CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3440 HIGH · 7.7 Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer. Oracle
- CVE-2016-3433 MEDIUM · 5.4 Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and… Oracle
- CVE-2016-3432 MEDIUM · 5.4 Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and… Oracle
- CVE-2016-3424 MEDIUM · 4.9 Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer. Oracle
- CVE-2016-0635 HIGH · 8.8 Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager… Oracle
- CVE-2016-5655 MEDIUM · 5.9 Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate. Misys
- CVE-2016-5654 HIGH · 7.5 Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter. Misys
- CVE-2016-5653 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch… Misys
- CVE-2016-5080 CRITICAL · 9.8 Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause… Objective Systems
- CVE-2016-2775 MEDIUM · 5.9 ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to… Hp Isc Fedoraproject Redhat
- CVE-2015-8947 HIGH · 7.6 hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data,… Harfbuzz Project
- CVE-2016-5388 HIGH · 8.1 Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect… Redhat Hp Oracle Apache
- CVE-2016-5387 HIGH · 8.1 The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in… Apache Hp Oracle Fedoraproject
- CVE-2016-5386 HIGH · 8.1 Het net/http-pakket in Go through 1.6 probeert geen RFC 3875 sectie 4.1.18 naamruimteconflicten aan te pakken en beschermt daarom CGI-toepassingen niet tegen de aanwezigheid van… Fedoraproject Oracle Redhat Golang
- CVE-2016-5385 HIGH · 8.1 PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted… Oracle Fedoraproject Hp Php
- CVE-2016-3039 HIGH · 8.1 IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML… Ibm
- CVE-2016-1459 MEDIUM · 5.3 Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload)… Cisco
- CVE-2016-1448 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuy92706. Cisco
- CVE-2016-0393 MEDIUM · 5.3 IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files. Ibm
- CVE-2016-0321 MEDIUM · 6.2 IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords… Ibm
- CVE-2016-5661 HIGH · 8.8 Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code… Accela
- CVE-2016-5660 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Accela
- CVE-2016-5637 HIGH · 8.8 The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of… Libbpg Project
- CVE-2016-2865 MEDIUM · 6.5 The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x… Ibm
- CVE-2016-0357 MEDIUM · 4.3 IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site. Ibm
- CVE-2016-0340 HIGH · 7.4 IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 tot en met 7.0.1.1 vóór 7.0.1-ISS-SIM-FP0003 misbruikt het verlopen van de sessie, waardoor externe aanvallers sessies kunnen… Ibm
- CVE-2016-0339 MEDIUM · 5.6 IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 tot en met 7.0.1.1 vóór 7.0.1-ISS-SIM-FP0003 misbruikt sessie-ID's na het uitloggen, waardoor het voor externe aanvallers gemakkelijker… Ibm
- CVE-2016-0338 MEDIUM · 6.2 IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file… Ibm
- CVE-2016-0330 HIGH · 7.3 IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access… Ibm
- CVE-2016-0269 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.2.7 allows remote authenticated users to inject arbitrary web script or… Ibm
- CVE-2015-1977 HIGH · 7.5 Directory traversal kwetsbaarheid in de Web Administration tool in IBM Tivoli Directory Server (ITDS) voor 6.1.0.74-ISS-ISDS-IF0074, 6.2.x voor 6.2.0.50-ISS-ISDS-IF0050, en 6.3.x voor 6.3.0.43-ISS-ISDS-IF0043 en IBM… Ibm
- CVE-2016-5807 HIGH · 8.1 Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a… Tollgrade
- CVE-2016-5804 CRITICAL · 9.8 Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption,… Moxa
- CVE-2016-5797 MEDIUM · 5.3 Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers… Tollgrade
- CVE-2016-5790 HIGH · 7.5 Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors. Enghousenetworks
- CVE-2016-5787 MEDIUM · 6.3 General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via… Ge
- CVE-2016-4529 HIGH · 7.3 An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown… Schneider-electric
- CVE-2016-4520 CRITICAL · 9.8 Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute… Schneider-electric
- CVE-2016-4372 CRITICAL · 9.8 HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2… Hp
- CVE-2016-1456 HIGH · 7.8 The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container… Cisco
- CVE-2016-1452 MEDIUM · 6.5 Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community,… Cisco
- CVE-2016-1451 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9 allows remote attackers to inject… Cisco
- CVE-2016-1450 HIGH · 7.5 Cisco WebEx Meetings Server 2.6 stelt geverifieerde gebruikers op afstand in staat om commando-injectie-aanvallen uit te voeren via vectoren die verband houden met het bestandstype… Cisco
- CVE-2016-1449 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka… Cisco
- CVE-2016-1447 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-1446 HIGH · 8.8 SQL-injectiekwetsbaarheid in Cisco WebEx Meetings Server 2.6 stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren, ook bekend… Cisco
- CVE-2016-1426 HIGH · 7.5 Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service (timer consumption and Route Processor reload)… Cisco
- CVE-2016-5821 HIGH · 7.8 Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTINUsers) for the HiSuite service directory, which allows… Huawei
- CVE-2016-5109 MEDIUM · 4.3 Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch… Citrix
- CVE-2016-5092 MEDIUM · 4.9 Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn… Fortinet