CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1289 CRITICAL · 9.8 The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain… Cisco
- CVE-2016-0400 MEDIUM · 6.1 CRLF-injectiekwetsbaarheid in IBM WebSphere eXtreme Scale 7.1.0 vóór 7.1.0.3, 7.1.1 vóór 7.1.1.1, 8.5 vóór 8.5.0.3 en 8.6 vóór 8.6.0.8 stelt externe aanvallers in staat om… Ibm
- CVE-2016-0399 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users… Ibm
- CVE-2016-0398 MEDIUM · 4.3 IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL. Ibm
- CVE-2016-0391 CRITICAL · 9.8 The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers… Ibm
- CVE-2016-0387 MEDIUM · 5.4 Een XSS-kwetsbaarheid (cross-site scripting) in IBM TRIRIGA Application Platform 3.3 vóór 3.3.2.6, 3.4 vóór 3.4.2.4 en 3.5 vóór 3.5.0.2 stelt externe geauthenticeerde gebruikers in staat… Ibm
- CVE-2016-0386 HIGH · 8.0 Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to… Ibm
- CVE-2016-0375 HIGH · 8.8 JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain administrator privileges for executing… Ibm
- CVE-2016-0374 HIGH · 8.8 The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges… Ibm
- CVE-2016-0365 MEDIUM · 5.9 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass… Ibm
- CVE-2016-0364 MEDIUM · 4.3 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not properly implement a logging-obfuscation feature for secure properties, which allows… Ibm
- CVE-2016-0362 HIGH · 7.7 IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks,… Ibm
- CVE-2016-5307 MEDIUM · 4.3 Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory… Symantec
- CVE-2016-5306 MEDIUM · 5.3 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to… Symantec
- CVE-2016-5305 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary… Symantec
- CVE-2016-5304 MEDIUM · 6.8 Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to… Symantec
- CVE-2016-3653 HIGH · 8.0 Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to hijack… Symantec
- CVE-2016-3652 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary… Symantec
- CVE-2016-3651 HIGH · 8.0 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors. Symantec
- CVE-2016-3650 HIGH · 8.8 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack. Symantec
- CVE-2016-3649 MEDIUM · 4.3 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests. Symantec
- CVE-2016-3648 HIGH · 8.8 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and conduct brute-force password-guessing attacks… Symantec
- CVE-2016-3647 HIGH · 7.7 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network traffic to… Symantec
- CVE-2016-3646 HIGH · 8.4 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection… Symantec
- CVE-2016-3645 CRITICAL · 9.8 Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6… Symantec
- CVE-2016-3644 HIGH · 8.4 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection… Symantec
- CVE-2016-2211 HIGH · 7.8 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection… Symantec Apple Linux
- CVE-2016-2210 HIGH · 7.3 Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec… Symantec Apple Linux
- CVE-2016-2209 HIGH · 7.3 Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec… Symantec Apple Linux
- CVE-2016-2207 HIGH · 8.4 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection… Symantec Apple Linux
- CVE-2015-8801 LOW · 2.9 Raceconditie in de client in Symantec Endpoint Protection (SEP) 12.1 vóór RU6 MP5 stelt lokale gebruikers in staat om beoogde beperkingen op USB-bestandsoverdracht te omzeilen… Symantec
- CVE-2016-5360 HIGH · 7.5 HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service (uninitialized memory access and… Canonical Haproxy
- CVE-2016-5301 HIGH · 7.5 The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly… Opensuse Arvidn
- CVE-2016-5020 HIGH · 8.8 F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via… F5
- CVE-2016-4971 HIGH · 8.8 GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource. Gnu Canonical Oracle Paloaltonetworks
- CVE-2016-4803 HIGH · 7.5 CRLF-injectiekwetsbaarheid in de verzend-e-mailfunctionaliteit in dotCMS vóór 3.3.2 stelt externe aanvallers in staat om willekeurige e-mailheaders via CRLF-sequenties in het onderwerp te injecteren. Dotcms
- CVE-2016-4472 HIGH · 8.1 The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or… Libexpat Project Canonical Mcafee Python
- CVE-2016-4309 HIGH · 7.5 Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter. Getsymphony
- CVE-2016-3189 MEDIUM · 6.5 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block… Bzip Python
- CVE-2015-8899 HIGH · 7.5 Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1)… Canonical Thekelleys
- CVE-2016-5840 HIGH · 7.2 hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81) en 3.8 SP2 (3.82) stelt externe beheerders in staat om willekeurige code uit… Trend Micro
- CVE-2016-5729 HIGH · 8.2 Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode (SMM) privileges via unspecified vectors. Lenovo
- CVE-2016-5368 HIGH · 7.5 Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol… Huawei
- CVE-2016-5249 HIGH · 7.8 Lenovo Solution Center (LSC) vóór 3.3.003 stelt lokale gebruikers in staat om willekeurige code uit te voeren met LocalSystem-privileges via vectoren met betrekking tot de… Lenovo
- CVE-2016-5248 MEDIUM · 5.5 Met de opdracht StopProxy in LSC.Services.SystemService in Lenovo Solution Center vóór 3.3.003 kunnen lokale gebruikers willekeurige processen beëindigen via het PID-argument. Lenovo
- CVE-2016-5232 MEDIUM · 5.5 Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of… Huawei
- CVE-2016-5231 HIGH · 7.8 Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data… Huawei
- CVE-2016-5230 HIGH · 8.8 Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module… Huawei
- CVE-2016-4474 HIGH · 8.8 The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo)… Redhat
- CVE-2016-4086 MEDIUM · 5.3 Huawei HiSuite (In China) vóór 4.0.4.301 en (Buiten China) vóór 4.0.4.204_ove staat aanvallers op afstand toe om willekeurige apps op een verbonden telefoon te installeren… Huawei