CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2632 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in de WebTier-component in HP Service Manager (SM) 7.21 en 9.x vóór 9.34 stelt externe aanvallers in staat om willekeurige code uit te… Hp
- CVE-2013-6222 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34… Hp
- CVE-2014-5120 MEDIUM · 6.4 gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow… Php
- CVE-2014-3597 MEDIUM · 6.8 Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial… Php
- CVE-2014-3587 MEDIUM · 4.3 Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before… Christos Zoulas Php
- CVE-2014-5243 MEDIUM · 4.3 MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it… Mediawiki
- CVE-2014-5242 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22.x before 1.22.9 and 1.23.x before 1.23.2 allows remote attackers to inject arbitrary web script or HTML… Mediawiki
- CVE-2014-5241 MEDIUM · 6.8 The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 accepts certain long callback values and does… Mediawiki
- CVE-2014-3563 HIGH · 7.2 Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in… Saltstack
- CVE-2013-6306 MEDIUM · 4.6 Niet-gespecificeerde kwetsbaarheid op IBM Power 7 Systems 740 vóór 740.70 01Ax740_121, 760 vóór 760.40 Ax760_078 en 770 vóór 770.30 01Ax770_062 stelt lokale gebruikers in staat… Ibm
- CVE-2014-5396 HIGH · 7.5 De webinterface in Schrack Technik microControl met firmware vóór 1.7.0 (937) heeft een hardgecodeerd wachtwoord van niet voor het "gebruikers" -account, waardoor aanvallers op afstand… Schrack
- CVE-2014-5368 MEDIUM · 5.0 Directory traversal kwetsbaarheid in de file_get_contents functie in downloadfiles/download.php in de WP Content Source Control (wp-source-control) plugin 3.0.0 en eerder voor WordPress stelt externe aanvallers… Wp Content Source Control Project
- CVE-2014-5338 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web… Check Mk Project
- CVE-2014-5262 HIGH · 7.5 SQL-injectiekwetsbaarheid in het script voor grafiekinstellingen (graph_settings.php) in Cacti 0.8.8b en eerder stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde… Cacti
- CVE-2014-5261 HIGH · 7.5 The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related… Cacti
- CVE-2014-5246 HIGH · 10.0 The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie… Tenda
- CVE-2014-5149 MEDIUM · 4.7 Bepaalde MMU-virtualisatiebewerkingen in Xen 4.2.x tot 4.4.x, bij het gebruik van schaduwpaginatabellen, zijn niet te voorkomen, waardoor lokale HVM-gast een denial of service (vcpu-consumptie) kan… Opensuse Xen
- CVE-2014-5146 MEDIUM · 4.7 Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local… Opensuse Xen
- CVE-2014-5122 MEDIUM · 5.8 Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an… Esri
- CVE-2014-5121 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Esri
- CVE-2014-5097 HIGH · 7.5 Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a… Freereprintables
- CVE-2014-4197 HIGH · 7.5 Meerdere SQL-injectiekwetsbaarheden in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 stellen externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de (1) KAARTEN… Bssys
- CVE-2014-3594 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators… Openstack Opensuse
- CVE-2014-3525 HIGH · 10.0 Ongespecificeerde kwetsbaarheid in Apache Traffic Server 3.x tot en met 3.2.5, 4.x vóór 4.2.1.1 en 5.x vóór 5.0.1 heeft onbekende impact- en aanvalsvectoren, mogelijk gerelateerd… Apache
- CVE-2014-0232 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script… Apache
- CVE-2014-5274 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de view operations pagina in phpMyAdmin 4.1.x vóór 4.1.14.3 en 4.2.x vóór 4.2.7.1 stelt op afstand geverifieerde gebruikers in staat… Phpmyadmin Opensuse
- CVE-2014-5273 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web… Phpmyadmin
- CVE-2014-4767 MEDIUM · 6.5 IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users… Ibm
- CVE-2014-4764 HIGH · 7.1 IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause… Ibm
- CVE-2014-3436 MEDIUM · 5.0 Symantec Encryption Desktop 10.3.x voor 10.3.2 MP3, en Symantec PGP Desktop 10.0.x tot 10.2.x, stelt externe aanvallers in staat om een denial of service (CPU-… Symantec
- CVE-2014-3089 MEDIUM · 4.9 De RDS Java Client-bibliotheek in IBM Rational Directory Server (RDS) 5.1.1.x vóór 5.1.1.2 iFix004 en 5.2.x vóór 5.2.1 iFix003, en Rational Directory Administrator (RDA) 6.0… Ibm
- CVE-2014-3083 MEDIUM · 5.0 IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers… Ibm
- CVE-2014-3070 MEDIUM · 5.0 De addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x vóór 8.0.0.10 en 8.5.x vóór 8.5.5.3 maakt geen accounts… Ibm
- CVE-2014-3022 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) 7.0.x vóór 7.0.0.33, 8.0.x vóór 8.0.0.9 en 8.5.x vóór 8.5.5.3 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen… Ibm
- CVE-2014-0965 MEDIUM · 4.3 IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted… Ibm
- CVE-2014-5385 MEDIUM · 5.0 com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess passwords via… Shopizer
- CVE-2010-5303 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject… Binarymoon
- CVE-2010-5302 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary… Binarymoon
- CVE-2009-5142 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject… Binarymoon Prothemedesign
- CVE-2014-5384 MEDIUM · 5.0 The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array… Freebsd Netbsd
- CVE-2014-3951 MEDIUM · 5.0 Met de HZ-module in de iconv-implementatie in FreeBSD 10.0 vóór p6 en NetBSD kunnen contextafhankelijke aanvallers een denial of service (NULL pointer dereference) veroorzaken via… Freebsd Netbsd
- CVE-2014-5383 MEDIUM · 6.5 SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Alienvault
- CVE-2014-5210 HIGH · 10.0 The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request,… Alienvault
- CVE-2014-5159 HIGH · 7.5 SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. Alienvault
- CVE-2014-5158 HIGH · 10.0 Met de (1) AV-CENTERD SOAP service en (2) back-up commando in de ossim-framework service in AlienVault OSSIM voor 4.6.0 kunnen externe aanvallers willekeurige commando's uitvoeren… Alienvault
- CVE-2014-3577 MEDIUM · 5.8 org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the… Apache
- CVE-2014-3562 MEDIUM · 5.0 Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory. Fedoraproject Redhat
- CVE-2014-5382 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script… Schrack
- CVE-2014-4929 MEDIUM · 6.8 Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local… Owncloud
- CVE-2014-2524 LOW · 3.3 The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack… Mageia Gnu Opensuse Fedoraproject