… Opensuse Mozilla
- CVE-2014-6064 MEDIUM · 4.0 The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain… Mcafee
- CVE-2014-5521 MEDIUM · 6.5 plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter. Xrms Crm Project
- CVE-2014-5340 HIGH · 9.3 De wato-component in Check_MK vóór 1.2.4p4 en 1.2.5 vóór 1.2.5i4 gebruikt de augurk Python-module onveilig, waardoor externe aanvallers willekeurige code kunnen uitvoeren via een vervaardigd… Check Mk Project
- CVE-2014-5339 MEDIUM · 4.9 Met Check_MK vóór 1.2.4p4 en 1.2.5 vóór 1.2.5i4 kunnen op afstand geverifieerde gebruikers check_mk-configuratiebestanden (.mk-bestanden) naar willekeurige locaties schrijven via vectoren met betrekking tot rijselecties. Check Mk Project
- CVE-2014-5137 MEDIUM · 5.0 Innovative Interfaces Sierra Library Services Platform 1.2_3 provides different responses for login request depending on whether the user account exists, which allows remote attackers to… Iii
- CVE-2014-5136 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Innovative Interfaces Sierra Library Services Platform 1.2_3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Iii
- CVE-2014-0485 HIGH · 7.5 S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1)… S3ql Project
- CVE-2014-6041 MEDIUM · 5.8 The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a u0000 character, as… Google
- CVE-2014-5452 MEDIUM · 4.3 CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to… Hl7