CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5076 MEDIUM · 4.3 The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows… Labanquepostale
- CVE-2014-3862 MEDIUM · 4.3 CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an… Hl7
- CVE-2014-3861 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted… Hl7
- CVE-2014-5472 MEDIUM · 4.0 The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a… Linux
- CVE-2014-5471 MEDIUM · 4.0 Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled… Linux
- CVE-2014-3601 MEDIUM · 4.3 The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows… Suse Opensuse Canonical Linux
- CVE-2013-6124 LOW · 3.3 The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata… Codeaurora
- CVE-2013-2599 MEDIUM · 5.0 Een bepaalde Qualcomm Innovation Center (QuIC) -patch voor de NativeDaemonConnector-klasse in services/java/com/android/server/NativeDaemonConnector.java in Code Aurora Forum (CAF) -releases van Android 4.1.x tot 4.3.x maakt foutopsporingslogboekregistratie… Codeaurora
- CVE-2013-2598 MEDIUM · 6.6 app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to… Codeaurora
- CVE-2013-2595 HIGH · 7.2 The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for… Codeaurora
- CVE-2014-3908 MEDIUM · 5.8 The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Amazon
- CVE-2014-3352 MEDIUM · 4.3 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which… Cisco
- CVE-2014-5247 LOW · 2.1 The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local… Spi-inc
- CVE-2014-5147 MEDIUM · 4.3 Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address… Xen
- CVE-2014-5119 HIGH · 7.5 Een off-by-one-fout in de functie __gconv_translit_find in gconv_trans.c van de GNU C Library (ook bekend als glibc) stelt contextafhankelijke aanvallers in staat een denial-of-service-aanval (crash)… Gnu Debian
- CVE-2014-5073 HIGH · 7.5 vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a… Vmturbo
- CVE-2014-2390 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x… Mcafee
- CVE-2010-5110 MEDIUM · 4.3 Met DCTStream.cc in Poppler vóór 0.13.3 kunnen aanvallers op afstand een denial of service (crash) veroorzaken via een vervaardigd PDF-bestand. Freedesktop
- CVE-2014-5337 MEDIUM · 5.0 De WordPress Mobile Pack-plug-in vóór 2.0.2 voor WordPress beperkt de toegang tot met een wachtwoord beveiligde berichten niet goed, waardoor externe aanvallers gevoelige informatie kunnen… Wordpress Mobile Pack Project Wpmobilepack
- CVE-2014-5128 MEDIUM · 5.0 Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors. Iii
- CVE-2014-5127 MEDIUM · 5.8 Open redirect vulnerability in Innovative Interfaces Encore Discovery Solution 4.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… Iii
- CVE-2014-4930 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in event/index2.do in ManageEngine EventLog Analyzer before 9.0 build 9002 allow remote attackers to inject arbitrary web script or HTML… Zohocorp
- CVE-2014-2593 HIGH · 9.0 The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a… Arubanetworks
- CVE-2012-1503 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or… Sixapart
- CVE-2014-4806 MEDIUM · 5.5 The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 iFix 002, and 9.0.x… Ibm Linux
- CVE-2014-3351 MEDIUM · 5.0 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers… Cisco
- CVE-2014-3350 MEDIUM · 4.0 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via… Cisco
- CVE-2014-3349 MEDIUM · 4.0 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users… Cisco
- CVE-2014-3346 MEDIUM · 6.3 The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter, which… Cisco
- CVE-2014-3093 LOW · 2.1 IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses cleartext passwords in (1) api-paste.ini, (2) debug logs, (3) the installation process, (4) environment checks,… Ibm
- CVE-2014-3084 MEDIUM · 4.9 IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for… Ibm
- CVE-2014-3024 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 through 7.5.0.6 and Maximo Asset Management 7.5.0 through 7.5.0.3 and… Ibm
- CVE-2014-0897 LOW · 3.5 The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis… Ibm
- CVE-2014-0888 MEDIUM · 4.9 IBM Worklight Foundation 5.x en 6.x vóór 6.2.0.0, zoals gebruikt in Worklight en Mobile Foundation, stelt op afstand geverifieerde gebruikers in staat om de applicatie-authenticiteitsfunctie… Ibm
- CVE-2014-0600 HIGH · 7.8 FileUploadServlet in de Administration-service in Novell GroupWise 2014 voordat SP1 aanvallers op afstand in staat stelt om willekeurige bestanden te lezen of te schrijven via… Novell
- CVE-2013-5467 HIGH · 7.2 Monitoring Agent voor UNIX-logboeken 6.2.0 tot en met FP03, 6.2.1 tot en met FP04, 6.2.2 tot en met FP09 en 6.2.3 tot en met FP04… Ibm Linux
- CVE-2014-3347 MEDIUM · 5.4 Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service… Cisco
- CVE-2014-3345 MEDIUM · 5.0 The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for… Cisco
- CVE-2014-4200 MEDIUM · 4.7 vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local… Vmware
- CVE-2014-4199 MEDIUM · 6.3 vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a… Vmware
- CVE-2014-5399 HIGH · 7.5 SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified… Invensys
- CVE-2014-5398 LOW · 2.1 Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via… Invensys
- CVE-2014-5397 HIGH · 7.5 Cross-site scripting (XSS) -kwetsbaarheid in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 tot en met 5.5 stelt externe aanvallers in staat om willekeurig… Invensys
- CVE-2014-4619 HIGH · 9.3 EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager (aka NovellIM)… Emc
- CVE-2014-3344 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0… Cisco
- CVE-2014-2381 LOW · 2.1 Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a… Invensys
- CVE-2014-2380 HIGH · 7.8 Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 tot en met 5.5 maakt gebruik van zwakke codering, waardoor externe aanvallers gevoelige informatie kunnen verkrijgen… Invensys
- CVE-2014-0762 MEDIUM · 4.7 The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to… Qeiinc
- CVE-2014-0761 HIGH · 7.1 The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a… Qeiinc
- CVE-2014-3177 HIGH · 10.0 Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute… Google