CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2017-5960 MEDIUM · 6.1 An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed… Phalconeye Project
- CVE-2017-3302 HIGH · 7.5 Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through… Oracle Mariadb Debian Redhat
- CVE-2016-8713 HIGH · 7.8 A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file… Gonitro
- CVE-2016-8711 HIGH · 7.8 A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability… Gonitro
- CVE-2016-8709 HIGH · 7.8 A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file… Gonitro
- CVE-2017-5954 CRITICAL · 9.8 An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code… Serialize-to-js Project
- CVE-2017-5953 CRITICAL · 9.8 vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at… Vim
- CVE-2017-5945 MEDIUM · 6.1 An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insufficient filtration of user-supplied data in the… Poodll
- CVE-2017-5942 MEDIUM · 6.1 An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS.… Wp Mail Project
- CVE-2016-10216 MEDIUM · 6.1 An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtration of user-supplied data in the "value" HTTP… Sivann
- CVE-2016-10215 MEDIUM · 6.1 An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters… Fastspot
- CVE-2017-5858 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Conversejs
- CVE-2017-5606 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Xabber
- CVE-2017-5605 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Movim
- CVE-2017-5604 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Mcabber
- CVE-2017-5603 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Jitsi
- CVE-2017-5602 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Jappix Project
- CVE-2017-5593 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Psi-plus
- CVE-2017-5592 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Profanity Project
- CVE-2017-5591 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Sleekxmpp Project Slixmpp Project Poezio
- CVE-2017-5590 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Chatsecure Zom
- CVE-2017-5589 MEDIUM · 5.9 An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's… Yaxim
- CVE-2017-5941 CRITICAL · 9.8 An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code… Node-serialize Project
- CVE-2017-5940 HIGH · 8.8 Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an… Firejail Project
- CVE-2017-5180 HIGH · 8.8 Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an… Firejail Project
- CVE-2017-3813 HIGH · 7.8 A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated, local attacker to… Cisco
- CVE-2017-3807 HIGH · 8.8 A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated,… Cisco
- CVE-2017-5634 MEDIUM · 6.6 The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative… Norwegian-air
- CVE-2017-5848 HIGH · 7.5 The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors… Gstreamer Debian Redhat
- CVE-2017-5847 HIGH · 7.5 The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving extended… Gstreamer Debian
- CVE-2017-5846 MEDIUM · 5.5 The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash)… Gstreamer
- CVE-2017-5845 HIGH · 7.5 The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash)… Gstreamer
- CVE-2017-5844 MEDIUM · 5.5 The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash)… Gstreamer
- CVE-2017-5843 HIGH · 7.5 Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of… Gstreamer
- CVE-2017-5842 MEDIUM · 5.5 The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted… Gstreamer
- CVE-2017-5841 HIGH · 7.5 The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors… Gstreamer
- CVE-2017-5840 HIGH · 7.5 The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors… Gstreamer
- CVE-2017-5839 HIGH · 7.5 The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of… Gstreamer
- CVE-2017-5838 HIGH · 7.5 The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime… Gstreamer
- CVE-2017-5837 MEDIUM · 5.5 The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash)… Gstreamer
- CVE-2016-9244 HIGH · 7.5 A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of… F5
- CVE-2016-8494 HIGH · 7.2 Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme. Fortinet
- CVE-2016-6173 HIGH · 7.5 NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer… Nlnetlabs
- CVE-2016-6171 HIGH · 8.6 Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer… Knot-dns
- CVE-2016-5727 HIGH · 8.8 LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to… Simplemachines
- CVE-2016-5726 CRITICAL · 9.8 Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array… Simplemachines
- CVE-2016-4988 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de Build Failure Analyzer-plug-in vóór 1.16.0 in Jenkins stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Jenkins
- CVE-2016-4987 MEDIUM · 6.5 Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified… Jenkins
- CVE-2016-4986 HIGH · 7.5 Directory traversal-kwetsbaarheid in de TAP-plug-in vóór 1,25 in Jenkins stelt externe aanvallers in staat om willekeurige bestanden te lezen via een niet-gespecificeerde parameter. Jenkins
- CVE-2016-3102 HIGH · 7.3 The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1)… Jenkins