CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-6345 MEDIUM · 6.5 RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs. Redhat
- CVE-2016-6344 MEDIUM · 5.3 Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote… Redhat
- CVE-2016-7153 MEDIUM · 5.3 The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote… Microsoft Google Apple Opera
- CVE-2016-7152 MEDIUM · 5.3 The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote… Opera Apple Mozilla Microsoft
- CVE-2016-7114 HIGH · 8.8 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100… Siemens
- CVE-2016-7113 HIGH · 7.5 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100… Siemens
- CVE-2016-7112 CRITICAL · 9.8 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100… Siemens
- CVE-2016-6377 HIGH · 8.1 Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and… Cisco
- CVE-2016-5430 MEDIUM · 5.3 The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier… Jose-php Project
- CVE-2016-5429 LOW · 3.7 jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing… Jose-php Project
- CVE-2016-1464 HIGH · 7.8 Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID… Cisco
- CVE-2016-1415 MEDIUM · 5.5 Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted… Cisco
- CVE-2015-5721 CRITICAL · 9.8 Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp. Misp-project
- CVE-2015-5720 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script… Misp-project
- CVE-2015-5719 CRITICAL · 9.8 app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors. Misp-project
- CVE-2016-7123 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators. Gnu
- CVE-2016-6893 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary… Gnu
- CVE-2016-5879 HIGH · 8.8 MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2)… Ibm
- CVE-2016-5699 MEDIUM · 6.1 CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to… Python
- CVE-2016-5636 CRITICAL · 9.8 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to… Python
- CVE-2016-5107 MEDIUM · 6.0 The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial… Qemu Canonical Debian
- CVE-2016-5106 MEDIUM · 6.0 The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a… Qemu Canonical Debian
- CVE-2016-5105 MEDIUM · 4.4 De megasas_dcmd_cfg_read-functie in hw/scsi/megasas.c in QEMU, wanneer gebouwd met MegaRAID SAS 8708EM2 Host Bus Adapter-emulatieondersteuning, gebruikt een niet-geïnitialiseerde variabele, waarmee lokale gastbeheerders hostgeheugen kunnen lezen… Qemu Canonical Debian
- CVE-2016-4952 MEDIUM · 6.0 QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service… Qemu Canonical Debian
- CVE-2016-0772 MEDIUM · 6.5 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which… Python
- CVE-2016-6483 HIGH · 8.6 The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch… Vbulletin
- CVE-2016-4853 HIGH · 7.8 AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Happy Wardrobe. Akabei Soft2
- CVE-2016-4851 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVE-2016-4848 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Clip-bucket
- CVE-2016-6376 MEDIUM · 6.5 The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before… Cisco
- CVE-2016-1473 CRITICAL · 9.8 Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by… Cisco
- CVE-2016-1472 HIGH · 7.5 The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage)… Cisco
- CVE-2016-1471 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary… Cisco
- CVE-2016-1470 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack… Cisco
- CVE-2016-6298 MEDIUM · 5.3 De _Rsa15-klasse in de RSA 1.5-algoritme-implementatie in jwa.py in jwcrypto voor 0.3.2 mist het Random Filling-beveiligingsmechanisme, wat het voor aanvallers op afstand gemakkelijker maakt om… Latchset
- CVE-2016-4264 HIGH · 8.6 The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files… Adobe
- CVE-2016-5047 MEDIUM · 6.5 NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors. Netapp
- CVE-2016-3010 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows… Ibm
- CVE-2016-3008 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary… Ibm
- CVE-2016-3005 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows… Ibm
- CVE-2016-2998 LOW · 3.5 Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users… Ibm
- CVE-2016-2997 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows… Ibm
- CVE-2016-2995 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows… Ibm
- CVE-2016-2956 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary… Ibm
- CVE-2016-2954 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary… Ibm
- CVE-2016-0385 LOW · 3.1 Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when… Ibm
- CVE-2016-3064 MEDIUM · 6.5 NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors. Netapp
- CVE-2016-0370 LOW · 2.7 Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML… Ibm
- CVE-2016-0293 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 allows remote attackers to inject arbitrary… Ibm
- CVE-2016-2183 HIGH · 7.5 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of… Redhat Python Cisco Openssl