CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3835 MEDIUM · 5.5 The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01… Google
- CVE-2016-3834 MEDIUM · 5.5 The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access restrictions… Google
- CVE-2016-3833 HIGH · 7.8 De Shell-component in Android 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-08-01 beheert de machtigingen MANAGE_USERS en CREATE_USERS niet goed, waardoor aanvallers de… Google
- CVE-2016-3832 HIGH · 7.8 The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated… Google
- CVE-2016-3831 HIGH · 7.5 The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial… Google
- CVE-2016-3830 MEDIUM · 5.5 codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause… Google
- CVE-2016-3829 MEDIUM · 5.5 The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of… Google
- CVE-2016-3828 MEDIUM · 5.5 decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service… Google
- CVE-2016-3827 MEDIUM · 5.5 codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang… Google
- CVE-2016-3826 HIGH · 7.8 services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the reply size for… Google
- CVE-2016-3825 HIGH · 7.8 mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates an incorrect amount of memory, which allows attackers to… Google
- CVE-2016-3824 HIGH · 7.8 omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer… Google
- CVE-2016-3823 HIGH · 7.8 The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01… Google
- CVE-2016-3822 HIGH · 7.8 exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01,… Google Debian
- CVE-2016-3821 CRITICAL · 9.8 libmedia in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-08-01 heeft bepaalde onjuiste verklaringen, waardoor aanvallers op… Google
- CVE-2016-3820 CRITICAL · 9.8 The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial… Google
- CVE-2016-3819 CRITICAL · 9.8 Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x voor 4.4.4, 5.0.x voor 5.0.2, 5.1.x voor 5.1.1 en 6.x voor 2016-08-01 stelt externe… Google
- CVE-2016-2504 HIGH · 7.8 The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a… Google
- CVE-2016-2497 HIGH · 7.3 services/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to increase intent-filter… Google
- CVE-2014-9902 CRITICAL · 9.8 Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code… Google
- CVE-2014-9901 HIGH · 7.5 The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices makes incorrect snprintf calls, which allows remote attackers to cause a denial… Google
- CVE-2016-6186 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to… Debian Djangoproject
- CVE-2016-5392 MEDIUM · 6.5 The API server in Kubernetes, as used in Red Hat OpenShift Enterprise 3.2, in a multi tenant environment allows remote authenticated users with knowledge of… Redhat
- CVE-2016-4999 CRITICAL · 9.8 SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set… Redhat
- CVE-2016-1278 HIGH · 7.8 Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed… Juniper
- CVE-2016-1276 MEDIUM · 5.9 Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more… Juniper
- CVE-2016-0782 MEDIUM · 5.4 The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting… Apache
- CVE-2015-8945 MEDIUM · 5.1 openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local… Openshift
- CVE-2016-6150 CRITICAL · 9.8 The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly have… Sap
- CVE-2016-6149 MEDIUM · 5.5 SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941. Sap
- CVE-2016-6148 HIGH · 7.5 SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT… Sap
- CVE-2016-6147 CRITICAL · 9.8 An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP… Sap
- CVE-2016-6145 MEDIUM · 5.3 The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked… Sap
- CVE-2016-6144 HIGH · 8.1 The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the password_lock_for_system_user is… Sap
- CVE-2016-6140 CRITICAL · 9.8 SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591. Sap
- CVE-2016-6139 CRITICAL · 9.8 SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591. Sap
- CVE-2016-6138 CRITICAL · 9.8 Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591. Sap
- CVE-2016-5000 MEDIUM · 5.5 The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration… Apache
- CVE-2016-3640 MEDIUM · 5.5 The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related… Sap
- CVE-2016-3196 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote… Fortinet
- CVE-2016-3097 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name,… Redhat
- CVE-2016-3080 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the (1) RHNMD… Redhat
- CVE-2016-1513 HIGH · 7.8 The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) or execute arbitrary… Apache
- CVE-2016-5268 MEDIUM · 4.3 Mozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT flags of about: URLs that are used for error pages, which makes it… Mozilla
- CVE-2016-5267 MEDIUM · 5.3 Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set. Mozilla Google
- CVE-2016-5266 HIGH · 8.1 Mozilla Firefox vóór 48.0 beperkt niet correct slepen en neerzetten (ook bekend als dataTransfer) -acties voor file: URI's, waarmee door de gebruiker ondersteunde externe aanvallers… Mozilla
- CVE-2016-5265 MEDIUM · 5.5 Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS)… Oracle Mozilla
- CVE-2016-5264 HIGH · 8.8 Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or… Mozilla Oracle
- CVE-2016-5263 HIGH · 8.8 The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary… Mozilla Oracle
- CVE-2016-5262 MEDIUM · 6.1 Mozilla Firefox vóór 48.0 en Firefox ESR 45.x vóór 45.3 verwerken JavaScript event-handler attributen van een selectiekaderelement binnen een sandboxed IFRAME-ELEMENT dat de attribuutwaarde sandbox="allow-scripts"… Mozilla Oracle