CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2017-6577 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_list.php with the… Mail-masta Project
- CVE-2017-6576 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the… Mail-masta Project
- CVE-2017-6575 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the… Mail-masta Project
- CVE-2017-6574 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_member.php with the… Mail-masta Project
- CVE-2017-6573 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the… Mail-masta Project
- CVE-2017-6572 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the… Mail-masta Project
- CVE-2017-6571 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the… Mail-masta Project
- CVE-2017-6570 HIGH · 7.2 A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the… Mail-masta Project
- CVE-2017-6562 MEDIUM · 6.1 XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. Agora-project
- CVE-2017-6561 MEDIUM · 6.1 XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. Agora-project
- CVE-2017-6560 MEDIUM · 6.1 XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. Agora-project
- CVE-2017-6559 MEDIUM · 6.1 XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. Agora-project
- CVE-2017-6558 CRITICAL · 9.8 iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n-apparaten zijn gevoelig voor een kwetsbaarheid voor het omzeilen van authenticatie waardoor externe aanvallers de beheerdersrouterinstellingen… Iball
- CVE-2017-6556 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage >… Cmsmadesimple
- CVE-2017-6555 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description… Cmsmadesimple
- CVE-2017-6552 HIGH · 7.5 Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1-apparaten hebben een onvoldoende grote standaardwaarde voor de maximale grootte van de IPv6-routeringstabel: deze kan binnen enkele minuten worden gevuld. Een aanvaller… Sagemcom
- CVE-2017-6549 HIGH · 8.8 Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200,… Asus
- CVE-2017-6548 CRITICAL · 9.8 Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U,… Asus
- CVE-2017-6547 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1,… Asus
- CVE-2017-6544 MEDIUM · 6.1 Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter). Wuhu Project
- CVE-2017-6543 HIGH · 7.3 Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker… Tenable Microsoft
- CVE-2017-1150 LOW · 3.1 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables… Ibm
- CVE-2016-9985 MEDIUM · 5.5 IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999671. Ibm
- CVE-2016-9006 MEDIUM · 5.4 IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus… Ibm
- CVE-2016-5933 MEDIUM · 4.6 IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM… Ibm
- CVE-2016-5894 MEDIUM · 5.1 IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text… Ibm
- CVE-2017-6541 MEDIUM · 6.1 Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the… Webpagetest Project
- CVE-2017-6540 MEDIUM · 6.1 Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (configs) passed to the webpagetest-master/www/benchmarks/compare.php… Webpagetest Project
- CVE-2017-6539 MEDIUM · 6.1 Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the… Webpagetest Project
- CVE-2017-6538 MEDIUM · 6.1 A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) passed to the webpagetest-master/www/speedindex/index.php… Webpagetest Project
- CVE-2017-6537 MEDIUM · 6.1 A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) passed to the webpagetest-master/www/video/view.php… Webpagetest Project
- CVE-2017-6536 MEDIUM · 6.1 Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (url, pssid) passed to the… Webpagetest Project
- CVE-2017-6535 MEDIUM · 6.1 Meerdere Cross-Site Scripting (XSS) problemen werden ontdekt in webpagetest 3.0. De kwetsbaarheden bestaan vanwege onvoldoende filtratie van door de gebruiker geleverde gegevens (benchmark, url) die… Webpagetest Project
- CVE-2017-6534 MEDIUM · 6.1 A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) passed to the webpagetest-master/www/pss.php… Webpagetest Project
- CVE-2017-6533 MEDIUM · 6.1 A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark) passed to the webpagetest-master/www/benchmarks/view.php… Webpagetest Project
- CVE-2017-5178 CRITICAL · 9.8 An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system… Schneider-electric
- CVE-2017-0537 MEDIUM · 4.7 An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission levels. This… Linux
- CVE-2017-0536 MEDIUM · 4.7 An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue… Linux
- CVE-2017-0535 MEDIUM · 4.7 Een kwetsbaarheid voor het vrijgeven van informatie in het HTC-geluidscodec-stuurprogramma kan een lokale schadelijke toepassing in staat stellen om toegang te krijgen tot gegevens buiten… Linux
- CVE-2017-0534 MEDIUM · 4.7 An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue… Linux
- CVE-2017-0533 MEDIUM · 4.7 An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue… Linux
- CVE-2017-0532 MEDIUM · 4.7 An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This… Google
- CVE-2017-0531 MEDIUM · 4.7 An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue… Linux
- CVE-2017-0529 MEDIUM · 5.5 An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is… Google
- CVE-2017-0528 HIGH · 7.8 An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in the context of a… Linux
- CVE-2017-0527 HIGH · 7.0 An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of… Linux
- CVE-2017-0526 HIGH · 7.0 An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of… Linux
- CVE-2017-0525 HIGH · 7.0 Een verhoging van de kwetsbaarheid van privileges in het Qualcomm IPA-stuurprogramma kan een lokale kwaadaardige toepassing in staat stellen om willekeurige code uit te voeren… Linux
- CVE-2017-0524 HIGH · 7.0 An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the… Linux
- CVE-2017-0523 HIGH · 7.0 An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the… Linux Google