CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0095 MEDIUM · 5.0 java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request… Apache
- CVE-2014-0075 MEDIUM · 5.0 Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause… Apache
- CVE-2014-2354 MEDIUM · 6.0 Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a… Cogentdatahub
- CVE-2014-2353 HIGH · 7.1 Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Cogentdatahub
- CVE-2014-2352 HIGH · 7.8 The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a… Cogentdatahub
- CVE-2014-2343 LOW · 1.2 Triangle MicroWorks SCADA Data Gateway before 3.00.0635 stelt fysiek nabije aanvallers in staat om een denial of service (overmatige gegevensverwerking) te veroorzaken via een vervaardigd… Trianglemicroworks
- CVE-2014-2342 MEDIUM · 4.3 Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet. Trianglemicroworks
- CVE-2014-0907 HIGH · 7.2 Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and… Ibm
- CVE-2013-6744 HIGH · 8.5 The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to… Ibm Microsoft
- CVE-2014-0925 LOW · 3.5 Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect… Ibm
- CVE-2014-3865 MEDIUM · 6.4 Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with… Debian
- CVE-2014-3864 MEDIUM · 6.4 Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that… Debian
- CVE-2014-3227 MEDIUM · 6.4 dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature,… Debian
- CVE-2014-3010 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before… Ibm
- CVE-2014-3924 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in Webmin vóór 1.690 en Usermin vóór 1.600 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Webmin
- CVE-2014-3923 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or… Digitalzoomstudio
- CVE-2014-3922 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via… Trendmicro
- CVE-2014-3921 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via… Simple Popup Project
- CVE-2014-3780 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Citrix VDI-In-A-Box 5.3.x vóór 5.3.8 en 5.4.x vóór 5.4.4 stelt externe aanvallers in staat om authenticatie te omzeilen via niet-gespecificeerde vectoren, gerelateerd… Citrix
- CVE-2014-0202 LOW · 2.1 The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dwh) package before 3.3.3, stores the history database password… Redhat
- CVE-2013-6788 HIGH · 7.5 The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to… Bitrix
- CVE-2013-5919 MEDIUM · 5.0 Suricata vóór 1.4.6 stelt aanvallers op afstand in staat om een denial of service (crash) te veroorzaken via een misvormd SSL-record. Oisf Openinfosecfoundation
- CVE-2013-4143 LOW · 2.1 The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by… David Bagley
- CVE-2012-5877 MEDIUM · 5.0 Met Nero MediaHome 4.5.8.0 en eerder kunnen externe aanvallers een denial of service (NULL pointer dereference en crash) veroorzaken via een HTTP-header zonder naam. Nero
- CVE-2012-5876 MEDIUM · 5.0 Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string… Nero
- CVE-2012-5572 MEDIUM · 5.0 CRLF-injectiekwetsbaarheid in de cookiemethode (lib/Dancer/Cookie.pm) in Dancer vóór 1.3114 stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren en HTTP-antwoordsplitsingsaanvallen uit te voeren via… Dancer
- CVE-2012-5560 LOW · 2.1 The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call. Mate-desktop
- CVE-2014-3285 MEDIUM · 5.0 Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to… Cisco
- CVE-2014-3283 MEDIUM · 5.8 Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows… Cisco
- CVE-2014-3282 MEDIUM · 4.0 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control,… Cisco
- CVE-2014-3279 MEDIUM · 5.0 De beheer-GUI in het webframework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) en eerder implementeert toegangscontrole niet correct, waardoor externe aanvallers accountnamen… Cisco
- CVE-2014-3277 MEDIUM · 4.0 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control,… Cisco
- CVE-2014-3417 MEDIUM · 6.5 uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a… Jasig
- CVE-2014-3416 MEDIUM · 6.5 uPortal vóór versie 4.0.13.1 controleert de MANAGE-rechten niet correct, waardoor externe geauthenticeerde gebruikers willekeurige portlets kunnen beheren door gebruik te maken van de SUBSCRIBE-rechten voor… Jasig
- CVE-2014-3415 MEDIUM · 6.5 SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the invite_users[] parameter to the /invite page for… Sharetronix
- CVE-2014-3414 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authentication of administrators for requests that add administrative privileges to… Sharetronix
- CVE-2014-0246 MEDIUM · 4.3 SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive. Sosreport Project
- CVE-2014-0201 LOW · 2.1 ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to… Redhat
- CVE-2014-0200 LOW · 2.1 The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to… Redhat
- CVE-2014-0199 LOW · 2.1 Het setup-script in ovirt-engine-reports, zoals gebruikt in het Red Hat Enterprise Virtualization-rapporten (rhevm-reports) -pakket vóór 3.3.3, slaat het databasewachtwoord van de rapporten op in leesbare… Redhat
- CVE-2013-4178 MEDIUM · 5.0 The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to obtain access by replaying the username, password,… Google Authenticator Login Project Drupal
- CVE-2013-4177 MEDIUM · 5.0 The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote… Google Authenticator Login Project Drupal
- CVE-2013-2193 MEDIUM · 4.3 Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive… Apache
- CVE-2013-0199 MEDIUM · 5.0 The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers… Redhat
- CVE-2012-4915 MEDIUM · 5.0 Directory traversal-kwetsbaarheid in de Google Doc Embedder-plug-in vóór 2.5.4 voor WordPress stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot… Davistribe Wordpress
- CVE-2014-0239 MEDIUM · 5.0 De interne DNS-server in Samba 4.x vóór 4.0.18 controleert het QR-veld in de koptekstsectie van een inkomend DNS-bericht niet voordat een antwoord wordt verzonden, waardoor… Samba
- CVE-2014-0178 LOW · 3.5 Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the… Samba
- CVE-2014-0240 MEDIUM · 6.2 The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain… Modwsgi
- CVE-2014-0177 LOW · 3.6 The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file. Github
- CVE-2013-5036 HIGH · 7.5 The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2)… Squash