CVE-database
133.585 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-2137 MEDIUM · 4.3 CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and… Cisco
- CVE-2014-2125 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML… Cisco
- CVE-2014-1942 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Pearson
- CVE-2014-0901 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de Social Rendering-implementatie in de IBM Connections-integratie in IBM WebSphere Portal 8.0.0.x vóór 8.0.0.1 cf11 stelt op afstand geverifieerde gebruikers… Ibm
- CVE-2014-0828 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the WCM (Web Content Manager) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through… Ibm
- CVE-2013-3588 HIGH · 7.8 De webbeheerinterface op Zyxel P660-apparaten stelt externe aanvallers in staat om een denial of service (reboot) te veroorzaken via een stroom van TCP SYN-pakketten. Zyxel
- CVE-2014-2212 MEDIUM · 5.0 The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of… Posh Project
- CVE-2014-1691 HIGH · 7.5 The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via… Horde
- CVE-2014-2678 MEDIUM · 4.7 The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system… Linux Fedoraproject Oracle
- CVE-2014-2673 MEDIUM · 4.7 The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact… Linux
- CVE-2014-2672 HIGH · 7.1 Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash)… Linux
- CVE-2014-2237 MEDIUM · 5.0 De memcache-token-backend in OpenStack Identity (Keystone) 2013.1 tot en met 2.013.1.4, 2013.2 tot en met 2013.2.2, en Icehouse before Icehouse-3, bij het uitgeven van een… Openstack
- CVE-2014-1896 MEDIUM · 4.9 De (1) do_send- en (2) do_recv-functies in io.c in libvchan in Xen 4.2.x-, 4.3.x- en 4.4-RC-serie stellen lokale gasten in staat om een weigering van… Xen
- CVE-2014-1895 MEDIUM · 5.8 Off-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2.x and 4.3.x, when the maximum number of physical CPUs are in use, allows local… Xen
- CVE-2014-1894 MEDIUM · 5.2 Meerdere integer overflows in niet-gespecificeerde suboperaties in de kolfhypercall in Xen 3.2.x en eerder, wanneer XSM is ingeschakeld, stellen lokale gebruikers in staat om een… Xen
- CVE-2014-1893 MEDIUM · 5.2 Multiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the flask hypercall in Xen 4.1.x, 3.3.x, 3.2.x, and earlier, when XSM is… Xen
- CVE-2014-1892 MEDIUM · 5.2 Xen 3.3 through 4.1, when XSM is enabled, allows local users to cause a denial of service via vectors related to a "large memory allocation,"… Xen
- CVE-2014-1891 MEDIUM · 5.2 Multiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4) FLASK_CONTEXT_TO_SID suboperations in the flask hypercall in Xen 4.3.x, 4.2.x, 4.1.x, 3.2.x,… Xen
- CVE-2013-7350 HIGH · 10.0 Meerdere niet-gespecificeerde kwetsbaarheden in Check Point Security Gateway 80 R71.x vóór R71.45 (730159141) en R75.20.x vóór R75.20.4 en 600 en 1100 apparaten R75.20.x vóór R… Checkpoint
- CVE-2013-7348 MEDIUM · 4.6 Dubbele gratis kwetsbaarheid in de ioctx_alloc-functie in fs/aio.c in de Linux-kernel vóór 3.12.4 stelt lokale gebruikers in staat om een denial of service (systeemcrash) te… Linux
- CVE-2013-1869 MEDIUM · 4.3 CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP… Redhat
- CVE-2012-0032 LOW · 3.7 Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to… Redhat
- CVE-2011-4573 LOW · 3.5 Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update… Redhat
- CVE-2011-3346 MEDIUM · 4.0 Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access… Qemu Redhat Xen
- CVE-2014-2590 MEDIUM · 5.0 The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote… Siemens
- CVE-2014-0635 HIGH · 7.5 Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors. Emc
- CVE-2014-0634 MEDIUM · 6.0 EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it… Emc
- CVE-2014-0633 HIGH · 7.7 De GUI in EMC VPLEX GeoSynchrony 4.x en 5.x voor 5.3 valideert de sessietime-outwaarden niet goed, wat het voor externe aanvallers gemakkelijker zou kunnen maken… Emc
- CVE-2014-0632 HIGH · 9.0 Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors. Emc
- CVE-2014-0050 HIGH · 7.5 MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of… Oracle Apache
- CVE-2013-0662 HIGH · 9.3 Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large… Schneider-electric Schneider Electric
- CVE-2014-2034 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Sonatype Nexus Oss en Pro 2.4.0 tot 2.7.1 stelt aanvallers in staat om willekeurige gebruikersaccounts aan te maken via onbekende vectoren met… Sonatype
- CVE-2013-7349 HIGH · 7.5 Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter to news/send.php, (2) thread_id parameter… Raoul Proenca
- CVE-2013-5640 HIGH · 7.5 Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) answer_id or (2) question_id parameter to polls/vote.php,… Raoul Proenca
- CVE-2013-2278 HIGH · 10.0 Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and… Jgaa
- CVE-2009-5141 MEDIUM · 4.0 Format string kwetsbaarheid in War FTP Daemon (warftpd) 1.82 RC 12 stelt op afstand geverifieerde gebruikers in staat om een denial of service (crash) te… Jgaa
- CVE-2014-2671 MEDIUM · 6.8 Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a… Microsoft
- CVE-2013-6775 HIGH · 10.0 Het Chainfire SuperSU-pakket voor Android vóór versie 1.69 stelt aanvallers in staat om privileges te verkrijgen via de (1) backtick of (2) $() type shell-metatekens… Chainfire Google
- CVE-2013-6774 HIGH · 10.0 Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and… Chainfire Google Androidsu Koushik Dutta
- CVE-2013-6770 HIGH · 7.6 The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon… Koushik Dutta Google
- CVE-2013-6769 HIGH · 10.0 The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su. Koushik Dutta Google
- CVE-2013-6768 MEDIUM · 5.0 Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse… Koushik Dutta Google
- CVE-2013-7347 LOW · 3.7 Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading… Redhat
- CVE-2012-3359 LOW · 3.7 Luci in Red Hat Conga slaat de gebruikersnaam en het wachtwoord van de gebruiker op in een Base64-gecodeerde tekenreeks in de __ac sessiecookie, waarmee aanvallers… Redhat
- CVE-2014-1982 HIGH · 10.0 De administratieve interface in Allied Telesis AT-RG634A ADSL Breedbandrouter 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4 en iMG646BD firmware 3.5 stelt externe aanvallers in staat… Alliedtelesis
- CVE-2014-0983 MEDIUM · 6.9 Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D… Oracle
- CVE-2014-0981 MEDIUM · 4.4 VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local… Oracle
- CVE-2014-2669 MEDIUM · 6.5 Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to… Postgresql
- CVE-2014-0086 MEDIUM · 4.3 De doFilter-functie in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5 en 5.x stelt externe aanvallers in staat om een denial of service (geheugenverbruik en out-of-memory fout)… Redhat
- CVE-2014-0067 MEDIUM · 4.6 The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a… Apple Postgresql