CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3101 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging… Jenkins
- CVE-2016-2148 CRITICAL · 9.8 Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing. Busybox Debian Canonical
- CVE-2016-2147 HIGH · 7.5 Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded… Busybox Debian Canonical
- CVE-2016-10199 HIGH · 7.5 The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via… Gstreamer
- CVE-2016-10198 MEDIUM · 5.5 The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash)… Gstreamer
- CVE-2016-10192 CRITICAL · 9.8 Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary… Ffmpeg
- CVE-2016-10191 CRITICAL · 9.8 Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary… Ffmpeg
- CVE-2016-10190 CRITICAL · 9.8 Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute… Ffmpeg
- CVE-2015-8936 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link. Squidguard
- CVE-2015-8832 HIGH · 8.8 Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authenticated users with "manage their own media items" and "manage their own entries… Dotclear
- CVE-2015-8831 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in… Dotclear
- CVE-2015-6024 CRITICAL · 9.8 ping.cgi in NetCommWireless HSPA 3G10WVE draadloze routers met firmware vóór 3G10WVE-L101-S306ETS-C01_R05 kunnen op afstand geverifieerde gebruikers willekeurige opdrachten uitvoeren via shell-metakarakters in de parameter dia_IPADDRESS. Netcommwireless
- CVE-2015-6023 HIGH · 7.3 ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request. NOTE: this… Netcommwireless
- CVE-2016-9686 MEDIUM · 5.3 The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being… Puppet
- CVE-2016-9005 CRITICAL · 9.8 IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's password and gain remote… Ibm
- CVE-2016-8954 CRITICAL · 9.8 IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database. Ibm
- CVE-2016-5934 HIGH · 7.3 IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-crafted DLL in the… Ibm
- CVE-2016-5918 MEDIUM · 4.7 IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the password access option is prompt… Ibm Microsoft
- CVE-2016-5902 MEDIUM · 6.1 IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the… Ibm
- CVE-2016-5900 MEDIUM · 5.9 IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate… Ibm
- CVE-2016-0310 MEDIUM · 5.4 IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. Ibm
- CVE-2016-0308 MEDIUM · 4.3 IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate background images. Ibm
- CVE-2016-0307 MEDIUM · 4.3 IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses. Ibm
- CVE-2016-0305 MEDIUM · 5.4 IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL… Ibm
- CVE-2016-0214 HIGH · 7.8 IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote attacker could exploit this vulnerability to upload a malicious file.… Ibm
- CVE-2016-0210 MEDIUM · 5.3 IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send… Ibm
- CVE-2016-0206 LOW · 3.3 IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a… Ibm
- CVE-2016-0203 MEDIUM · 5.5 A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated… Ibm
- CVE-2016-0202 LOW · 3.3 A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible… Ibm
- CVE-2015-7494 LOW · 2.8 A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API… Ibm
- CVE-2015-7493 MEDIUM · 4.7 IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information. Ibm
- CVE-2015-7418 MEDIUM · 4.4 IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow… Ibm
- CVE-2015-1976 MEDIUM · 5.5 IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash. Ibm
- CVE-2017-1128 MEDIUM · 5.4 IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… Ibm
- CVE-2017-1127 MEDIUM · 5.4 IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… Ibm
- CVE-2016-9748 MEDIUM · 4.3 IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system. Ibm
- CVE-2016-6032 MEDIUM · 5.4 IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Ibm
- CVE-2016-2866 MEDIUM · 4.3 An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user. Ibm
- CVE-2015-5013 MEDIUM · 5.5 The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access. Ibm
- CVE-2017-2765 CRITICAL · 9.8 EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerability that could potentially be exploited… Emc
- CVE-2017-5933 MEDIUM · 5.9 Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes… Citrix
- CVE-2016-8492 MEDIUM · 5.9 The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS… Fortinet
- CVE-2016-10213 MEDIUM · 5.9 A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the… A10networks
- CVE-2016-10212 MEDIUM · 5.9 Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via… Radware
- CVE-2016-0270 MEDIUM · 5.9 IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random… Ibm
- CVE-2017-0451 MEDIUM · 4.7 An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue… Google Linux
- CVE-2017-0450 HIGH · 7.8 An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This… Google
- CVE-2017-0449 HIGH · 7.0 An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the… Google Linux
- CVE-2017-0448 MEDIUM · 5.5 An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue… Google Linux
- CVE-2017-0447 HIGH · 7.0 An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the… Google Linux