CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-5680 HIGH · 8.8 Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code… Nuuo Netgear
- CVE-2016-5679 HIGH · 8.8 cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 t/m 3.0.0 en NETGEAR ReadyNAS Surveillance 1.1.2 stelt op afstand geverifieerde gebruikers in staat om willekeurige opdrachten uit te… Nuuo Netgear
- CVE-2016-5678 CRITICAL · 9.8 NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via… Nuuo
- CVE-2016-5677 HIGH · 7.5 NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the… Netgear Nuuo
- CVE-2016-5676 HIGH · 7.5 cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset… Netgear Nuuo
- CVE-2016-5675 CRITICAL · 9.8 handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1… Netgear Nuuo
- CVE-2016-5674 CRITICAL · 9.8 __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute… Netgear Nuuo
- CVE-2016-7119 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML… Dnnsoftware
- CVE-2016-7118 MEDIUM · 5.5 fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the linux-image package 3.2.0-4 (kernel 3.2.81-1) in Debian wheezy mishandles F_SETFL fcntl calls on directories, which allows local… Debian
- CVE-2016-5336 CRITICAL · 9.8 VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors. Vmware
- CVE-2016-5335 HIGH · 7.8 VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors. Vmware
- CVE-2016-5333 CRITICAL · 9.8 VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access… Vmware
- CVE-2016-5332 MEDIUM · 5.3 Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors. Vmware
- CVE-2016-6195 CRITICAL · 9.8 SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL… Vbulletin
- CVE-2016-7115 CRITICAL · 9.8 Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3 and earlier allows remote TELNET servers to execute arbitrary code via… Mac-telnet Project
- CVE-2016-5344 CRITICAL · 9.8 Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and… Google Linux
- CVE-2016-5342 HIGH · 7.8 Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss/wcnss_wlan.c in the wcnss_wlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center… Google Linux
- CVE-2016-0397 MEDIUM · 5.9 WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP… Ibm
- CVE-2016-0292 MEDIUM · 5.5 WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report. Ibm
- CVE-2016-5721 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Zimbra
- CVE-2015-5399 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in PHPVibe vóór 4.21 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML via een opmerking te injecteren. Phpvibe
- CVE-2016-5683 HIGH · 7.8 ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the… Readydesk
- CVE-2016-5664 MEDIUM · 4.3 Directory traversal-kwetsbaarheid op Accellion Kiteworks-apparaten vóór kw2016.03.00 stelt externe aanvallers in staat om bestanden te lezen via een vervaardigde URI. Accellion
- CVE-2016-5663 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the… Accellion
- CVE-2016-5662 HIGH · 7.8 Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors. Accellion
- CVE-2016-5050 CRITICAL · 9.8 Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file. Readydesk
- CVE-2016-5049 HIGH · 7.5 Directory traversal kwetsbaarheid in chat/openattach.aspx in ReadyDesk 9.1 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (puntpunt) in de SESID-parameter… Readydesk
- CVE-2016-5048 CRITICAL · 9.8 SQL-injectiekwetsbaarheid in chat/staff/default.aspx in ReadyDesk 9.1 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via het veld gebruikersnaam. Readydesk
- CVE-2016-4378 HIGH · 7.5 The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000… Hp
- CVE-2016-4270 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-4269 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-4268 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-4267 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-4266 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-4265 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows… Apple Microsoft Adobe
- CVE-2016-4119 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows… Apple Microsoft Adobe
- CVE-2016-5383 HIGH · 8.8 The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters." Redhat
- CVE-2016-5023 HIGH · 7.5 Virtuele servers in F5 BIG-IP-systemen 11.2.1 HF11 tot en met HF15, 11.4.1 HF4 tot en met HF10, 11.5.3 tot en met 11.5.4, 11.6.0 HF5 tot… F5
- CVE-2016-1497 MEDIUM · 4.9 The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1,… F5
- CVE-2016-6369 HIGH · 7.8 Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file,… Cisco
- CVE-2016-5681 CRITICAL · 9.8 Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1… Dlink D-link
- CVE-2016-5673 HIGH · 7.5 UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a ::… Ultravnc
- CVE-2016-6231 MEDIUM · 5.9 Kaspersky Safe Browser iOS vóór 1.7.0 verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers gevoelige informatie kunnen verkrijgen via een vervaardigd certificaat. Kaspersky
- CVE-2016-4069 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and… Opensuse Roundcube
- CVE-2016-7089 HIGH · 7.8 WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN. Watchguard
- CVE-2016-6909 CRITICAL · 9.8 Bufferoverloop in de Cookie-parser in Fortinet FortiOS 4.x vóór 4.1.11, 4.2.x vóór 4.2.13 en 4.3.x vóór 4.3.9 en FortiSwitch vóór 3.4.3 stelt externe aanvallers in… Fortinet
- CVE-2016-5812 LOW · 3.3 Moxa OnCell G3100V2-apparaten vóór 2.8 en G3111-, G3151-, G3211- en G3251-apparaten vóór 1.7 gebruiken cleartext-wachtwoordopslag, waardoor het voor lokale gebruikers gemakkelijker wordt om gevoelige informatie… Moxa
- CVE-2016-5799 CRITICAL · 9.8 Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier… Moxa
- CVE-2016-5650 HIGH · 7.5 ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by… Zmodo
- CVE-2016-5645 HIGH · 7.3 Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers… Rockwellautomation