CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-3739 MEDIUM · 5.0 Directory traversal kwetsbaarheid in editor.php in Network Weathermap 0.97c en eerder stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot… Network-weathermap
- CVE-2013-2618 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in editor.php in Network Weathermap vóór 0.97b stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Network-weathermap
- CVE-2013-2130 MEDIUM · 4.0 ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork,… Znc
- CVE-2013-0733 HIGH · 9.3 Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL… Corel
- CVE-2012-4728 MEDIUM · 4.3 The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote attackers to cause a… Corel
- CVE-2014-3976 MEDIUM · 5.0 Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service… A10networks
- CVE-2014-3975 MEDIUM · 5.0 Absolute padtraversale kwetsbaarheid in filemanager.php in AuraCMS 3.0 stelt externe aanvallers in staat om een map te vermelden via een volledige padnaam in de viewdir-parameter. Auracms
- CVE-2014-3974 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter. Auracms
- CVE-2014-3973 HIGH · 7.5 Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Frontaccounting
- CVE-2014-3940 MEDIUM · 4.0 The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory… Redhat Linux
- CVE-2014-3917 LOW · 3.3 kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from… Suse Redhat Linux
- CVE-2014-3912 HIGH · 9.3 Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary… Samsung
- CVE-2014-3878 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de webclient-interface in Ipswitch IMail Server 12.3 en 12.4, mogelijk vóór 12.4.1.15, stellen externe aanvallers in staat om willekeurig… Ipswitch
- CVE-2014-2577 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server before 4.3.1 Patch 8 and 5.x before 5.2 Patch… Bottomline
- CVE-2014-2346 MEDIUM · 4.0 COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build… Copadata
- CVE-2014-2345 HIGH · 7.1 COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build… Copadata
- CVE-2014-1998 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via… N-i-agroinformatics
- CVE-2014-1997 HIGH · 7.8 The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors. Aten
- CVE-2014-2051 HIGH · 7.5 ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login… Owncloud
- CVE-2013-0304 MEDIUM · 4.0 ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to… Owncloud
- CVE-2013-0302 MEDIUM · 5.0 Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain sensitive information via unspecified vectors related to "inclusion of the Amazon SDK testing… Owncloud Amazon
- CVE-2012-6143 HIGH · 7.5 Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a… Ingy
- CVE-2012-6142 HIGH · 7.5 Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a… Jochen Wiedmann
- CVE-2012-6141 HIGH · 7.5 The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a… Stephen Adkins
- CVE-2014-3963 MEDIUM · 4.0 ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors. Owncloud
- CVE-2014-3962 HIGH · 7.5 Meerdere kwetsbaarheden voor SQL-injectie in Videos Tube 1.0 stellen externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de URL-parameter naar (1) videocat.php… Videos Tube Project
- CVE-2014-3961 HIGH · 7.5 SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands… Xnau
- CVE-2014-3960 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Opennms
- CVE-2014-3949 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de lay-outwizard in de Grid Elements (gridelements) -extensie vóór 1.5.1 en 2.0.x vóór 2.0.3 voor TYPO3 stelt externe geverifieerde backend-gebruikers… Jo Hasenau Typo3
- CVE-2014-3948 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to… Alex Kellner Typo3
- CVE-2014-3913 HIGH · 10.0 Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file. Ericom
- CVE-2014-3838 MEDIUM · 4.0 ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of… Owncloud
- CVE-2014-3837 MEDIUM · 4.0 De documenttoepassing in ownCloud Server vóór 6.0.3 gebruikt sequentiële waarden voor de file_id, waarmee op afstand geverifieerde gebruikers gedeelde bestanden kunnen opsommen via niet-gespecificeerde vectoren. Owncloud
- CVE-2014-3836 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in ownCloud Server vóór 6.0.3 stellen externe aanvallers in staat om de authenticatie van gebruikers te kapen voor verzoeken… Owncloud
- CVE-2014-3835 MEDIUM · 5.5 ownCloud Server vóór 5.0.16 en 6.0.x vóór 6.0.3 controleert de machtigingen voor de files_external applicatie niet, waardoor op afstand geverifieerde gebruikers externe opslag kunnen toevoegen… Owncloud
- CVE-2014-3834 HIGH · 7.5 ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address… Owncloud
- CVE-2014-3833 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers… Owncloud
- CVE-2014-3832 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via… Owncloud
- CVE-2014-3786 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via… Lucidcrew
- CVE-2014-2056 HIGH · 7.5 PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or… Owncloud Phpdocx
- CVE-2014-2055 HIGH · 7.5 SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of… Fruux Owncloud
- CVE-2014-2054 HIGH · 7.5 PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote… Owncloud Phpexcel Project
- CVE-2014-2053 HIGH · 7.5 getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of… Getid3 Owncloud
- CVE-2013-1941 MEDIUM · 5.0 The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the… Owncloud
- CVE-2013-0204 MEDIUM · 4.6 settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings. Owncloud
- CVE-2012-5336 MEDIUM · 4.0 lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related… Owncloud
- CVE-2012-5057 MEDIUM · 4.3 CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the url… Owncloud
- CVE-2012-5056 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) readyCallback parameter… Owncloud
- CVE-2014-3956 LOW · 1.9 The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local… Freebsd Hp Fedoraproject Sendmail
- CVE-2014-0935 MEDIUM · 4.6 Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related… Ibm