CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-6525 CRITICAL · 9.8 Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code… Debian Artifex
- CVE-2016-6340 HIGH · 8.4 Het kickstartbestand in Red Hat QuickStart Cloud Installer (QCI) dwingt het gebruik van MD5-wachtwoorden op geïmplementeerde systemen af, waardoor het voor aanvallers gemakkelijker wordt om… Redhat
- CVE-2016-6322 HIGH · 8.4 Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by… Redhat
- CVE-2016-6265 MEDIUM · 5.5 Use-after-free kwetsbaarheid in de pdf_load_xref-functie in pdf/pdf-xref.c in MuPDF stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een vervaardigd… Artifex Opensuse
- CVE-2016-5247 HIGH · 7.8 The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240,… Lenovo
- CVE-2016-4464 CRITICAL · 9.8 De applicatieplug-ins in Apache CXF Fediz 1.2.x vóór 1.2.3 en 1.3.x vóór 1.3.1 komen niet overeen met SAML AudienceRestriction-waarden tegen geconfigureerde URI's van doelgroepen, waardoor… Apache
- CVE-2016-3991 HIGH · 7.8 Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service… Oracle Libtiff
- CVE-2016-3990 HIGH · 7.8 Op heap gebaseerde bufferoverloop in de horizontalDifference8-functie in tif_pixarlog.c in LibTIFF 4.0.6 en eerder stelt externe aanvallers in staat om een denial of service (crash)… Libtiff Oracle
- CVE-2016-3945 HIGH · 7.8 Meerdere integer overflows in de (1) cvt_by_strip en (2) cvt_by_tile-functies in de tiff2rgba-tool in LibTIFF 4.0.6 en eerder, wanneer de -b-modus is ingeschakeld, staan externe… Libtiff Oracle
- CVE-2016-3632 HIGH · 7.8 The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code… Libtiff Oracle
- CVE-2016-7166 MEDIUM · 5.5 libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application… Redhat Libarchive Oracle
- CVE-2016-7163 HIGH · 7.8 Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an… Uclouvain Debian Fedoraproject Redhat
- CVE-2016-7154 MEDIUM · 6.7 Use-after-free kwetsbaarheid in de FIFO-evenementkanaalcode in Xen 4.4.x stelt lokale beheerders van gastbesturingssystemen in staat om een denial of service (hostcrash) te veroorzaken en mogelijk… Xen
- CVE-2016-7143 HIGH · 8.1 The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a… Debian Charybdis Project
- CVE-2016-7094 MEDIUM · 4.1 Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of… Xen
- CVE-2016-7093 HIGH · 8.2 Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of… Xen
- CVE-2016-7092 HIGH · 8.2 The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive… Xen
- CVE-2016-6801 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x… Apache Debian
- CVE-2016-6354 CRITICAL · 9.8 Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary… Debian Westes
- CVE-2016-6250 HIGH · 8.6 Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code… Oracle Libarchive
- CVE-2016-6159 HIGH · 7.5 The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentication and obtain administrative access by sending "special… Huawei
- CVE-2016-6158 MEDIUM · 6.1 Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for… Huawei
- CVE-2016-5844 MEDIUM · 6.5 Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO… Libarchive Redhat Oracle
- CVE-2016-5427 HIGH · 7.5 PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of… Powerdns
- CVE-2016-5426 HIGH · 7.5 PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname. Powerdns
- CVE-2016-5418 HIGH · 7.5 De sandboxing-code in libarchive 3.2.0 en eerder misbruikt hardlink-archiefvermeldingen van niet-nul gegevensgrootte, waardoor externe aanvallers via een vervaardigd archiefbestand naar willekeurige bestanden kunnen schrijven. Redhat Oracle Libarchive
- CVE-2016-5017 HIGH · 8.1 Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers… Apache
- CVE-2016-4969 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter… Fortinet
- CVE-2016-4968 MEDIUM · 6.5 The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request. Fortinet
- CVE-2016-4967 MEDIUM · 6.5 Fortinet FortiWan (voorheen AscernLink) vóór 4.2.5 stelt op afstand geverifieerde gebruikers in staat om gevoelige informatie te verkrijgen van (1) een back-up van de apparaatconfiguratie… Fortinet
- CVE-2016-4966 MEDIUM · 6.5 The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET… Fortinet
- CVE-2016-4965 HIGH · 8.8 Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the… Fortinet
- CVE-2016-4809 HIGH · 7.5 The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with… Redhat Oracle Libarchive
- CVE-2016-4302 HIGH · 7.8 Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with… Redhat Libarchive
- CVE-2016-4301 HIGH · 7.8 Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file. Libarchive
- CVE-2016-4300 HIGH · 7.8 Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a… Libarchive Redhat
- CVE-2015-8871 CRITICAL · 9.8 Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors. Debian Uclouvain
- CVE-2016-6530 CRITICAL · 9.8 Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackers to obtain administrative… Dentsply Sirona
- CVE-2016-4384 HIGH · 8.6 HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors. Hp
- CVE-2016-4382 HIGH · 8.3 HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user… Hp
- CVE-2016-0925 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and… Emc
- CVE-2016-0921 MEDIUM · 6.5 Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified directories, which allows local users… Emc
- CVE-2016-0920 HIGH · 7.8 Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted… Emc
- CVE-2016-0917 CRITICAL · 9.8 De SMB-service in EMC VNXe (VNXe3200 Operating Environment vóór 3.1.5.8711957 en VNXe3100/3150/3300 Operating Environment vóór 2.4.4.22638), VNX1 File OE vóór 7.1.80.3, VNX2 File OE vóór… Emc
- CVE-2016-0905 MEDIUM · 6.7 Avamar Data Store (ADS) en Avamar Virtual Edition (AVE) in EMC Avamar Server vóór 7.3.0-233 stellen lokale gebruikers in staat om rootprivileges te verkrijgen door… Emc
- CVE-2016-0904 HIGH · 8.6 Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which… Emc
- CVE-2016-0903 CRITICAL · 9.1 Avamar Data Store (ADS) en Avamar Virtual Edition (AVE) in EMC Avamar Server vóór 7.3.0-233 vertrouwen op client-side authenticatie, waarmee externe aanvallers clients kunnen vervalsen… Emc
- CVE-2015-8960 HIGH · 8.1 The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute… Ietf Apple Google Microsoft
- CVE-2016-6802 HIGH · 7.5 Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path. Apache
- CVE-2016-6662 CRITICAL · 9.8 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before… Oracle Percona Mariadb Debian