CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-7458 LOW · 3.3 linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file. Redislabs Debian
- CVE-2016-3329 MEDIUM · 5.3 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information… Microsoft
- CVE-2016-3327 MEDIUM · 5.3 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure… Microsoft
- CVE-2016-3326 MEDIUM · 5.3 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure… Microsoft
- CVE-2016-3322 HIGH · 7.5 Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a… Microsoft
- CVE-2016-3321 LOW · 2.5 Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local… Microsoft
- CVE-2016-3320 MEDIUM · 4.9 Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot… Microsoft Fedoraproject
- CVE-2016-3319 HIGH · 7.0 De PDF-bibliotheek in Microsoft Windows 8.1, Windows Server 2012 Gold en R2, Windows 10 Gold en 1511, en Microsoft Edge stelt externe aanvallers in staat… Microsoft
- CVE-2016-3318 HIGH · 7.8 Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Graphics… Microsoft
- CVE-2016-3317 HIGH · 7.8 Met Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word voor Mac 2011, Word 2016 voor Mac en Word Viewer kunnen externe aanvallers… Microsoft
- CVE-2016-3316 HIGH · 7.8 Met Microsoft Word 2013 SP1, 2013 RT SP1, 2016 en 2016 voor Mac kunnen aanvallers op afstand willekeurige code uitvoeren via een vervaardigd bestand, ook… Microsoft
- CVE-2016-3315 MEDIUM · 5.5 Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a… Microsoft
- CVE-2016-3313 HIGH · 7.8 Met Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1 en 2016, Word 2016 voor Mac en Word Viewer kunnen externe aanvallers willekeurige… Microsoft
- CVE-2016-3312 CRITICAL · 9.1 ActiveSyncProvider in Microsoft Windows 10 Gold en 1511 stelt aanvallers in staat om inloggegevens te ontdekken door gebruik te maken van het falen van Universal… Microsoft
- CVE-2016-3311 HIGH · 7.8 De kernelmodusstuurprogramma's in Microsoft Windows Vista SP2; Windows Server 2008 SP2 en R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold en R2;… Microsoft
- CVE-2016-3310 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and… Microsoft
- CVE-2016-3308 HIGH · 7.8 De kernelmodusstuurprogramma's in Microsoft Windows Vista SP2; Windows Server 2008 SP2 en R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold en R2;… Microsoft
- CVE-2016-3304 HIGH · 7.8 The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2,… Microsoft
- CVE-2016-3303 HIGH · 7.8 The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2,… Microsoft
- CVE-2016-3301 HIGH · 7.8 The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold… Microsoft
- CVE-2016-3300 HIGH · 7.8 The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, which allows local… Microsoft
- CVE-2016-3299 MEDIUM · 5.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Microsoft
- CVE-2016-3296 HIGH · 7.5 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." Microsoft
- CVE-2016-3293 HIGH · 7.5 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption… Microsoft
- CVE-2016-3290 HIGH · 7.5 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability… Microsoft
- CVE-2016-3289 HIGH · 7.5 Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a… Microsoft
- CVE-2016-3288 HIGH · 7.5 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability… Microsoft
- CVE-2016-3237 HIGH · 7.5 Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows… Microsoft
- CVE-2016-4253 MEDIUM · 5.3 The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecified vectors. Adobe
- CVE-2016-4170 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Adobe Experience Manager 5.6.1, 6.0, 6.1 en 6.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Adobe
- CVE-2016-4169 MEDIUM · 5.3 Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors. Adobe
- CVE-2016-4168 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Adobe
- CVE-2016-5878 MEDIUM · 6.8 Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks… Ibm
- CVE-2016-5331 MEDIUM · 6.1 CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response… Vmware
- CVE-2016-5330 HIGH · 7.8 Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x… Vmware Apple Microsoft
- CVE-2016-3059 MEDIUM · 6.2 IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9… Ibm
- CVE-2016-3054 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file. Ibm
- CVE-2016-2989 MEDIUM · 6.5 Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remote attackers to redirect users to arbitrary web sites… Ibm
- CVE-2016-2960 LOW · 3.7 IBM WebSphere Application Server (WAS) 7.x vóór 7.0.0.43, 8.0.0.x vóór 8.0.0.13, 8.5.0.x vóór 8.5.5.10, 8.5.0.x en 16.0.0.x Liberty vóór Liberty Fix Pack 16.0.0.3, en 9.0.0.x… Ibm
- CVE-2016-2925 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and… Ibm
- CVE-2016-2914 MEDIUM · 5.4 Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary… Ibm
- CVE-2016-2912 MEDIUM · 5.4 Cross-site scripting (XSS) kwetsbaarheid in de Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 voordat ifix002 op afstand geverifieerde gebruikers in staat stelt… Ibm
- CVE-2016-2875 HIGH · 8.8 IBM Security QRadar SIEM 7.1.x en 7.2.x vóór 7.2.7 stelt op afstand geverifieerde gebruikers in staat om willekeurige OS-commando's als root uit te voeren via… Ibm
- CVE-2016-0380 LOW · 3.3 IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to… Ibm
- CVE-2016-0361 MEDIUM · 6.5 IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with… Ibm
- CVE-2016-0281 LOW · 3.7 The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to… Ibm
- CVE-2016-0280 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework… Ibm
- CVE-2016-0266 LOW · 3.7 IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers… Ibm
- CVE-2016-6486 HIGH · 7.8 Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors. Siemens
- CVE-2016-5792 CRITICAL · 9.8 SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields. Moxa