CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-6221 HIGH · 10.0 Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary… Hp
- CVE-2014-4309 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html,… Openfiler
- CVE-2014-4308 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via… Nice
- CVE-2014-4307 HIGH · 7.5 SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter. Webtitan
- CVE-2014-4306 MEDIUM · 5.0 Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (dot dot) in the logfile parameter… Webtitan
- CVE-2014-4305 HIGH · 7.5 Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Nice
- CVE-2014-4304 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the table… Sqlbuddy
- CVE-2014-4303 LOW · 2.1 Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject… Drupac
- CVE-2014-4302 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter. Ham3d
- CVE-2014-4301 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de respond_error-functie in routing.py in Eugene Pankov Ajenti vóór 1.2.21.7 stellen externe aanvallers in staat om willekeurig webscript of… Ajenti
- CVE-2014-3877 MEDIUM · 4.3 Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto… Ulli Horlacher
- CVE-2014-3876 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers to inject arbitrary web script or HTML… Ulli Horlacher
- CVE-2011-2592 HIGH · 9.3 Op heap gebaseerde bufferoverloop in de StartEpa-methode in het nsepacom ActiveX-besturingselement (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in voor Windows 9.x vóór 9.3-57.5 en… Citrix
- CVE-2014-4193 MEDIUM · 5.0 De TLS-implementatie in EMC RSA BSAFE-Java Toolkits (ook bekend als Share voor Java) ondersteunt de Extended Random-extensie tijdens het gebruik van het Dual_EC_DRBG-algoritme, waardoor het… Dell
- CVE-2014-4192 MEDIUM · 5.0 The Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes certain requests for output bytes by considering only the requested… Dell
- CVE-2014-4191 MEDIUM · 5.0 The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during use of the… Dell
- CVE-2014-4040 MEDIUM · 5.0 snap in powerpc-utils 1.2.20 produceert een archief met fstab- en yaboot.conf-bestanden die mogelijk cleartext-wachtwoorden bevatten, en mist een waarschuwing over het bekijken van dit archief… Powerpc-utils Project
- CVE-2014-4039 LOW · 2.1 ppc64-diag 2.6.1 gebruikt 0775-machtigingen voor /tmp/diagSEsnap en beperkt de machtigingen voor /tmp/diagSEsnap/snapH.tar.gz niet correct, waardoor lokale gebruikers gevoelige informatie kunnen verkrijgen door bestanden in dit… Redhat Ppc64-diag Project Suse
- CVE-2014-4038 MEDIUM · 4.4 ppc64-diag 2.6.1 stelt lokale gebruikers in staat om willekeurige bestanden te overschrijven via een symlink-aanval met betrekking tot (1) rtas_errd/diag_support.c en/tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc en /tmp/diagSEsnap/snapH.tar.gz,… Suse Ppc64-diag Project Redhat
- CVE-2013-6078 MEDIUM · 5.8 The default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM) 20130918 uses the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG)… Emc
- CVE-2014-4190 HIGH · 7.8 Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700 with software V200R001 before V200R001SPH013;… Huawei
- CVE-2014-4189 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Hitachi Tuning Manager vóór 7.6.1-06 en 8.x vóór 8.0.0-04 en JP1/Performance Management - Manager Web Optie 07-00 tot 07-54 stelt… Hitachi
- CVE-2014-4188 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54… Hitachi
- CVE-2014-4187 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in signup.php in ClipBucket stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het veld Gebruikersnaam. Clip-bucket
- CVE-2014-4048 MEDIUM · 4.3 Met het PJSIP-kanaalstuurprogramma in Asterisk Open Source vóór 12.3.1 kunnen externe aanvallers een denial of service (impasse) veroorzaken door een abonnementsaanvraag te beëindigen voordat deze… Digium
- CVE-2014-4047 MEDIUM · 5.0 Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote… Digium
- CVE-2014-4046 MEDIUM · 6.5 Met Asterisk Open Source 11.x vóór 11.10.1 en 12.x vóór 12.3.1 en Certified Asterisk 11.6 vóór 11.6-cert3 kunnen op afstand geverifieerde Manager-gebruikers willekeurige shell-opdrachten uitvoeren… Digium
- CVE-2014-4045 MEDIUM · 4.3 The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_expiry is set to zero, allows remote attackers to… Digium
- CVE-2014-4044 MEDIUM · 5.0 OpenAFS 1.6.8 does not properly clear the fields in the host structure, which allows remote attackers to cause a denial of service (uninitialized memory access… Openafs
- CVE-2014-3476 MEDIUM · 6.0 OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain… Openstack Suse
- CVE-2014-3249 MEDIUM · 5.0 Puppet Enterprise 2.8.x vóór 2.8.7 stelt aanvallers op afstand in staat om gevoelige informatie te verkrijgen via vectoren waarbij knooppunten worden verborgen en zichtbaar gemaakt. Puppet
- CVE-2014-0478 MEDIUM · 4.0 APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature. Debian
- CVE-2014-4166 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de liedgeschiedenis in SHOUTcast DNAS 2.2.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het… Shoutcast
- CVE-2014-4165 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in ntop stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de titelparameter in een lijstactie naar… Opensuse Ntop
- CVE-2014-4164 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html. Algosec
- CVE-2014-4163 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests… Featured Comments Plugin Project
- CVE-2014-4162 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentication of administrators for requests that… Zyxel
- CVE-2014-3995 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or… Reviewboard
- CVE-2014-3994 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to… Reviewboard
- CVE-2014-3428 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Yealink VoIP-telefoons met firmware 28.72.0.2 stelt externe aanvallers in staat om willekeurig webscript of HTML via de modelparameter in servlet… Yealink
- CVE-2010-5111 MEDIUM · 6.8 Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Echoping Project
- CVE-2014-2004 MEDIUM · 5.0 De PPP Access Concentrator (PPPAC) op SEIL SEIL/x86-routers 1.00 t/m 3.10, SEIL/X1-routers 1.00 t/m 4.50, SEIL/X2-routers 1.00 t/m 4.50, SEIL/B1-routers 1.00 t/m 4.50, SEIL/Turbo-routers 1.80… Iij
- CVE-2014-2003 HIGH · 7.6 JustSystems JUST Online Update, zoals gebruikt in Ichitaro tot en met 2014 en andere producten, valideert niet goed de handtekeningen van updatemodules, waardoor externe aanvallers… Justsystems
- CVE-2014-3290 MEDIUM · 4.8 The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by… Cisco
- CVE-2014-2176 HIGH · 7.1 Cisco IOS XR 4.1.2 tot en met 5.1.1 op ASR 9000-apparaten, wanneer een Trident-gebaseerde lijnkaart wordt gebruikt, stelt externe aanvallers in staat om een denial… Cisco
- CVE-2014-2002 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in C-BOARD Moyuku 1.01b6 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. C-board Moyuku Project
- CVE-2014-0960 MEDIUM · 6.6 IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH… Ibm
- CVE-2014-0186 MEDIUM · 5.0 A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote attackers to cause a denial of service (CPU… Redhat
- CVE-2014-3295 MEDIUM · 4.8 The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and… Cisco
- CVE-2014-4161 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject arbitrary web script or HTML via the url… Sap