CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3306 HIGH · 7.8 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Microsoft
- CVE-2016-3305 HIGH · 7.8 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Microsoft
- CVE-2016-3302 MEDIUM · 6.3 Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1 en Windows 10 Gold, 1511 en 1607, wanneer het vergrendelscherm is ingeschakeld, beperken het laden… Microsoft
- CVE-2016-3297 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Microsoft
- CVE-2016-3295 HIGH · 7.5 Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Microsoft
- CVE-2016-3294 HIGH · 7.5 Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge… Microsoft
- CVE-2016-3292 MEDIUM · 5.0 Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted… Microsoft
- CVE-2016-3291 LOW · 2.4 Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft… Microsoft
- CVE-2016-3247 HIGH · 7.5 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Microsoft
- CVE-2016-0141 MEDIUM · 6.5 The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which… Microsoft
- CVE-2016-0138 MEDIUM · 4.3 Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1 en 2016 Cumulative Update… Microsoft
- CVE-2016-0137 LOW · 3.3 De Click-to-Run (C2R) -implementatie in Microsoft Office 2013 SP1 en 2016 stelt lokale gebruikers in staat om het ASLR-beveiligingsmechanisme te omzeilen via een vervaardigde applicatie,… Microsoft
- CVE-2016-6399 HIGH · 7.5 Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a… Cisco
- CVE-2016-6398 MEDIUM · 5.3 De PPTP-server in Cisco IOS 15.5(3)M initialiseert pakketbuffers niet goed, waardoor externe aanvallers gevoelige informatie uit eerdere netwerkcommunicatie kunnen verkrijgen door pakketgegevens te lezen, ook… Cisco
- CVE-2016-6396 MEDIUM · 5.3 Cisco Firepower Management Center vóór 6.1 en FireSIGHT System Software vóór 6.1, wanneer bepaalde opties voor het blokkeren van malware zijn ingeschakeld, kunnen externe aanvallers… Cisco
- CVE-2016-6395 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in de webgebaseerde beheerinterface in Cisco Firepower Management Center vóór 6.1 en FireSIGHT-systeemsoftware vóór 6.1 stelt op afstand geverifieerde gebruikers in… Cisco
- CVE-2016-6394 CRITICAL · 9.1 Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session… Cisco
- CVE-2016-6371 HIGH · 7.5 Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files… Cisco
- CVE-2016-6370 MEDIUM · 4.3 Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files… Cisco
- CVE-2016-5954 MEDIUM · 6.5 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote… Ibm
- CVE-2016-5927 MEDIUM · 5.5 IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain… Ibm
- CVE-2016-4852 MEDIUM · 6.5 YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X… Aki-null Apple
- CVE-2016-0331 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2… Ibm
- CVE-2016-7134 CRITICAL · 9.8 ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service (allocation… Php
- CVE-2016-7133 HIGH · 8.1 Zend/zend_alloc.c in PHP 7.x vóór 7.0.10, wanneer open_basedir is ingeschakeld, misbruikt enorme realloc-bewerkingen, waardoor externe aanvallers een denial of service (integer overflow) kunnen veroorzaken of… Php
- CVE-2016-7132 HIGH · 7.5 ext/wddx/wddx.c in PHP vóór 5.6.25 en 7.x vóór 7.0.10 stelt externe aanvallers in staat om een denial of service (NULL pointer dereference en applicatiecrash) te… Php
- CVE-2016-7131 HIGH · 7.5 ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or… Php
- CVE-2016-7130 HIGH · 7.5 The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference… Php
- CVE-2016-7129 CRITICAL · 9.8 The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or… Php
- CVE-2016-7128 MEDIUM · 5.3 The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size,… Php
- CVE-2016-7127 CRITICAL · 9.8 The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause… Php
- CVE-2016-7126 CRITICAL · 9.8 The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers… Php
- CVE-2016-7125 HIGH · 7.5 ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to… Php
- CVE-2016-7124 CRITICAL · 9.8 ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly… Php
- CVE-2016-6375 MEDIUM · 5.3 Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of… Cisco
- CVE-2016-1469 HIGH · 7.5 The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of… Cisco
- CVE-2016-3899 MEDIUM · 5.5 OMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not… Google
- CVE-2016-3898 MEDIUM · 5.5 Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service (loss… Google
- CVE-2016-3897 MEDIUM · 5.5 The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 includes a password… Google
- CVE-2016-3896 MEDIUM · 5.5 AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attackers to obtain sensitive EmailAccountCacheProvider information via… Google
- CVE-2016-3895 MEDIUM · 5.5 Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information… Google
- CVE-2016-3894 MEDIUM · 5.5 The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal… Google
- CVE-2016-3893 MEDIUM · 5.5 The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which… Google
- CVE-2016-3892 MEDIUM · 5.5 Met het Qualcomm SPMI-stuurprogramma in Android vóór 2016-09-05 op Nexus 5-, 5X-, 6- en 6P-apparaten kunnen aanvallers gevoelige informatie verkrijgen via een vervaardigde applicatie, ook… Google
- CVE-2016-3890 HIGH · 7.0 The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 mishandles… Google
- CVE-2016-3889 MEDIUM · 6.8 Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing (1) an external… Google
- CVE-2016-3888 LOW · 2.1 internal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows physically proximate attackers to bypass… Google
- CVE-2016-3887 HIGH · 7.8 providers/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly enforce the DISALLOW_CONFIG_VPN setting, which allows attackers to bypass an intended always-on VPN state via a… Google
- CVE-2016-3886 MEDIUM · 6.8 systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to… Google
- CVE-2016-3885 HIGH · 7.8 debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles the interaction between PTRACE_ATTACH operations and… Google