CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1398 MEDIUM · 6.5 Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with… Cisco
- CVE-2016-1337 HIGH · 8.1 Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related… Cisco
- CVE-2016-1336 HIGH · 7.5 goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long LanguageSelect parameter, related to a "Gateway… Cisco
- CVE-2016-1328 HIGH · 7.5 goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related to a "Gateway… Cisco
- CVE-2016-0359 MEDIUM · 6.1 CRLF-injectiekwetsbaarheid in IBM WebSphere Application Server (WAS) 7.0 vóór 7.0.0.43, 8.0 vóór 8.0.0.13, 8.5 Full vóór 8.5.5.10 en 8.5 Liberty vóór Liberty Fix Pack 16.0.0.2… Ibm
- CVE-2016-0346 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19… Ibm
- CVE-2016-0221 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2… Ibm
- CVE-2016-4512 HIGH · 7.3 Op stapels gebaseerde bufferoverloop in ELCSimulator in Eaton ELCSoft 2.4.01 en eerder stelt externe aanvallers in staat om willekeurige code uit te voeren via een… Eaton
- CVE-2016-4509 MEDIUM · 6.0 Een bufferoverloopfout in elcsoft.exe in Eaton ELCSoft 2.4.01 en eerdere versies maakt het voor externe geauthenticeerde gebruikers mogelijk om willekeurige code uit te voeren via… Eaton
- CVE-2016-3989 HIGH · 8.1 The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire… Meinberg
- CVE-2016-3988 HIGH · 7.3 Meerdere stackgebaseerde bufferoverlopen in de NTP-tijdserverinterface op Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME… Meinberg
- CVE-2016-3962 HIGH · 7.3 Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME… Meinberg
- CVE-2016-1228 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa… Ntt-west Ntt-east
- CVE-2016-1227 HIGH · 7.2 NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and… Ntt-east Ntt-west
- CVE-2015-5664 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Qnap
- CVE-2016-5739 HIGH · 7.5 The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection… Opensuse Phpmyadmin
- CVE-2016-5734 CRITICAL · 9.8 phpMyAdmin 4.0.x vóór 4.0.10.16, 4.4.x vóór 4.4.15.7 en 4.6.x vóór 4.6.3 kiest niet de juiste scheidingstekens om het gebruik van de preg_replace e (ook bekend… Phpmyadmin
- CVE-2016-5733 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script… Phpmyadmin Opensuse
- CVE-2016-5732 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject… Phpmyadmin
- CVE-2016-5731 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web… Phpmyadmin Opensuse
- CVE-2016-5730 MEDIUM · 5.3 phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value… Phpmyadmin Opensuse
- CVE-2016-5706 HIGH · 7.5 js/get_scripts.js.php in phpMyAdmin 4.0.x vóór 4.0.10.16, 4.4.x vóór 4.4.15.7 en 4.6.x vóór 4.6.3 kunnen externe aanvallers een denial of service veroorzaken via een grote array… Phpmyadmin Opensuse
- CVE-2016-5705 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via… Opensuse Phpmyadmin
- CVE-2016-5704 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in de tabelstructuurpagina in phpMyAdmin 4.6.x vóór 4.6.3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Phpmyadmin
- CVE-2016-5703 CRITICAL · 9.8 SQL-injectiekwetsbaarheid in bibliotheken/central_columns.lib.php in phpMyAdmin 4.4.x vóór 4.4.15.7 en 4.6.x vóór 4.6.3 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via een… Opensuse Phpmyadmin
- CVE-2016-5702 LOW · 3.7 phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP_SELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI. Phpmyadmin
- CVE-2016-5701 MEDIUM · 6.1 setup/frames/index.inc.php in phpMyAdmin 4.0.10.x before 4.0.10.16, 4.4.15.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to conduct BBCode injection attacks against HTTP sessions via… Phpmyadmin Opensuse
- CVE-2016-5228 CRITICAL · 9.8 Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF… Microfocus
- CVE-2016-2082 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid in VMware vRealize Log Insight 2.x en 3.x vóór 3.3.2 stelt externe aanvallers in staat om de authenticatie van niet-gespecificeerde… Vmware
- CVE-2016-2081 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via… Vmware
- CVE-2016-2079 MEDIUM · 5.9 VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers… Vmware
- CVE-2016-1606 CRITICAL · 9.8 Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1)… Microfocus
- CVE-2016-1441 HIGH · 8.2 Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) in Cisco Configuration Assistant (CCA) stelt externe aanvallers in staat om beoogde beperkingen van bestandssystemen en administratieve endpoints… Cisco
- CVE-2016-1394 HIGH · 8.6 Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password,… Cisco
- CVE-2015-7029 CRITICAL · 9.8 Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a… Apple
- CVE-2015-6931 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote… Vmware
- CVE-2016-4560 HIGH · 7.8 Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a… Flexerasoftware
- CVE-2016-3956 HIGH · 7.5 De CLI in npm vóór 2.15.1 en 3.x vóór 3.8.3, zoals gebruikt in Node.js 0.10 vóór 0.10.44, 0.12 vóór 0.12.13, 4 vóór 4.4.2 en 5… Ibm Nodejs Npmjs
- CVE-2016-2968 MEDIUM · 6.5 IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors. Ibm
- CVE-2016-2961 MEDIUM · 5.3 Met de integratieserver in IBM Integration Bus 9 vóór 9.0.0.6 en 10 vóór 10.0.0.5 en WebSphere Message Broker 8 vóór 8.0.0.8 kunnen externe aanvallers gevoelige… Ibm
- CVE-2016-2883 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject… Ibm
- CVE-2016-2882 MEDIUM · 4.3 IBM TRIRIGA Application Platform 3.3 vóór 3.3.2.6, 3.4 vóór 3.4.2.4 en 3.5 vóór 3.5.0.2 stelt op afstand geverifieerde gebruikers in staat om gevoelige informatie te… Ibm
- CVE-2016-2872 MEDIUM · 5.3 Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files… Ibm
- CVE-2016-2870 LOW · 2.7 Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via… Ibm
- CVE-2016-2868 LOW · 2.7 IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction… Ibm
- CVE-2016-2867 HIGH · 7.0 IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obtain root group… Ibm
- CVE-2016-2861 LOW · 3.7 IBM WebSphere eXtreme Scale 7.1.0 vóór 7.1.0.3, 7.1.1 vóór 7.1.1.1, 8.5 vóór 8.5.0.3 en 8.6 vóór 8.6.0.8 versleutelt gegevens niet goed, waardoor het voor aanvallers… Ibm
- CVE-2016-1440 MEDIUM · 5.3 The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing… Cisco
- CVE-2016-1416 CRITICAL · 9.8 Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka… Cisco
- CVE-2016-1408 HIGH · 8.8 Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload… Cisco