CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3738 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in Zenoss 4.2.5 stelt externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via de titel van een apparaat. Zenoss
- CVE-2014-3412 HIGH · 10.0 Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. Juniper
- CVE-2014-1855 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Seo Panel vóór 3.5.0 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1)… Seopanel
- CVE-2013-7383 HIGH · 9.0 x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks. X2go
- CVE-2013-4380 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with… Mediafront Drupal
- CVE-2013-4347 MEDIUM · 5.8 The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote… Urbanairship
- CVE-2013-4346 MEDIUM · 4.3 The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. Urbanairship
- CVE-2013-4321 MEDIUM · 6.5 The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified… Typo3
- CVE-2013-4320 MEDIUM · 5.5 The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to… Typo3
- CVE-2013-4250 MEDIUM · 6.5 De (1) bestandsuploadcomponent en (2) File Abstraction Layer (FAL) in TYPO3 6.0.x vóór 6.0.8 en 6.1.x vóór 6.1.3 controleren bestandsextensies niet goed, waardoor externe geverifieerde… Typo3
- CVE-2012-6146 MEDIUM · 4.0 De Backend History Module in TYPO3 4.5.x voor 4.5.21, 4.6.x voor 4.6.14 en 4.7.x voor 4.7.6 beperkt de toegang niet goed, waardoor op afstand geverifieerde… Typo3
- CVE-2014-3460 MEDIUM · 6.8 Directory traversal-kwetsbaarheid in de DumpToFile-methode in het NQMcsVarSet ActiveX-besturingselement in Agent Manager in NetIQ Sentinel stelt externe aanvallers in staat om willekeurige bestanden te maken… Microfocus
- CVE-2014-3444 HIGH · 9.3 The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write… Realnetworks
- CVE-2014-3273 MEDIUM · 6.1 The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282. Cisco
- CVE-2014-3271 MEDIUM · 5.0 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs… Cisco
- CVE-2014-3270 MEDIUM · 5.0 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID… Cisco
- CVE-2014-3269 MEDIUM · 6.8 Met de SNMP-module in Cisco IOS XE 3.5E kunnen op afstand geverifieerde gebruikers een denial of service (herladen van het apparaat) veroorzaken door regelmatig te… Cisco
- CVE-2014-3268 MEDIUM · 5.0 Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via… Cisco
- CVE-2014-3265 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary… Cisco
- CVE-2014-3264 MEDIUM · 6.3 Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in… Cisco
- CVE-2014-2351 HIGH · 7.5 SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained… Controlsystemworks
- CVE-2014-2199 MEDIUM · 5.0 meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite… Cisco
- CVE-2014-2195 MEDIUM · 4.3 Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names,… Cisco
- CVE-2014-2194 MEDIUM · 6.8 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity. Cisco
- CVE-2014-2193 MEDIUM · 4.3 Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid… Cisco
- CVE-2014-2192 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an… Cisco
- CVE-2013-6975 MEDIUM · 4.6 Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug… Cisco
- CVE-2014-3787 MEDIUM · 5.0 SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. Sap
- CVE-2014-3735 MEDIUM · 4.3 ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file. Intel
- CVE-2014-3717 LOW · 3.3 Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a… Xen
- CVE-2014-3716 LOW · 1.9 Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB… Xen
- CVE-2014-3715 LOW · 3.3 Bufferoverloop in Xen 4.4.x stelt lokale gebruikers in staat om systeemgeheugen te lezen of een denial of service (crash) te veroorzaken via een vervaardigde 32-bits… Xen
- CVE-2014-3714 LOW · 3.3 De ARM-IMAGE-LAADFUNCTIONALITEIT in Xen 4.4.x valideert de kernellengte niet goed, waardoor lokale gebruikers het systeemgeheugen kunnen lezen of een denial of service (crash) kunnen veroorzaken… Xen
- CVE-2014-3411 HIGH · 10.0 Een niet nader gespecificeerde kwetsbaarheid in de NSM XDB-service van Juniper NSM vóór versie 2012.2R8 stelt externe aanvallers in staat om willekeurige code uit te… Juniper
- CVE-2014-1402 MEDIUM · 4.4 The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted… Pocoo
- CVE-2014-0012 MEDIUM · 4.4 FileSystemBytecodeCache in Jinja2 2.7.2 maakt geen tijdelijke mappen aan, waardoor lokale gebruikers privileges kunnen krijgen door vooraf een tijdelijke map aan te maken met de… Pocoo
- CVE-2013-7385 MEDIUM · 6.8 LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote… Livezilla
- CVE-2013-7384 MEDIUM · 5.0 UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL. NOTE:… Unrealircd
- CVE-2013-7040 MEDIUM · 4.3 Python 2.7 vóór 3.4 gebruikt alleen de laatste acht bits van het voorvoegsel om hash-waarden te randomiseren, waardoor het hash-waarden berekent zonder de mogelijkheid om… Apple Python
- CVE-2013-7033 MEDIUM · 4.3 LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive… Livezilla
- CVE-2013-6994 MEDIUM · 6.4 OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network. Opentext
- CVE-2013-6807 MEDIUM · 6.8 De client in OpenText Exceed OnDemand (EoD) 8 ondersteunt standaard anonieme versleutelingen, waarmee man-in-the-middle-aanvallers de validatie van servercertificaten kunnen omzeilen, een verbinding kunnen omleiden en… Opentext
- CVE-2013-6806 MEDIUM · 6.8 OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers… Opentext
- CVE-2013-6805 MEDIUM · 5.0 OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network… Opentext
- CVE-2013-6766 HIGH · 7.5 OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted… Openvas
- CVE-2013-6765 HIGH · 7.5 OpenVAS Manager 3.0 vóór 3.0.7 en 4.0 vóór 4.0.4 stelt externe aanvallers in staat om de OMP-authenticatiebeperkingen te omzeilen en OMP-opdrachten uit te voeren via… Openvas
- CVE-2013-6413 MEDIUM · 5.0 Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. NOTE: this identifier was SPLIT… Unrealircd
- CVE-2013-4432 MEDIUM · 4.0 Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary… Mahara
- CVE-2013-4431 MEDIUM · 5.5 Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary… Mahara
- CVE-2013-4430 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML… Mahara