CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-4374 HIGH · 7.7 HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain… Hp
- CVE-2016-1478 HIGH · 7.5 Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface… Cisco
- CVE-2016-1474 MEDIUM · 4.3 Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified… Cisco
- CVE-2016-1468 HIGH · 8.8 The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug… Cisco
- CVE-2016-1466 HIGH · 7.5 Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers… Cisco
- CVE-2016-1430 HIGH · 8.8 Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592. Cisco
- CVE-2016-1429 HIGH · 7.5 Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafted HTTP request,… Cisco
- CVE-2015-6397 HIGH · 8.8 Cisco RV110W-, RV130W- en RV215W-apparaten hebben een onjuiste RBAC-configuratie voor het standaardaccount, waarmee op afstand geverifieerde gebruikers root-toegang kunnen verkrijgen via een inlogsessie met dat… Cisco
- CVE-2015-6396 HIGH · 7.8 The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters,… Cisco
- CVE-2016-6515 HIGH · 7.5 The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause… Openbsd Fedoraproject
- CVE-2016-5340 HIGH · 7.8 The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL… Google Linux
- CVE-2016-2065 HIGH · 7.8 sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and… Linux
- CVE-2016-2064 HIGH · 7.8 sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and… Linux
- CVE-2016-2063 HIGH · 7.8 Stack-based buffer overflow in the supply_lm_input_write function in drivers/thermal/supply_lm_core.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center… Linux
- CVE-2015-3854 HIGH · 7.5 packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350. Google
- CVE-2015-0573 CRITICAL · 9.8 drivers/media/platform/msm/broadcast/tsc.c in het TSC-stuurprogramma voor de Linux-kernel 3.x, zoals gebruikt in Qualcomm Innovation Center (QuIC) Android-bijdragen voor MSM-apparaten en andere producten, stelt aanvallers in staat… Linux
- CVE-2015-0568 HIGH · 7.8 Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android… Linux
- CVE-2014-9410 CRITICAL · 9.8 The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM… Linux
- CVE-2016-5146 CRITICAL · 9.8 Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google
- CVE-2016-5145 HIGH · 8.8 Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object… Google
- CVE-2016-5144 CRITICAL · 9.8 Het subsysteem Developer Tools (ook bekend als DevTools) in Blink, zoals gebruikt in Google Chrome vóór 52.0.2743.116, misbruikt de hostnaam van het scriptpad, de remoteBase-parameter… Google
- CVE-2016-5143 CRITICAL · 9.8 The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which… Google
- CVE-2016-5142 CRITICAL · 9.8 De Web Cryptography API (ook bekend als WebCrypto) -implementatie in Blink, zoals gebruikt in Google Chrome vóór 52.0.2743.116, kopieert gegevensbuffers niet correct, waardoor externe aanvallers… Google
- CVE-2016-5141 HIGH · 7.5 Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially… Google
- CVE-2016-5140 CRITICAL · 9.8 Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause… Google
- CVE-2016-5139 HIGH · 7.6 Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause… Google
- CVE-2016-1951 HIGH · 8.6 Meerdere integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) vóór 4.12 stellen externe aanvallers in staat om een denial of service (buffer overflow)… Mozilla
- CVE-2016-6635 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for… Wordpress
- CVE-2016-6634 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified… Wordpress
- CVE-2016-5359 MEDIUM · 5.9 epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer overflow and… Wireshark
- CVE-2016-5358 MEDIUM · 5.9 epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service… Wireshark Oracle
- CVE-2016-5357 MEDIUM · 5.9 wiretap/netscreen.c in de NetScreen-bestandsparser in Wireshark 1.12.x vóór 1.12.12 en 2.x vóór 2.0.4 misbruikt sscanf unsigned-integer-verwerking, waardoor externe aanvallers een denial of service (applicatiecrash) kunnen… Wireshark Oracle
- CVE-2016-5356 MEDIUM · 5.9 wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause… Wireshark
- CVE-2016-5355 MEDIUM · 5.9 wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause… Wireshark
- CVE-2016-5354 MEDIUM · 5.9 Het USB-subsysteem in Wireshark 1.12.x vóór 1.12.12 en 2.x vóór 2.0.4 misbruikt klassetypes, waardoor externe aanvallers een denial of service (applicatiecrash) kunnen veroorzaken via een… Wireshark
- CVE-2016-5353 MEDIUM · 5.9 epan/dissectors/packet-umts_fp.c in de UMTS FP dissector in Wireshark 1.12.x vóór 1.12.12 en 2.x vóór 2.0.4 misbruikt de gereserveerde C/T-waarde, waardoor externe aanvallers een denial of… Wireshark
- CVE-2016-5352 MEDIUM · 5.9 epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service… Wireshark
- CVE-2016-5351 MEDIUM · 5.9 epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers… Wireshark
- CVE-2016-5350 HIGH · 7.5 epan/dissectors/packet-dcerpc-spoolss.c in de SPOOLCOMPONENT in Wireshark 1.12.x vóór 1.12.12 en 2.x vóór 2.0.4 mishandelt onverwachte offsets, waardoor externe aanvallers een denial of service (oneindige lus)… Wireshark
- CVE-2016-4029 HIGH · 8.6 WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended… Wordpress Debian
- CVE-2016-6128 HIGH · 7.5 Met de functie gdImageCropThreshold in gd_crop.c in de GD Graphics Library (aka libgd) vóór 2.2.3, zoals gebruikt in PHP vóór 7.0.9, kunnen externe aanvallers een… Debian Opensuse Libgd Php
- CVE-2016-5773 CRITICAL · 9.8 php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection,… Php
- CVE-2016-5772 CRITICAL · 9.8 Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows… Php Suse Opensuse Debian
- CVE-2016-5771 CRITICAL · 9.8 spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote… Php Opensuse Debian
- CVE-2016-5770 CRITICAL · 9.8 Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause… Php Opensuse Debian
- CVE-2016-5769 CRITICAL · 9.8 Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause… Php
- CVE-2016-5768 CRITICAL · 9.8 Dubbele gratis kwetsbaarheid in de _php_mb_regex_ereg_replace_exec-functie in php_mbregex.c in de mbstring-extensie in PHP vóór 5.5.37, 5.6.x vóór 5.6.23 en 7.x vóór 7.0.8 stelt externe aanvallers… Php
- CVE-2016-5767 HIGH · 8.8 Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before… Libgd Php
- CVE-2016-5766 HIGH · 8.8 Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before… Redhat Freebsd Libgd Php
- CVE-2016-5116 CRITICAL · 9.1 gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information… Libgd Php Opensuse Debian