CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1280 MEDIUM · 6.5 PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 before 14.1R8,… Juniper
- CVE-2016-1279 CRITICAL · 9.8 J-Web in Juniper Junos OS vóór 12.1X46-D45, 12.1X46-D50, 12.1X47 vóór 12.1X47-D35, 12.3 vóór 12.3R12, 12.3X48 vóór 12.3X48-D25, 13.3 vóór 13.3R10, 13.3R9 vóór 13.3R9-S1, 14.1 vóór… Juniper
- CVE-2016-1277 MEDIUM · 5.9 Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R6, 15.1 before… Juniper
- CVE-2016-1275 MEDIUM · 6.5 Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information… Juniper
- CVE-2016-1263 HIGH · 7.5 Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6, 15.1 before 15.1F2-S5, 15.1F4… Juniper
- CVE-2016-7180 MEDIUM · 5.9 epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to… Debian Wireshark
- CVE-2016-7179 MEDIUM · 5.9 Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application… Debian Wireshark
- CVE-2016-7178 MEDIUM · 5.9 epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote… Wireshark Debian
- CVE-2016-7177 MEDIUM · 5.9 epan/dissectors/packet-catapult-dct2000.c in de Catapult DCT2000 dissector in Wireshark 2.x vóór 2.0.6 beperkt het aantal kanalen niet, waardoor externe aanvallers een denial of service (buffer over-read… Debian Wireshark
- CVE-2016-7176 MEDIUM · 5.9 epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote… Wireshark Debian
- CVE-2016-7175 MEDIUM · 5.9 epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service… Wireshark
- CVE-2016-4381 MEDIUM · 4.5 HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x tot en met 8.x vóór 8.4.1-02, wanneer Replication Manager (RepMgr) en Device Manager (DevMgr) zijn ingeschakeld,… Hp
- CVE-2016-4380 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML… Hp
- CVE-2016-4379 LOW · 3.7 The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC… Hp
- CVE-2016-4375 CRITICAL · 9.8 Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated… Hp
- CVE-2016-6263 HIGH · 7.5 The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8… Gnu
- CVE-2016-6262 HIGH · 7.5 idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds… Gnu Canonical Opensuse
- CVE-2016-6261 HIGH · 7.5 Met de functie idna_to_ascii_4i in lib/idna.c in libidn voor 1.33 kunnen contextafhankelijke aanvallers een denial of service (buiten het bereik lezen en crashen) veroorzaken via… Opensuse Gnu Canonical
- CVE-2016-6179 HIGH · 7.0 The WiFi driver in Huawei Honor 6 smartphones with software H60-L01 before H60-L01C00B850, H60-L11 before H60-L11C00B850, H60-L21 before H60-L21C00B850, H60-L02 before H60-L02C00B850, H60-L12 before H60-L12C00B850,… Huawei
- CVE-2016-5404 MEDIUM · 6.5 The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the… Freeipa Oracle Fedoraproject
- CVE-2015-8948 HIGH · 7.5 idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an… Opensuse Canonical Gnu
- CVE-2016-7110 CRITICAL · 9.8 Huawei Unified Maintenance Audit (UMA) vóór V200R001C00SPC200 stelt aanvallers op afstand in staat om willekeurige opdrachten uit te voeren via "speciale tekens", een andere kwetsbaarheid… Huawei
- CVE-2016-7109 CRITICAL · 9.8 Huawei Unified Maintenance Audit (UMA) vóór V200R001C00SPC200 stelt aanvallers op afstand in staat om willekeurige opdrachten uit te voeren via "speciale tekens", een andere kwetsbaarheid… Huawei
- CVE-2016-7108 MEDIUM · 6.5 Huawei Unified Maintenance Audit (UMA) vóór V200R001C00SPC200 SPH206 stelt op afstand geverifieerde gebruikers in staat om de MD5-hashes van willekeurige gebruikerswachtwoorden te verkrijgen via niet-gespecificeerde… Huawei
- CVE-2016-7107 HIGH · 7.5 Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors. Huawei
- CVE-2016-6900 MEDIUM · 5.5 The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers… Huawei
- CVE-2016-6899 HIGH · 7.5 The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers… Huawei
- CVE-2016-6898 MEDIUM · 6.6 XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to… Huawei
- CVE-2016-6876 HIGH · 7.5 The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1,… F5
- CVE-2016-6839 MEDIUM · 6.1 CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Huawei
- CVE-2016-6838 HIGH · 7.5 Huawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, CH140… Huawei
- CVE-2016-6825 CRITICAL · 9.8 Huawei XH620 V3-, XH622 V3- en XH628 V3-servers met software vóór V100R003C00SPC610, RH1288 V3-servers met software vóór V100R003C00SPC613, RH2288 V3-servers met software vóór V100R003C00SPC617 en… Huawei
- CVE-2016-6670 MEDIUM · 5.3 Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier… Huawei Firmware Huawei
- CVE-2016-6318 HIGH · 7.8 Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges… Cracklib Project Opensuse Debian
- CVE-2016-6317 HIGH · 7.5 Action Record in Ruby on Rails 4.2.x vóór 4.2.7.1 houdt niet goed rekening met verschillen in parameterafhandeling tussen de Active Record-component en de JSON-implementatie, waardoor… Rubyonrails
- CVE-2016-6316 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers… Rubyonrails Debian
- CVE-2016-6184 HIGH · 7.0 Het camerastuurprogramma in Huawei Honor 4C-smartphones met software CHM-UL00C00 vóór CHM-UL00C00B564, CHM-TL00C01 vóór CHM-TL00C01B564 en CHM-TL00C00 vóór CHM-TL00HC00B564 stelt aanvallers in staat om een denial… Huawei
- CVE-2016-6183 HIGH · 7.0 Het camerastuurprogramma in Huawei Honor 4C-smartphones met software CHM-UL00C00 vóór CHM-UL00C00B564, CHM-TL00C01 vóór CHM-TL00C01B564 en CHM-TL00C00 vóór CHM-TL00HC00B564 stelt aanvallers in staat om een denial… Huawei
- CVE-2016-6182 HIGH · 7.0 Het camerastuurprogramma in Huawei Honor 4C-smartphones met software CHM-UL00C00 vóór CHM-UL00C00B564, CHM-TL00C01 vóór CHM-TL00C01B564 en CHM-TL00C00 vóór CHM-TL00HC00B564 stelt aanvallers in staat om een denial… Huawei
- CVE-2016-6181 HIGH · 7.0 The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a… Huawei
- CVE-2016-6180 HIGH · 7.0 The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a… Huawei
- CVE-2016-5422 HIGH · 8.8 The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role,… Redhat
- CVE-2016-5022 CRITICAL · 9.8 F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x… F5
- CVE-2016-1242 MEDIUM · 4.4 file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions… Tryton
- CVE-2016-1241 MEDIUM · 5.3 Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password… Tryton
- CVE-2016-7034 HIGH · 8.8 The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query… Redhat
- CVE-2016-7033 MEDIUM · 6.1 Meerdere cross-site scripting (XSS) kwetsbaarheden in de beheerderspagina's in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 stellen externe aanvallers in staat om willekeurig webscript… Redhat
- CVE-2016-6855 HIGH · 7.5 Eye of Gnome (ook bekend als eog) 3.16.5, 3.17.x, 3.18.x vóór 3.18.3, 3.19.x en 3.20.x vóór 3.20.4, wanneer gebruikt met glib vóór 2.44.1, kunnen externe… Fedoraproject Opensuse Canonical Gnome
- CVE-2016-6351 MEDIUM · 6.7 De esp_do_dma-functie in hw/scsi/esp.c in QEMU (aka Quick Emulator), indien gebouwd met ondersteuning voor ESP/NCR53C9x-controlleremulatie, stelt lokale gastbesturingssysteembeheerders in staat om een denial of service… Qemu Canonical Debian
- CVE-2016-6346 HIGH · 7.5 RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors. Redhat