CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9920 MEDIUM · 5.9 Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix… Mcafee
- CVE-2013-7462 HIGH · 7.5 A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before… Mcafee
- CVE-2013-7461 MEDIUM · 5.5 A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change… Mcafee
- CVE-2013-7460 MEDIUM · 5.5 A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change… Mcafee
- CVE-2017-6896 HIGH · 8.8 Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the… Digisol
- CVE-2017-6516 MEDIUM · 6.7 A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts… Magnicomp
- CVE-2017-5985 LOW · 3.3 lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those… Linuxcontainers
- CVE-2017-3003 HIGH · 8.8 Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the… Adobe Apple Google Linux
- CVE-2017-3002 HIGH · 8.8 Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful… Adobe Apple Google Linux
- CVE-2017-3001 HIGH · 8.8 Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation… Adobe Apple Google Linux
- CVE-2017-3000 MEDIUM · 6.5 Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information… Adobe Apple Google Linux
- CVE-2017-2999 HIGH · 8.8 Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation… Adobe Apple Google Linux
- CVE-2017-2998 HIGH · 8.8 Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation… Adobe Apple Google Linux
- CVE-2017-2997 HIGH · 8.8 Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful… Adobe Apple Google Linux
- CVE-2017-2983 HIGH · 7.8 Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege. Adobe
- CVE-2017-6335 MEDIUM · 5.5 The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via… Graphicsmagick
- CVE-2017-5957 MEDIUM · 5.5 Een stack-gebaseerde bufferoverloop in de functie vrend_decode_set_framebuffer_state in vrend_decode.c in virglrenderer vóór versie 926b9b3460a48f6454d8bbe9e44313d86a65447f, zoals gebruikt in Quick Emulator (QEMU), stelt lokale gastgebruikers in staat… Virglrenderer Project Qemu
- CVE-2017-5668 CRITICAL · 9.8 bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file… Bitlbee
- CVE-2016-10189 HIGH · 7.5 BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file… Bitlbee
- CVE-2016-10188 CRITICAL · 9.8 Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file… Bitlbee
- CVE-2016-10172 MEDIUM · 5.5 The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Wavpack Project
- CVE-2016-10171 MEDIUM · 5.5 The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Wavpack Project
- CVE-2016-10170 MEDIUM · 5.5 The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Wavpack Project
- CVE-2016-10169 MEDIUM · 5.5 The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file. Wavpack Project
- CVE-2017-6883 MEDIUM · 4.7 The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause… Foxitsoftware Microsoft
- CVE-2017-6877 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web script. Lutim Project
- CVE-2017-6874 HIGH · 7.0 Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possibly… Linux
- CVE-2017-6398 HIGH · 8.8 An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal command in the context of… Trendmicro
- CVE-2017-6367 HIGH · 7.5 In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an… Cerberusftp
- CVE-2016-9368 HIGH · 7.5 An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the… Eaton
- CVE-2014-8688 HIGH · 7.5 An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and… Telegram
- CVE-2013-4659 CRITICAL · 9.8 Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on… Asus Trendnet
- CVE-2014-3926 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter. Lg Project
- CVE-2017-6807 MEDIUM · 6.1 mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can… Uninett
- CVE-2015-6671 MEDIUM · 5.9 Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain… Edx
- CVE-2017-6180 HIGH · 8.8 Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and the entire set of other pages). Keekoonvision
- CVE-2017-6081 HIGH · 8.8 A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerability, an attacker can send cross-domain… Zammad
- CVE-2017-6080 CRITICAL · 9.8 Er is een probleem ontdekt in Zammad vóór 1.0.4, 1.1.x vóór 1.1.3 en 1.2.x vóór 1.2.1, veroorzaakt door het ontbreken van een beschermingsmechanisme met HTTP… Zammad
- CVE-2017-5929 CRITICAL · 9.8 QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. Qos Redhat
- CVE-2017-5675 HIGH · 8.8 A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The… Embedthis
- CVE-2017-5674 CRITICAL · 9.8 A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed… Embedthis
- CVE-2017-5621 MEDIUM · 6.1 An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat… Zammad
- CVE-2017-5620 MEDIUM · 6.1 An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of… Zammad
- CVE-2017-5619 CRITICAL · 9.8 An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from… Zammad
- CVE-2015-4409 MEDIUM · 6.5 Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a… Hikvision
- CVE-2015-4408 MEDIUM · 6.5 Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a… Hikvision
- CVE-2015-4407 MEDIUM · 6.5 Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a… Hikvision
- CVE-2014-9645 MEDIUM · 5.5 The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character… Busybox
- CVE-2017-6823 HIGH · 8.8 Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action. Fiyo
- CVE-2017-6820 MEDIUM · 6.1 rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence… Roundcube