CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3176 HIGH · 10.0 Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute… Google
- CVE-2014-3175 HIGH · 10.0 Meerdere niet-gespecificeerde kwetsbaarheden in Google Chrome vóór 37.0.2062.94 stellen aanvallers in staat om een denial of service te veroorzaken of mogelijk andere impact te hebben… Google
- CVE-2014-3174 MEDIUM · 5.0 modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to… Google
- CVE-2014-3173 MEDIUM · 5.0 The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows… Google
- CVE-2014-3172 MEDIUM · 6.4 De Debugger-extensie-API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome vóór versie 37.0.2062.94 valideert de URL van een tabblad niet vóór een koppelingsbewerking. Hierdoor kunnen externe aanvallers de… Google
- CVE-2014-3171 HIGH · 7.5 Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or… Google
- CVE-2014-3170 MEDIUM · 6.4 extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '' character in a host name, which allows remote attackers to spoof the… Google
- CVE-2014-3169 HIGH · 7.5 Use-after-free kwetsbaarheid in core/dom/ContainerNode.cpp in de dom-implementatie in Blink, zoals gebruikt in Google Chrome vóór 37.0.2062.94, stelt externe aanvallers in staat om een denial of… Debian Opensuse Google
- CVE-2014-3168 HIGH · 7.5 Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or… Google Debian Opensuse
- CVE-2014-3596 MEDIUM · 5.8 The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common… Apache
- CVE-2014-3575 MEDIUM · 4.3 Met de OLE-voorbeeldgeneratie in Apache OpenOffice vóór 4.1.1 en OpenOffice.org (OOo) kunnen externe aanvallers willekeurige gegevens in documenten insluiten via vervaardigde OLE-objecten. Redhat Apache Libreoffice
- CVE-2014-5336 MEDIUM · 4.3 Monkey HTTP-server vóór 1.5.3, wanneer de File Descriptor Table (FDT) is ingeschakeld en aangepaste foutmeldingen zijn ingesteld, stelt externe aanvallers in staat om een denial… Monkey-project
- CVE-2014-5307 HIGH · 7.2 Heap-based buffer overflow in the PavTPK.sys kernel mode driver of Panda Security 2014 products before hft131306s24_r1 allows local users to gain privileges via a crafted… Pandasecurity
- CVE-2014-5263 MEDIUM · 6.8 De macro vmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 beëindigt de lijst niet met de macro VMSTATE_END_OF_LIST, waardoor aanvallers een denial-of-serviceaanval kunnen uitvoeren (toegang buiten de… Qemu
- CVE-2014-5035 MEDIUM · 6.8 Met de Netconf (TCP) -service in OpenDaylight 1.0 kunnen aanvallers op afstand willekeurige bestanden lezen via een XML-declaratie van een externe entiteit in combinatie met… Opendaylight
- CVE-2014-3907 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users. Mailpoet
- CVE-2014-3524 HIGH · 9.3 Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet. Apache Libreoffice
- CVE-2014-3061 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote attackers to hijack… Ibm
- CVE-2014-3041 MEDIUM · 6.5 SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2… Ibm
- CVE-2014-3035 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in IBM Emptoris Spend Analysis 9.5.x vóór 9.5.0.4, 10.0.1.x vóór 10.0.1.3 en 10.0.2.x vóór 10.0.2.4 stelt op afstand geverifieerde gebruikers in… Ibm
- CVE-2014-3034 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before… Ibm
- CVE-2014-2528 MEDIUM · 6.8 kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single… Kdirstat Project Opensuse
- CVE-2014-2527 MEDIUM · 6.8 kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double… Kdirstat Project Opensuse
- CVE-2014-0483 LOW · 3.5 The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a… Opensuse Djangoproject
- CVE-2014-0482 MEDIUM · 6.0 The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows… Opensuse Djangoproject
- CVE-2014-0481 MEDIUM · 4.3 The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3… Opensuse Opensuse Project Djangoproject Debian
- CVE-2014-0480 MEDIUM · 5.8 The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which… Opensuse Djangoproject
- CVE-2014-4790 MEDIUM · 4.9 IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 and Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x… Ibm
- CVE-2014-3335 MEDIUM · 4.6 Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows… Cisco
- CVE-2014-3040 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x… Ibm
- CVE-2014-3033 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in IBM Emptoris Sourcing Portfolio 9.5.x vóór 9.5.1.3, 10.0.0.x vóór 10.0.0.1, 10.0.1.x vóór 10.0.1.3 en 10.0.2.x vóór 10.0.2.4 stelt op afstand… Ibm
- CVE-2013-6335 LOW · 3.3 De Backup-Archive-client in IBM Tivoli Storage Manager (TSM) voor ruimtebeheer 5.x en 6.x vóór 6.2.5.3, 6.3.x vóór 6.3.2, 6.4.x vóór 6.4.2 en 7.1.x vóór 7.1.0.3… Ibm Linux Hp Oracle
- CVE-2014-5458 HIGH · 7.5 SQL-injectiekwetsbaarheid in sqrl_verify.php in php-sqrl stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de berichtparameter. Php-sqrl Project
- CVE-2014-5457 LOW · 2.1 De QNAP TS-469U met firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP en SS-839 gebruiken wereldwijd leesbare rechten voor /etc/config/shadow, waardoor lokale gebruikers gebruikersnamen en gehashte wachtwoorden… Qnap
- CVE-2014-5456 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticated users with the "[Content Type]: Create new content" permission… Social Stats Project
- CVE-2014-5455 MEDIUM · 5.3 Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to… Openvpn Privatetunnel
- CVE-2014-5454 MEDIUM · 6.0 Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a… Sas
- CVE-2014-5453 HIGH · 7.2 Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%Ubisoft Game Launcher), which allows local users to gain… Ubi
- CVE-2014-5335 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attackers to hijack the authentication of administrators for requests that… Innovaphone
- CVE-2014-5356 MEDIUM · 4.0 OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce… Openstack Canonical
- CVE-2014-5253 MEDIUM · 4.9 OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users… Openstack Canonical
- CVE-2014-5252 MEDIUM · 4.9 De V3 API in OpenStack Identity (Keystone) 2014.1.x vóór 2014.1.2.1 en Juno vóór Juno-3 werkt de issued_at-waarde bij voor UUID v2-tokens, waarmee op afstand geverifieerde… Openstack Canonical
- CVE-2014-5251 MEDIUM · 4.9 The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration… Openstack Canonical
- CVE-2014-3589 MEDIUM · 5.0 PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a… Debian Python Opensuse
- CVE-2014-2216 HIGH · 7.5 De FortiManager-protocolservice in Fortinet FortiOS vóór 4.3.16 en 5.0.0 vóór 5.0.8 op FortiGate-apparaten stelt externe aanvallers in staat om een denial of service te veroorzaken… Fortinet
- CVE-2014-4325 HIGH · 7.2 De cmd_boot-functie in app/aboot/aboot.c in de Little Kernel (LK)-bootloader, zoals gedistribueerd met Qualcomm Innovation Center (QuIC) Android-bijdragen voor MSM-apparaten en andere producten, stelt aanvallers in… Little Kernel Project
- CVE-2014-0974 LOW · 1.9 The boot_linux_from_mmc function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other… Little Kernel Project
- CVE-2014-0973 HIGH · 7.2 De image_verify-functie in platform/msm_shared/image_verify.c in de Little Kernel (LK) bootloader, zoals gedistribueerd met Qualcomm Innovation Center (QuIC) Android-bijdragen voor MSM-apparaten en andere producten, controleert niet… Little Kernel Project
- CVE-2014-2634 HIGH · 9.4 Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify… Hp
- CVE-2014-2633 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication… Hp