CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-4429 MEDIUM · 4.0 Mahara vóór 1.5.12, 1.6.x vóór 1.6.7 en 1.7.x vóór 1.7.3 beperkt de toegang tot artefacten niet goed, waardoor op afstand geverifieerde gebruikers willekeurige artefacten kunnen… Mahara
- CVE-2013-4427 LOW · 2.1 pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers… Leon Weber
- CVE-2013-4426 LOW · 3.6 pyxtrlock before 0.1 gebruikt een onjuiste variabelenaam, waardoor fysiek nabije aanvallers het vergrendelingsscherm kunnen omzeilen via meerdere mislukte authenticatiepogingen, die een crash veroorzaken. Leon Weber
- CVE-2013-4406 MEDIUM · 5.0 The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote… Quick Tabs Module Project
- CVE-2014-1347 MEDIUM · 4.4 Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently… Apple
- CVE-2013-4498 LOW · 2.1 The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the… Florian Weber Drupal
- CVE-2013-4489 MEDIUM · 6.5 Met de Grit gem voor Ruby, zoals gebruikt in GitLab 5.2 vóór 5.4.1 en 6.x vóór 6.2.3, kunnen op afstand geverifieerde gebruikers willekeurige opdrachten uitvoeren,… Gitlab
- CVE-2014-3453 MEDIUM · 6.5 Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrators to execute… Flag Module Project
- CVE-2014-2084 HIGH · 8.5 Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to… Skyboxsecurity
- CVE-2013-7382 MEDIUM · 5.0 VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users,… Vicidial
- CVE-2014-3742 MEDIUM · 5.0 The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process… Spumko Project
- CVE-2014-3730 MEDIUM · 4.3 The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows… Canonical Djangoproject Opensuse Debian
- CVE-2014-3452 MEDIUM · 4.3 FiltersLAVavfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file. Codecguide
- CVE-2014-1613 HIGH · 7.5 Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is… Dotclear
- CVE-2014-1418 MEDIUM · 6.4 Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control… Djangoproject Canonical
- CVE-2013-7379 MEDIUM · 6.8 The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string,… Ucdok
- CVE-2014-3761 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in D-Link DAP 1150 met firmware 1.2.94 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Dlink
- CVE-2014-3760 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in D-Link DAP 1150 met firmware 1.2.94 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen… Dlink
- CVE-2014-3759 HIGH · 7.5 Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to… Karlen Walter
- CVE-2014-3758 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via vectors… Karlen Walter
- CVE-2014-0749 HIGH · 10.0 Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x through 2.5.13 allows remote attackers to execute arbitrary… Adaptivecomputing
- CVE-2014-3750 MEDIUM · 5.8 The Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Bilyoner
- CVE-2014-3263 MEDIUM · 5.4 Met de ScanSafe-module in Cisco IOS 15.3(3)M kunnen externe aanvallers een denial of service (herladen van het apparaat) veroorzaken via HTTPS-pakketten die torenverwerking vereisen, ook… Cisco
- CVE-2014-3262 MEDIUM · 4.3 The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which… Cisco
- CVE-2014-1649 HIGH · 7.9 The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS. Symantec
- CVE-2014-0964 HIGH · 7.1 IBM WebSphere Application Server (WAS) 6.1.0.0 tot en met 6.1.0.47 en 6.0.2.0 tot en met 6.0.2.43 stelt externe aanvallers in staat om een denial of… Ibm
- CVE-2014-0933 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users. Ibm
- CVE-2014-0918 HIGH · 7.1 Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27,… Ibm
- CVE-2014-0917 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2… Ibm
- CVE-2014-0782 HIGH · 8.3 Stack-based buffer overflow in BKESimmgr.exe in het Expanded Test Functions pakket in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R 3.09.50 en eerder,… Yokogawa
- CVE-2014-0643 HIGH · 7.6 EMC RSA NetWitness before 9.8.5.19 and RSA Security Analytics before 10.2.4 and 10.3.x before 10.3.2, when Kerberos PAM is enabled, do not require a password,… Emc
- CVE-2014-3757 HIGH · 7.5 SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL… Phpmanufaktur
- CVE-2014-3247 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add… O-dyn
- CVE-2014-0211 HIGH · 7.5 Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font… Canonical X
- CVE-2014-0210 HIGH · 7.5 Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol… X Canonical
- CVE-2014-0209 MEDIUM · 4.6 Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to… X Canonical
- CVE-2013-4730 HIGH · 10.0 Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command. Pcman
- CVE-2013-1810 LOW · 2.1 Multiple cross-site scripting (XSS) vulnerabilities in core/summary_api.php in MantisBT 1.2.12 allow remote authenticated users with manager or administrator permissions to inject arbitrary web script or… Mantisbt
- CVE-2013-0197 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML… Mantisbt
- CVE-2014-3443 MEDIUM · 4.3 JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. Jetaudio
- CVE-2014-3441 MEDIUM · 4.3 codeclibpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by… Videolan
- CVE-2014-3430 MEDIUM · 5.0 Dovecot 1.1 vóór 2.2.13 en duiventil-ee vóór 2.1.7.7 en 2.2.x vóór 2.2.12.12 sluit oude verbindingen niet goed af, waardoor externe aanvallers een denial of service… Dovecot
- CVE-2014-3146 MEDIUM · 6.1 Onvolledige blacklist-kwetsbaarheid in de lxml.html.clean-module in lxml vóór 3.3.5 stelt externe aanvallers in staat om cross-site scripting (XSS) -aanvallen uit te voeren via controletekens in… Lxml
- CVE-2014-1603 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to… Get-simple
- CVE-2014-0137 MEDIUM · 6.5 SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute… Redhat
- CVE-2014-0078 MEDIUM · 4.0 The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog… Redhat
- CVE-2013-7376 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in OpenX 2.8.10, mogelijk vóór revisie 82710, stellen externe aanvallers in staat om de authenticatie van beheerders te kapen,… Openx
- CVE-2013-5939 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the (1) list… Phpcms
- CVE-2013-5655 MEDIUM · 6.4 Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files… Xiaowen Huang
- CVE-2013-4471 MEDIUM · 5.5 De Identity v3 API in OpenStack Dashboard (Horizon) vóór versie 2013.2 vereist niet het huidige wachtwoord bij het wijzigen van wachtwoorden voor gebruikersaccounts. Dit maakt… Openstack