CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-5081 CRITICAL · 9.8 ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to obtain access via a TELNET session. Zmodo
- CVE-2016-6365 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or… Cisco
- CVE-2016-6364 HIGH · 7.5 The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information… Cisco
- CVE-2016-6355 HIGH · 7.5 Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause… Cisco
- CVE-2016-1484 HIGH · 7.5 Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724. Cisco
- CVE-2016-1477 MEDIUM · 6.5 Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891. Cisco
- CVE-2016-6363 MEDIUM · 6.5 De snelheidsbeperkingsfunctie in de 802.11-protocolimplementatie op Cisco Aironet 1800-, 2800- en 3800-apparaten met softwareversies ouder dan 8.2.121.0 en 8.3.x-versies ouder dan 8.3.102.0 stelt externe aanvallers… Cisco
- CVE-2016-6362 HIGH · 7.8 Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via… Cisco
- CVE-2016-6361 MEDIUM · 6.5 The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows… Cisco
- CVE-2016-6359 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web… Cisco
- CVE-2016-5817 CRITICAL · 9.8 SQL-injectiekwetsbaarheid in nieuwspagina's in Cargotec Navis WebAccess vóór 2016-08-10 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren. Navis
- CVE-2016-4377 HIGH · 8.1 HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before… Hp
- CVE-2016-4376 MEDIUM · 6.5 HPE FOS before 7.4.1d and 8.x before 8.0.1 on StoreFabric B switches allows remote attackers to obtain sensitive information via unspecified vectors. Broadcom Hp
- CVE-2016-1485 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug… Cisco
- CVE-2016-1479 HIGH · 7.5 Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka… Cisco
- CVE-2016-1476 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via… Cisco
- CVE-2016-0915 HIGH · 8.1 The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial… Emc
- CVE-2016-6493 CRITICAL · 9.8 Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via… Citrix
- CVE-2016-6320 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface… Theforeman
- CVE-2016-6319 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary… Theforeman
- CVE-2016-6254 CRITICAL · 9.1 Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of… Debian Collectd Fedoraproject
- CVE-2016-5736 HIGH · 7.5 The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before… F5
- CVE-2016-5390 MEDIUM · 5.3 Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via… Theforeman
- CVE-2016-4995 MEDIUM · 5.3 Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view… Theforeman
- CVE-2016-4475 HIGH · 8.8 The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and… Theforeman
- CVE-2016-4451 MEDIUM · 5.0 The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization… Theforeman
- CVE-2016-3195 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in de Web-UI in Fortinet FortiManager 5.x vóór 5.0.12 en 5.2.x vóór 5.2.6 en FortiAnalyzer 5.x vóór 5.0.13 en 5.2.x vóór… Fortinet
- CVE-2016-3194 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and… Fortinet
- CVE-2016-3193 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before… Fortinet
- CVE-2016-3089 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the… Apache
- CVE-2016-0760 HIGH · 8.8 Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via the (1) reflect, (2) reflect2, or (3)… Apache
- CVE-2015-8949 CRITICAL · 9.8 Use-after-free kwetsbaarheid in de my_login-functie in DBD::mysql before 4.033_01 stelt aanvallers in staat om niet-gespecificeerde impact te hebben door gebruik te maken van een oproep… Dbd-mysql Project Debian
- CVE-2015-8022 HIGH · 7.5 The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before… F5
- CVE-2014-9906 CRITICAL · 9.8 Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to… Debian Dbd-mysql Project
- CVE-2016-4654 HIGH · 7.8 IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via… Apple
- CVE-2016-1458 HIGH · 8.8 The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance… Cisco
- CVE-2016-1457 HIGH · 8.8 The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on… Cisco
- CVE-2016-1365 HIGH · 8.8 The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via… Cisco
- CVE-2016-5847 MEDIUM · 5.8 SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from… Sap
- CVE-2016-5845 MEDIUM · 5.5 SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program… Sap
- CVE-2016-5384 HIGH · 7.8 fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary… Fedoraproject Fontconfig Project Debian Canonical
- CVE-2016-6214 MEDIUM · 6.5 gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA… Libgd Debian Opensuse
- CVE-2016-6207 MEDIUM · 6.5 Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service… Libgd Debian Opensuse Php
- CVE-2016-6161 MEDIUM · 6.5 Met de uitvoerfunctie in gd_gif_out.c in de GD Graphics Library (ook bekend als libgd) kunnen externe aanvallers een denial of service (buiten het bereik lezen)… Libgd Debian Opensuse
- CVE-2016-6132 MEDIUM · 6.5 The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a… Libgd Debian Opensuse
- CVE-2016-6597 HIGH · 8.6 Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail… Sophos
- CVE-2016-5421 HIGH · 8.1 Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors. Opensuse Haxx Canonical Debian
- CVE-2016-5420 HIGH · 7.5 curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack… Debian Haxx Opensuse
- CVE-2016-5419 HIGH · 7.5 curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions… Haxx Debian Opensuse
- CVE-2016-5408 CRITICAL · 9.8 Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to… Oracle Redhat