CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1607 HIGH · 7.2 Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication… Novell
- CVE-2016-1605 MEDIUM · 6.5 Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a… Netiq
- CVE-2016-1461 HIGH · 7.5 Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message,… Cisco
- CVE-2016-5005 MEDIUM · 4.8 Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter… Apache
- CVE-2016-4469 HIGH · 8.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1)… Apache
- CVE-2016-4531 HIGH · 7.3 Rockwell Automation FactoryTalk EnergyMetrix vóór 2.20.00 maakt de inloggegevens niet ongeldig bij een uitlogactie, wat het voor externe aanvallers gemakkelijker maakt om toegang te krijgen… Rockwellautomation
- CVE-2016-4522 CRITICAL · 9.8 SQL-injectiekwetsbaarheid in Rockwell Automation FactoryTalk EnergyMetrix vóór 2.20.00 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren. Rockwellautomation
- CVE-2016-1467 MEDIUM · 6.5 Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) by sending a traffic flood to upstream devices,… Cisco
- CVE-2016-1465 MEDIUM · 6.5 Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen)… Cisco
- CVE-2016-1463 HIGH · 7.5 Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an… Cisco
- CVE-2016-1462 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de webgebaseerde beheerinterface in Cisco Prime Service Catalog (PSC) 11.0 stelt externe aanvallers in staat om willekeurig webscript of HTML… Cisco
- CVE-2016-1460 MEDIUM · 6.5 Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug… Cisco
- CVE-2016-1374 HIGH · 8.8 The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters… Cisco
- CVE-2016-3992 MEDIUM · 6.2 cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1) cronic.out.$$, (2) cronic.err.$$, or (3) cronic.trace.$$ file… Cronic Project Debian Opensuse
- CVE-2015-5738 HIGH · 7.5 De RSA-CRT-implementatie in de Cavium Software Development Kit (SDK) 2.x, bij gebruik op OCTEON II CN6xxx-hardware op Linux om TLS te ondersteunen met Perfect Forward… Marvell F5
- CVE-2016-6152 HIGH · 8.8 CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors. Broadcom Ca
- CVE-2016-6151 HIGH · 8.8 CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors. Ca
- CVE-2016-6297 HIGH · 8.8 Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a… Php
- CVE-2016-6296 CRITICAL · 9.8 Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before… Php
- CVE-2016-6295 CRITICAL · 9.8 ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers… Php
- CVE-2016-6294 CRITICAL · 9.8 The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP… Php
- CVE-2016-6293 CRITICAL · 9.8 The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '' character at… Icu-project
- CVE-2016-6292 MEDIUM · 6.5 The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service… Php
- CVE-2016-6291 CRITICAL · 9.8 The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service… Php
- CVE-2016-6290 CRITICAL · 9.8 ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers… Php
- CVE-2016-6289 HIGH · 7.8 Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a… Php
- CVE-2016-6288 CRITICAL · 9.8 Met de php_url_parse_ex-functie in ext/standard/url.c in PHP vóór 5.5.38 kunnen externe aanvallers een denial of service (buffer over-read) veroorzaken of mogelijk een niet-gespecificeerde andere impact… Php
- CVE-2016-5137 MEDIUM · 4.3 The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http… Google
- CVE-2016-5136 HIGH · 8.8 Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have… Google
- CVE-2016-5135 MEDIUM · 6.5 WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows… Google
- CVE-2016-5134 HIGH · 8.8 net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and… Google
- CVE-2016-5133 MEDIUM · 5.3 Google Chrome vóór 52.0.2743.82 misbruikt oorsprongsinformatie tijdens proxy-authenticatie, waardoor man-in-the-middle-aanvallers een proxy-authenticatie-aanmeldprompt kunnen vervalsen of onjuiste inloggegevensopslag kunnen activeren door de gegevensstroom van de client-server… Google
- CVE-2016-5132 HIGH · 8.8 The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe,… Google
- CVE-2016-5131 HIGH · 8.8 Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have… Google Xmlsoft Apple Canonical
- CVE-2016-5130 MEDIUM · 6.5 content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL… Google
- CVE-2016-5129 HIGH · 8.8 Google V8 vóór 5.2.361.32, zoals gebruikt in Google Chrome vóór 52.0.2743.82, verwerkt links getrimde objecten niet correct, waardoor externe aanvallers een denial of service (geheugenbeschadiging)… Google
- CVE-2016-5128 HIGH · 8.8 objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting… Google
- CVE-2016-5127 HIGH · 7.5 Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have… Google
- CVE-2016-1711 HIGH · 8.8 WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows… Google
- CVE-2016-1710 HIGH · 8.8 The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows… Google
- CVE-2016-1709 HIGH · 8.8 Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to… Google
- CVE-2016-1708 HIGH · 8.8 De implementatie van inline-installatie via de Chrome Web Store in het extensiesubsysteem van Google Chrome vóór versie 52.0.2743.82 houdt geen rekening met de levensduur van… Google
- CVE-2016-1707 MEDIUM · 6.5 ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers… Google
- CVE-2016-1706 CRITICAL · 9.6 The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come… Google
- CVE-2016-1705 HIGH · 8.8 Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google
- CVE-2016-6204 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script… Siemens
- CVE-2016-5874 HIGH · 7.5 Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outage) via crafted TCP packets. Siemens
- CVE-2016-5744 HIGH · 7.5 Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets. Siemens
- CVE-2016-5743 CRITICAL · 9.8 Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7… Siemens
- CVE-2016-6224 LOW · 3.3 ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC… Ecryptfs Canonical