CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-4468 MEDIUM · 6.5 VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension… Vicidial
- CVE-2013-4455 LOW · 2.1 Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by… Katello
- CVE-2013-3514 MEDIUM · 4.3 Meerdere kwetsbaarheden voor directorytraversal in OpenX vóór 2.8.10 revisie 82710 stellen externe beheerders in staat om willekeurige bestanden te lezen via een .. (puntpunt) in… Openx
- CVE-2013-2700 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication… Webmaster-source
- CVE-2013-2226 HIGH · 7.5 Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename… Glpi-project
- CVE-2013-2087 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Galerij 3 vóór 3.0.7 stellen aanvallers op afstand in staat om willekeurig webscript of HTML te injecteren via de… Galleryproject
- CVE-2013-2034 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers… Cloudbees
- CVE-2013-1765 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the… Smart-flv Plugin Project
- CVE-2011-5249 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in de gebeurtenispagina van de System iNtrusion Analysis and Reporting Environment (SNARE) voor Linux-agent vóór versie 1.7.0 stelt externe aanvallers in… Intersectalliance
- CVE-2014-1815 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-1813 HIGH · 8.5 Met Microsoft Web Applications 2010 SP1 en SP2 kunnen op afstand geverifieerde gebruikers willekeurige code uitvoeren via vervaardigde pagina-inhoud, ook bekend als "Web Applications Page… Microsoft
- CVE-2014-1809 MEDIUM · 6.8 De MSCOMCTL-bibliotheek in Microsoft Office 2007 SP3, 2010 SP1 en SP2 en 2013 Gold, SP1, RT en RT SP1 maakt het voor externe aanvallers gemakkelijker… Microsoft
- CVE-2014-1808 MEDIUM · 4.3 Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted… Microsoft
- CVE-2014-1807 HIGH · 7.2 The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,… Microsoft
- CVE-2014-1806 HIGH · 10.0 The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which… Microsoft
- CVE-2014-1756 HIGH · 9.3 Onvertrouwde zoekpadkwetsbaarheid in Microsoft Office 2007 SP3, 2010 SP1 en SP2, en 2013 Gold, SP1, RT en RT SP1, wanneer de Vereenvoudigde Chinese Proofing Tool… Microsoft
- CVE-2014-1754 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and… Microsoft
- CVE-2014-1742 HIGH · 7.5 Use-after-free kwetsbaarheid in de FrameSelection:: updateAppearance-functie in core/editing/FrameSelection.cpp in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.137, stelt externe aanvallers in staat om een denial… Google
- CVE-2014-1741 HIGH · 7.5 Meerdere integer overflows in de vervanggegevensfunctionaliteit in de CharacterData-interface-implementatie in core/dom/CharacterData.cpp in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.137, stellen externe aanvallers in staat… Google
- CVE-2014-1740 HIGH · 7.5 Meerdere use-after-free kwetsbaarheden in net/websockets/websocket_job.cc in de WebSockets-implementatie in Google Chrome vóór 34.0.1847.137 stellen externe aanvallers in staat om een denial of service te veroorzaken… Google
- CVE-2014-0529 HIGH · 10.0 Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code… Adobe Apple Microsoft
- CVE-2014-0528 HIGH · 10.0 Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary… Adobe Apple Microsoft
- CVE-2014-0527 HIGH · 10.0 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code… Adobe Apple Microsoft
- CVE-2014-0526 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0525 HIGH · 10.0 The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped… Adobe Apple Microsoft
- CVE-2014-0524 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0523 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0522 HIGH · 10.0 Adobe Reader en Acrobat 10.x vóór 10.1.10 en 11.x vóór 11.0.07 op Windows en OS X stellen aanvallers in staat om willekeurige code uit te… Adobe Apple Microsoft
- CVE-2014-0521 MEDIUM · 4.3 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not properly implement JavaScript APIs, which allows remote… Adobe Apple Microsoft
- CVE-2014-0520 HIGH · 7.5 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK &… Adobe Apple Microsoft Linux
- CVE-2014-0519 HIGH · 7.5 Adobe Flash Player vóór 13.0.0.214 op Windows en OS X en vóór 11.2.202.359 op Linux, Adobe AIR SDK vóór 13.0.0.111 en Adobe AIR SDK &… Adobe Apple Microsoft Linux
- CVE-2014-0518 HIGH · 7.5 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK &… Adobe Apple Microsoft Linux
- CVE-2014-0517 HIGH · 7.5 Adobe Flash Player vóór 13.0.0.214 op Windows en OS X en vóór 11.2.202.359 op Linux, Adobe AIR SDK vóór 13.0.0.111 en Adobe AIR SDK &… Adobe Apple Microsoft Linux
- CVE-2014-0516 HIGH · 7.5 Adobe Flash Player vóór 13.0.0.214 op Windows en OS X en vóór 11.2.202.359 op Linux, Adobe AIR SDK vóór 13.0.0.111 en Adobe AIR SDK &… Adobe Apple Microsoft Linux
- CVE-2014-0513 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in Adobe Illustrator CS6 vóór 16.0.5 en 16.2.x vóór 16.2.2 stelt externe aanvallers in staat om willekeurige code uit te voeren… Adobe
- CVE-2014-0310 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-0256 MEDIUM · 5.0 Met Microsoft Windows Server 2008 SP2 en R2 SP1 en Server 2012 Gold kunnen externe aanvallers een denial of service (iSCSI-serviceonderbreking) veroorzaken door veel vervaardigde… Microsoft
- CVE-2014-0255 MEDIUM · 5.0 Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (iSCSI service… Microsoft
- CVE-2014-0251 HIGH · 9.0 Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2… Microsoft
- CVE-2014-3225 MEDIUM · 4.0 Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field… Cobblerd
- CVE-2014-3127 HIGH · 7.1 dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers… Debian
- CVE-2014-3121 HIGH · 7.6 rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands. Marc Lehmann
- CVE-2014-2591 MEDIUM · 6.9 Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH… Bmc
- CVE-2014-2405 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in OpenJDK 6 vóór 6b31 op Debian GNU/Linux en Ubuntu 12.04 LTS en 10.04 LTS heeft onbekende impact- en aanvalsvectoren, een andere kwetsbaarheid… Oracle Canonical Debian
- CVE-2014-2046 HIGH · 9.7 cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to (1) obtain credentials… Broadcom
- CVE-2014-1909 HIGH · 7.5 Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute… Google Opensuse
- CVE-2014-1849 HIGH · 10.0 Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers… Foscam
- CVE-2014-0462 HIGH · 10.0 Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different… Oracle Canonical Debian
- CVE-2012-1600 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name… Phppgadmin Project Opensuse
- CVE-2011-4407 MEDIUM · 4.3 ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof… Canonical