CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0926 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime vóór 1.6.32 en 1.7.x vóór 1.7.8 stelt externe aanvallers in staat… Pivotal Software
- CVE-2016-0923 HIGH · 7.5 The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm… Dell
- CVE-2016-0922 CRITICAL · 9.8 EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a… Emc
- CVE-2016-0897 CRITICAL · 9.8 Pivotal Cloud Foundry (PCF) Ops Manager vóór 1.6.17 en 1.7.x vóór 1.7.8, wanneer vCloud of vSphere wordt gebruikt, schakelt SSH-toegang niet correct in voor operators,… Pivotal Software
- CVE-2016-0896 HIGH · 7.3 Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote attackers… Pivotal Software
- CVE-2016-0883 CRITICAL · 9.8 Pivotal Cloud Foundry (PCF) Ops Manager vóór 1.5.14 en 1.6.x vóór 1.6.9 gebruikt dezelfde sleutel voor cookie-encryptie voor de installaties van verschillende klanten, waardoor externe… Pivotal Software
- CVE-2016-7419 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to… Nextcloud Owncloud
- CVE-2016-7418 HIGH · 7.5 Met de php_wddx_push_element-functie in ext/wddx/wddx.c in PHP vóór 5.6.26 en 7.x vóór 7.0.11 kunnen externe aanvallers een denial of service veroorzaken (ongeldige pointer-toegang en buiten… Php
- CVE-2016-7417 CRITICAL · 9.8 ext/spl/spl_array.c in PHP vóór 5.6.26 en 7.x vóór 7.0.11 gaat door met SplArray unserialisatie zonder een retourwaarde en gegevenstype te valideren, waardoor externe aanvallers een… Php
- CVE-2016-7416 HIGH · 7.5 ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library,… Php
- CVE-2016-7415 CRITICAL · 9.8 Stack-gebaseerde bufferoverloop in de Locale-klasse in common/locid.cpp in International Components for Unicode (ICU) tot 57.1 voor C/C++ stelt externe aanvallers in staat om een denial… Icu-project
- CVE-2016-7414 CRITICAL · 9.8 The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote… Php
- CVE-2016-7413 CRITICAL · 9.8 Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service… Php
- CVE-2016-7412 HIGH · 8.1 ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers… Php
- CVE-2016-7411 CRITICAL · 9.8 ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other… Php
- CVE-2016-6644 MEDIUM · 5.3 EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an… Emc
- CVE-2016-1482 HIGH · 8.1 Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130. Cisco
- CVE-2016-6938 CRITICAL · 9.8 Use-after-free kwetsbaarheid in Adobe Reader en Acrobat vóór 11.0.17, Acrobat en Acrobat Reader DC Classic vóór 15.006.30198, en Acrobat en Acrobat Reader DC Continuous vóór… Apple Microsoft Adobe
- CVE-2016-6937 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-6407 HIGH · 7.5 Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP… Cisco
- CVE-2016-6401 MEDIUM · 5.3 Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause… Cisco
- CVE-2016-5843 CRITICAL · 9.4 Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow… Otrs
- CVE-2016-7420 MEDIUM · 5.9 Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production… Cryptopp
- CVE-2016-6936 HIGH · 7.5 Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, which might allow remote attackers to obtain sensitive information… Adobe Apple Microsoft
- CVE-2016-6303 CRITICAL · 9.8 Een integer-overflow in de MDC2_Update-functie in crypto/mdc2/mdc2dgst.c in OpenSSL vóór versie 1.1.0 stelt externe aanvallers in staat een denial-of-service-aanval uit te voeren (schrijven buiten de… Nodejs Openssl
- CVE-2016-6302 HIGH · 7.5 The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers… Openssl Oracle
- CVE-2016-4263 CRITICAL · 9.8 Use-after-free kwetsbaarheid in Adobe Digital Editions vóór 4.5.2 stelt aanvallers in staat om willekeurige code uit te voeren via niet-gespecificeerde vectoren. Adobe
- CVE-2016-4262 CRITICAL · 9.8 Adobe Digital Editions vóór 4.5.2 stelt aanvallers in staat om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging) te veroorzaken via niet-gespecificeerde… Adobe
- CVE-2016-4261 CRITICAL · 9.8 Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability… Adobe
- CVE-2016-4260 CRITICAL · 9.8 Adobe Digital Editions vóór 4.5.2 staat aanvallers toe om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging) te veroorzaken via niet-gespecificeerde vectoren,… Adobe
- CVE-2016-4259 CRITICAL · 9.8 Adobe Digital Editions vóór 4.5.2 staat aanvallers toe om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging) te veroorzaken via niet-gespecificeerde vectoren,… Adobe
- CVE-2016-4258 CRITICAL · 9.8 Adobe Digital Editions vóór versie 4.5.2 stelt aanvallers in staat om willekeurige code uit te voeren of een denial-of-service-aanval (geheugenbeschadiging) te veroorzaken via niet-gespecificeerde methoden.… Adobe
- CVE-2016-4257 CRITICAL · 9.8 Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability… Adobe
- CVE-2016-4256 CRITICAL · 9.8 Adobe Digital Editions vóór 4.5.2 staat aanvallers toe om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging) te veroorzaken via niet-gespecificeerde vectoren,… Adobe
- CVE-2016-2182 CRITICAL · 9.8 De BN_bn2dec-functie in crypto/bn/bn_print.c in OpenSSL vóór 1.1.0 valideert de divisieresultaten niet goed, waardoor externe aanvallers een denial of service (buiten het bereik schrijven en… Hp Openssl Oracle
- CVE-2016-2181 HIGH · 7.5 The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence… Openssl Oracle
- CVE-2016-2179 HIGH · 7.5 De DTLS-implementatie in OpenSSL vóór versie 1.1.0 beperkt de levensduur van wachtrijvermeldingen die zijn gekoppeld aan ongebruikte berichten die niet in de juiste volgorde aankomen… Openssl Oracle
- CVE-2016-6932 HIGH · 8.8 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 18.0.0.375 en 19.x tot en met 23.x vóór 23.0.0.162 op Windows en OS X en vóór 11.2.202.635 op… Adobe Linux Microsoft Apple
- CVE-2016-6931 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows… Adobe Linux Microsoft Apple
- CVE-2016-6930 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows… Adobe Linux Microsoft Apple
- CVE-2016-6929 HIGH · 8.8 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 18.0.0.375 en 19.x tot en met 23.x vóór 23.0.0.162 op Windows en OS X en vóór 11.2.202.635 op… Adobe Linux Microsoft Apple
- CVE-2016-6927 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows… Adobe Linux Microsoft Apple
- CVE-2016-6926 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows… Adobe Linux Microsoft Apple
- CVE-2016-6925 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows… Adobe Linux Microsoft Apple
- CVE-2016-6924 HIGH · 8.8 Adobe Flash Player vóór 18.0.0.375 en 19.x tot en met 23.x vóór 23.0.0.162 op Windows en OS X en vóór 11.2.202.635 op Linux stelt aanvallers… Adobe Linux Microsoft Apple
- CVE-2016-6923 HIGH · 8.8 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 18.0.0.375 en 19.x tot en met 23.x vóór 23.0.0.162 op Windows en OS X en vóór 11.2.202.635 op… Adobe Linux Microsoft Apple
- CVE-2016-6922 HIGH · 8.8 Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute… Adobe Linux Microsoft Apple
- CVE-2016-6921 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows… Adobe Linux Microsoft Apple
- CVE-2016-4287 HIGH · 8.8 Integer-overloop in Adobe Flash Player vóór 18.0.0.375 en 19.x tot 23.x vóór 23.0.0.162 op Windows en OS X en vóór 11.2.202.635 op Linux stelt aanvallers… Adobe Linux Microsoft Apple
- CVE-2016-4285 HIGH · 8.8 Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute… Adobe Linux Microsoft Apple