CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8934 MEDIUM · 5.5 The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted… Suse Canonical Libarchive
- CVE-2015-8933 MEDIUM · 5.5 Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted… Libarchive Suse Canonical
- CVE-2015-8932 MEDIUM · 5.5 The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which… Canonical Debian Suse Libarchive
- CVE-2015-8931 HIGH · 7.8 Meerdere integer overflows in de (1) get_time_t_max en (2) get_time_t_min functies in archive_read_support_format_mtree.c in libarchive vóór 3.2.0 staan externe aanvallers toe om niet-gespecificeerde impact te… Libarchive Suse Canonical Debian
- CVE-2015-8930 HIGH · 7.5 bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a… Suse Libarchive Canonical
- CVE-2015-8929 MEDIUM · 5.5 Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file. Suse Libarchive
- CVE-2015-8928 MEDIUM · 5.5 The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. Canonical Libarchive Suse
- CVE-2015-8927 MEDIUM · 5.5 The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a… Libarchive
- CVE-2015-8926 MEDIUM · 5.5 The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive. Canonical Suse Libarchive
- CVE-2015-8925 MEDIUM · 5.5 Met de readline-functie in archive_read_support_format_mtree.c in libarchive vóór 3.2.0 kunnen externe aanvallers een denial of service (ongeldige read) veroorzaken via een vervaardigd mtree-bestand, gerelateerd aan… Canonical Libarchive Suse
- CVE-2015-8924 MEDIUM · 5.5 The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file. Libarchive Novell Canonical
- CVE-2015-8923 MEDIUM · 6.5 De functie process_extra in libarchive vóór 3.2.0 gebruikt het veld size en een ondertekend nummer in een offset, waarmee externe aanvallers een denial of service… Libarchive Novell Canonical
- CVE-2015-8922 MEDIUM · 5.5 The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a… Libarchive Novell Canonical Oracle
- CVE-2015-8921 HIGH · 7.5 Met de functie ae_strtofflags in archive_entry.c in libarchive vóór 3.2.0 kunnen externe aanvallers een denial of service (buiten het bereik lezen) veroorzaken via een vervaardigd… Novell Libarchive Canonical
- CVE-2015-8920 MEDIUM · 5.5 Met de functie_ar_read_header in archive_read_support_format_ar.c in libarchive vóór 3.2.0 kunnen externe aanvallers een denial of service (buiten het bereik lezen van een stack) veroorzaken via… Novell Canonical Libarchive
- CVE-2015-8919 HIGH · 7.5 The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh… Canonical Libarchive Novell
- CVE-2015-8918 HIGH · 7.5 Met de functie archive_string_append in archive_string.c in libarchive vóór 3.2.0 kunnen externe aanvallers een denial of service (crash) veroorzaken via een vervaardigde CAB-bestanden, gerelateerd aan… Novell Libarchive
- CVE-2015-8917 HIGH · 7.5 bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the… Debian Libarchive Canonical
- CVE-2015-8916 MEDIUM · 6.5 bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows… Canonical Debian Libarchive
- CVE-2015-8915 MEDIUM · 5.5 bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file. Libarchive
- CVE-2016-6537 HIGH · 7.5 AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent… Aver
- CVE-2016-6536 CRITICAL · 9.8 The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge… Aver
- CVE-2016-6535 CRITICAL · 9.8 AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and… Aver
- CVE-2016-5814 HIGH · 8.6 Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition… Rockwellautomation
- CVE-2016-4860 HIGH · 7.3 Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause… Yokogawa
- CVE-2016-4526 HIGH · 7.5 ABB DataManagerPro 1.x vóór 1.7.1 stelt lokale gebruikers in staat om privileges te verkrijgen door een DLL-bestand in de pakketmap te vervangen. Trane
- CVE-2016-1483 HIGH · 7.5 Cisco WebEx Meetings Server 2.6 stelt externe aanvallers in staat om een denial of service (CPU-verbruik) te veroorzaken door herhaaldelijk toegang te krijgen tot de… Cisco
- CVE-2016-0870 MEDIUM · 5.3 The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. Trane
- CVE-2016-6405 MEDIUM · 6.5 Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka… Cisco
- CVE-2016-6404 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in het webframework in Cisco IOx Local Manager in IOS 15.5(2)T en IOS XE stelt externe aanvallers in staat om willekeurig… Cisco
- CVE-2016-6403 MEDIUM · 5.9 The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause… Cisco
- CVE-2016-6402 HIGH · 7.8 UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted… Cisco
- CVE-2016-4749 LOW · 3.3 Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file. Apple
- CVE-2016-4747 LOW · 3.7 Mail in Apple iOS voordat 10 certificaten verkeerd gebruiken, waardoor het voor man-in-the-middle-aanvallers gemakkelijker wordt om e-mailreferenties te ontdekken via niet-gespecificeerde vectoren. Apple
- CVE-2016-4746 MEDIUM · 5.3 Het onderdeel Toetsenborden in Apple iOS voor 10 gebruikt niet correct een cache voor automatische correctiesuggesties, waardoor aanvallers op afstand gevoelige informatie kunnen verkrijgen in… Apple
- CVE-2016-4741 MEDIUM · 5.9 Met de Assets-component in Apple iOS voor 10 kunnen man-in-the-middle-aanvallers software-updates blokkeren via vectoren die verband houden met het ontbreken van een HTTPS-sessie voor het… Apple
- CVE-2016-4740 LOW · 2.9 Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow… Apple
- CVE-2016-4719 MEDIUM · 5.5 The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover… Apple
- CVE-2016-4705 HIGH · 7.8 otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified… Apple
- CVE-2016-4704 HIGH · 7.8 otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified… Apple
- CVE-2016-4620 LOW · 3.3 The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to… Apple
- CVE-2016-1433 MEDIUM · 5.3 Cisco IOS XR 6.0 en 6.0.1 op NCS 6000-apparaten stelt externe aanvallers in staat om een denial of service (OSPFv3-procesherladen) te veroorzaken via vervaardigde OSPFv3-pakketten,… Cisco
- CVE-2016-6643 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Emc
- CVE-2016-6642 MEDIUM · 6.1 Cross-site request forgery (CSRF) -kwetsbaarheid in EMC ViPR SRM vóór 3.7.2 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor aanvragen… Emc
- CVE-2016-6641 HIGH · 7.6 Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Emc
- CVE-2016-6639 HIGH · 7.5 Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38… Cloudfoundry Pivotal
- CVE-2016-0930 CRITICAL · 9.8 Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs,… Pivotal
- CVE-2016-0929 HIGH · 7.5 De component voor het verzamelen van statistieken in RabbitMQ voor Pivotal Cloud Foundry (PCF) 1.6.x vóór 1.6.4 logt opdrachtregels van mislukte opdrachten, waardoor contextafhankelijke aanvallers… Pivotal Software
- CVE-2016-0928 HIGH · 7.4 Meerdere open omleidingskwetsbaarheden in Pivotal Cloud Foundry (PCF) Elastic Runtime vóór 1.6.30 en 1.7.x vóór 1.7.8 stellen externe aanvallers in staat om gebruikers om te… Pivotal
- CVE-2016-0927 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified… Pivotal Software