CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4160 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in het testcanvas knooppunt in SAP NetWeaver Business Client (NWBC) stellen externe aanvallers in staat om willekeurig webscript of HTML… Sap
- CVE-2014-4159 MEDIUM · 5.8 Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Sap
- CVE-2014-4158 HIGH · 7.5 Op stapels gebaseerde bufferoverloop in Kolibri 2.0 stelt externe aanvallers in staat om willekeurige code uit te voeren via een lange URI in een GET-verzoek. Senkas
- CVE-2014-3814 HIGH · 7.8 The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a… Juniper
- CVE-2014-3813 HIGH · 7.8 Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers… Juniper
- CVE-2014-3812 MEDIUM · 5.0 The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service… Juniper
- CVE-2014-3805 HIGH · 10.0 The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license, (2) get_log_line, or (3)… Alienvault
- CVE-2014-3804 HIGH · 10.0 Met de av-centerd SOAP service in AlienVault OSSIM voor 4.7.0 kunnen externe aanvallers willekeurige opdrachten uitvoeren via een vervaardigd (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup… Alienvault
- CVE-2014-2303 HIGH · 7.5 Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -s1 allow remote attackers to… Webedition
- CVE-2013-5356 HIGH · 7.5 Sharetronix 3.1.1.3, 3.1.1 en eerder beperkt de toegang tot niet-gespecificeerde Ajax-functionaliteit niet correct, waardoor externe aanvallers authenticatie via onbekende vectoren kunnen omzeilen. Sharetronix
- CVE-2013-5353 MEDIUM · 6.8 Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary code by uploading a file with an… Sharetronix
- CVE-2013-5352 MEDIUM · 6.8 Sharetronix 3.1.1.3, 3.1.1 en eerder stelt externe aanvallers in staat om willekeurige PHP-code uit te voeren via de (1) activiteiten_tekstparameter naar services/activiteiten/set of (2) opmerkingen_tekstparameter… Sharetronix
- CVE-2013-4099 HIGH · 10.0 Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attackers to execute arbitrary code via a crafted parameter to the… Jogamp
- CVE-2013-3843 MEDIUM · 6.8 Stack-gebaseerde bufferoverloop in de mk_request_header_process-functie in mk_request.c in Monkey HTTP Daemon (monkeyd) vóór 1.2.1 stelt externe aanvallers in staat om een denial of service (crash)… Monkey-project
- CVE-2013-3663 HIGH · 9.3 Op heap gebaseerde bufferoverloop in paintlib, zoals gebruikt in Trimble SketchUp (voorheen Google SketchUp) vóór 8 Onderhoud 3, stelt externe aanvallers in staat om willekeurige… Google
- CVE-2013-2182 MEDIUM · 5.8 The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by… Monkey-project
- CVE-2013-2163 MEDIUM · 5.0 Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the file size… Monkey-project
- CVE-2013-1841 MEDIUM · 4.3 Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to… Seamons
- CVE-2012-3522 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Qbnz
- CVE-2012-3521 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot)… Qbnz
- CVE-2010-5301 HIGH · 7.5 Op stapels gebaseerde bufferoverloop in Kolibri 2.0 stelt externe aanvallers in staat om willekeurige code uit te voeren via een lange URI in een HEAD-verzoek. Senkas
- CVE-2014-3859 MEDIUM · 5.0 libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion… Isc
- CVE-2014-4037 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before 2.6.11 and earlier allows remote attackers to inject arbitrary web script or HTML via an array… Ckeditor
- CVE-2014-4036 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a… Impresscms
- CVE-2014-4035 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or… Bestsoftinc
- CVE-2014-4034 HIGH · 7.5 SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter. Aas9
- CVE-2014-4033 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to… Efrontlearning
- CVE-2014-4032 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in apps/app_comment/form_comment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field. Fiyo
- CVE-2014-3980 MEDIUM · 4.6 libfep 0.0.5 vóór 0.1.0 maakt niet correct gebruik van UNIX-domeinsockets in de abstracte naamruimte, waardoor lokale gebruikers privileges kunnen krijgen via niet-gespecificeerde vectoren. Daiki Ueno
- CVE-2014-3970 LOW · 2.9 The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure… Pulseaudio
- CVE-2014-3915 HIGH · 10.0 The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) auth,… Rocketsoftware
- CVE-2014-3911 HIGH · 9.3 Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4)… Samsung
- CVE-2014-3850 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that… Member Approval Plugin Project
- CVE-2014-3782 MEDIUM · 6.0 Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code… Dotclear
- CVE-2014-3781 MEDIUM · 5.8 The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an empty password in an XML-RPC request. Dotclear
- CVE-2014-3004 MEDIUM · 4.3 De standaardconfiguratie voor de Xerces SAX Parser in Castor vóór 1.3.3 stelt contextafhankelijke aanvallers in staat om XML External Entity (XXE) -aanvallen uit te voeren… Castor Project Opensuse Opensuse Project
- CVE-2014-2978 HIGH · 10.0 De Dispatch_Write-functie in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken en mogelijk willekeurige code uit… Directfb Opensuse Suse
- CVE-2014-2977 HIGH · 10.0 Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly… Opensuse Suse Directfb
- CVE-2014-0249 LOW · 3.3 The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows… Fedoraproject Redhat
- CVE-2011-3625 HIGH · 9.3 Op stapels gebaseerde bufferoverloop in de functie sub_read_line_sami in subreader.c in MPlayer, zoals gebruikt in SMPlayer 0.6.9, stelt externe aanvallers in staat om een denial… Mplayer2 Ricardo Villalba
- CVE-2010-5300 MEDIUM · 6.8 Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Jzip
- CVE-2014-3157 HIGH · 7.5 Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly… Google
- CVE-2014-3156 HIGH · 7.5 Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other… Google
- CVE-2014-3155 MEDIUM · 5.0 net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging incorrect queue… Google
- CVE-2014-3154 HIGH · 7.5 Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of… Google
- CVE-2014-1545 HIGH · 10.0 Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving… Mozilla
- CVE-2014-1543 HIGH · 7.5 Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by… Mozilla
- CVE-2014-1542 MEDIUM · 6.8 Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors… Opensuse Opensuse Project Mozilla Oracle
- CVE-2014-1541 HIGH · 10.0 Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6… Mozilla
- CVE-2014-1540 HIGH · 9.3 Use-after-free kwetsbaarheid in de nsEventListenerManager:: CompileEventHandlerInternefunctie in de Event Listener Manager in Mozilla Firefox vóór 30.0 stelt externe aanvallers in staat om willekeurige code uit… Mozilla