CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0350 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x… Ibm
- CVE-2016-0315 HIGH · 8.8 The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session… Ibm
- CVE-2016-0314 MEDIUM · 6.5 The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote… Ibm
- CVE-2016-0313 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x… Ibm
- CVE-2016-0287 HIGH · 7.8 IBM i Access 7.1 op Windows stelt lokale gebruikers in staat om registerwachtwoorden te ontdekken via niet-gespecificeerde vectoren. Ibm Microsoft
- CVE-2016-0271 HIGH · 8.2 The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS… Ibm
- CVE-2016-0252 MEDIUM · 5.1 IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified… Ibm
- CVE-2016-2119 HIGH · 7.5 libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof… Samba
- CVE-2016-2923 HIGH · 7.5 IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for… Ibm
- CVE-2016-1444 MEDIUM · 6.5 The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which… Cisco
- CVE-2016-1443 HIGH · 8.1 The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote attackers to bypass a sandbox protection mechanism, and consequently obtain… Cisco
- CVE-2016-1442 HIGH · 8.8 The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug… Cisco
- CVE-2016-0389 MEDIUM · 5.3 Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via… Ibm
- CVE-2016-0230 MEDIUM · 6.8 IBM Power Hardware Management Console (HMC) 7.3 tot en met 7.3.0 SP7, 7.9 tot en met 7.9.0 SP3, 8.1 tot en met 8.1.0 SP3, 8.2… Ibm
- CVE-2016-6170 MEDIUM · 6.5 ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash)… Isc Redhat
- CVE-2016-4979 HIGH · 7.5 The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization,… Apache
- CVE-2016-4508 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Bosch
- CVE-2016-4507 MEDIUM · 6.4 SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Bosch
- CVE-2016-1546 MEDIUM · 5.9 The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection,… Apache
- CVE-2016-0906 HIGH · 8.8 The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated… Emc
- CVE-2016-5099 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in phpMyAdmin 4.4.x vóór 4.4.15.6 en 4.6.x vóór 4.6.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Phpmyadmin Opensuse
- CVE-2016-5098 MEDIUM · 5.3 Directory traversal kwetsbaarheid in bibliotheken/error_report.lib.php in phpMyAdmin vóór 4.6.2-prerelease stelt externe aanvallers in staat om het bestaan van willekeurige bestanden te bepalen door een fout… Phpmyadmin Opensuse
- CVE-2016-5097 MEDIUM · 5.3 phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to… Opensuse Phpmyadmin
- CVE-2016-4957 HIGH · 7.5 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because… Ntp Oracle Suse Novell
- CVE-2016-4956 MEDIUM · 5.3 ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.… Ntp Oracle Suse Novell
- CVE-2016-4955 MEDIUM · 5.9 ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by… Ntp Oracle Suse Novell
- CVE-2016-4954 HIGH · 7.5 The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending… Ntp Oracle Suse Opensuse
- CVE-2016-4953 HIGH · 7.5 ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect… Ntp Oracle Suse Opensuse
- CVE-2016-4465 MEDIUM · 5.3 The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a… Apache
- CVE-2016-4438 CRITICAL · 9.8 The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression. Apache
- CVE-2016-4433 HIGH · 7.5 Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request. Apache
- CVE-2016-4431 HIGH · 7.5 Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default method. Apache
- CVE-2016-4430 HIGH · 8.8 Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors. Apache
- CVE-2016-3092 HIGH · 7.5 The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x… Hp Apache Debian Canonical
- CVE-2016-1182 HIGH · 8.2 ActionServlet.java in Apache Struts 1 1.x tot en met 1.3.10 beperkt de Validator-configuratie niet goed, waardoor externe aanvallers cross-site scripting (XSS) -aanvallen kunnen uitvoeren of… Apache
- CVE-2016-1181 HIGH · 8.1 ActionServlet.java in Apache Struts 1.x tot en met 1.3.10 behandelt de toegang tot een ActionForm-instantie via meerdere threads onjuist, waardoor externe aanvallers willekeurige code kunnen… Oracle Apache
- CVE-2015-0899 HIGH · 7.5 The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter. Apache
- CVE-2016-5849 LOW · 2.5 Siemens SICAM PAS t/m 8.07 stelt lokale gebruikers in staat om gevoelige configuratie-informatie te verkrijgen door gebruik te maken van databaseonderbreking. Siemens
- CVE-2016-5848 MEDIUM · 6.7 Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by… Siemens
- CVE-2016-0899 MEDIUM · 6.3 Met EMC RSA Archer GRC 5.5.x vóór 5.5.3.4 kunnen op afstand geverifieerde gebruikers het bestand web.config.bak lezen en gevoelige inloggegevens verkrijgen door de IIS-configuratie te… Emc
- CVE-2016-6130 MEDIUM · 4.7 Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from kernel memory by… Debian Linux
- CVE-2016-4998 HIGH · 7.1 The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read)… Linux Oracle Canonical
- CVE-2016-4997 HIGH · 7.8 The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause… Linux Canonical Novell Oracle
- CVE-2016-3955 CRITICAL · 9.8 The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have… Canonical Linux Debian
- CVE-2016-2894 LOW · 2.5 IBM Spectrum Protect (voorheen Tivoli Storage Manager) 5.5 tot 6.3 vóór 6.3.2.6, 6.4 vóór 6.4.3.3 en 7.1 vóór 7.1.6 stelt lokale gebruikers in staat om… Ibm
- CVE-2016-2863 HIGH · 8.0 Cross-site request forgery (CSRF) -kwetsbaarheid in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x vóór 8.0.0.10 en 8.0.1.x vóór 8.0.1.2 stelt op afstand geverifieerde gebruikers… Ibm
- CVE-2016-2862 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in IBM WebSphere Commerce 6.0 tot en met 6.0.0.11, 7.0 vóór 7.0.0.9 cumulatieve iFix 3 en 8.0 vóór 8.0.0.5 stelt externe… Ibm
- CVE-2016-2074 CRITICAL · 9.8 Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code… Openvswitch Redhat
- CVE-2016-1704 HIGH · 8.8 Meerdere niet-gespecificeerde kwetsbaarheden in Google Chrome vóór 51.0.2704.103 stellen aanvallers in staat om een denial of service te veroorzaken of mogelijk andere impact te hebben… Google Canonical Redhat Novell
- CVE-2016-1425 MEDIUM · 6.5 Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka… Cisco