CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-1794 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1792 HIGH · 9.3 Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-1791 HIGH · 9.3 Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1790 HIGH · 9.3 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-1789 HIGH · 9.3 Met Microsoft Internet Explorer 10 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-1788 HIGH · 9.3 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-1786 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1785 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-1784 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1783 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1782 HIGH · 9.3 Met Microsoft Internet Explorer 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-1781 HIGH · 9.3 Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-1780 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1779 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1778 MEDIUM · 6.8 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka "Internet Explorer Elevation of… Microsoft
- CVE-2014-1777 MEDIUM · 4.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka "Internet Explorer Information… Microsoft
- CVE-2014-1775 HIGH · 9.3 Microsoft Internet Explorer 6 tot en met 11 stelt externe aanvallers in staat om willekeurige code uit te voeren of een denial-of-service-aanval (geheugenbeschadiging) te veroorzaken… Microsoft
- CVE-2014-1774 HIGH · 9.3 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-1773 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1772 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-1771 MEDIUM · 6.8 SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before… Microsoft
- CVE-2014-1769 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-0296 MEDIUM · 5.1 The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly… Microsoft
- CVE-2014-0282 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4017 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter… Conversionninja
- CVE-2014-3880 MEDIUM · 4.9 Het (1) execve en (2) fexecve systeem roept de FreeBSD kernel 8.4 aan voor p11, 9.1 voor p14, 9.2 voor p7, en 10.0 voor p4… Freebsd
- CVE-2014-3873 LOW · 2.1 The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault… Freebsd
- CVE-2014-3465 MEDIUM · 5.0 Met de functie gnutls_x509_dn_oid_name in lib/x509/common.c in GnuTLS 3.0 vóór 3.1.20 en 3.2.x vóór 3.2.10 kunnen externe aanvallers een denial of service (NULL pointer dereference)… Gnu
- CVE-2014-3216 MEDIUM · 4.3 GOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. Gomlab
- CVE-2014-0220 MEDIUM · 4.0 Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API. Cloudera
- CVE-2013-6825 HIGH · 7.2 (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmqrscp.cc in DCMTK… Offis
- CVE-2009-5023 MEDIUM · 4.7 De (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf en (4) mynetwatchman.conf acties in action.d/ in Fail2ban voor 0.8.5 staan lokale gebruikers toe om naar willekeurige bestanden… Fail2ban
- CVE-2014-3294 MEDIUM · 4.0 Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server… Cisco
- CVE-2014-3292 MEDIUM · 5.5 The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary… Cisco
- CVE-2014-3289 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5… Cisco
- CVE-2014-3287 MEDIUM · 4.0 SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands… Cisco
- CVE-2014-3042 MEDIUM · 4.0 IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause… Ibm
- CVE-2014-4012 MEDIUM · 5.0 SAP Open Hub Service heeft hardgecodeerde referenties, waardoor externe aanvallers gemakkelijker toegang kunnen krijgen via niet-gespecificeerde vectoren. Sap
- CVE-2014-4011 MEDIUM · 5.0 SAP Capacity Leveling heeft hardgecodeerde referenties, waardoor het voor externe aanvallers gemakkelijker wordt om toegang te krijgen via niet-gespecificeerde vectoren. Sap
- CVE-2014-4010 MEDIUM · 5.0 SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4009 MEDIUM · 5.0 SAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4008 MEDIUM · 5.0 SAP Web Services Tool (CA-WUI-WST) has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4007 MEDIUM · 5.0 The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4006 MEDIUM · 5.0 The SAP Trader's and Scheduler's Workbench (TSW) for SAP Oil & Gas has hardcoded credentials, which makes it easier for remote attackers to obtain access… Sap
- CVE-2014-4005 MEDIUM · 5.0 SAP Brazil add-on has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. Sap
- CVE-2014-4004 MEDIUM · 5.0 De (1) Structuren en (2) Projectgeoriënteerde inkoopcomponenten in het SAP-projectsysteem hebben hardgecodeerde referenties, waardoor het voor externe aanvallers gemakkelijker wordt om toegang te krijgen via… Sap
- CVE-2014-4003 HIGH · 7.5 Met de System Landscape Directory (SLD) in SAP NetWeaver kunnen aanvallers op afstand informatie wijzigen via vectoren die verband houden met het toevoegen van een… Sap
- CVE-2013-7323 HIGH · 7.5 python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Vinay Sajip
- CVE-2013-6223 LOW · 2.1 LiveZilla vóór 5.1.1.0 slaat de admin Base64 gecodeerde gebruikersnaam en wachtwoord op in een 1click-bestand, waarmee lokale gebruikers toegang kunnen krijgen door het bestand te… Livezilla
- CVE-2013-5760 MEDIUM · 5.0 QNAP Photo Station vóór firmware 4.0.3 build0912 stelt externe aanvallers in staat om gebruikersaccounts van het besturingssysteem te vermelden via een verzoek aan photo/p/api/list.php. Qnap