CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-4057 MEDIUM · 6.5 Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets. Huawei
- CVE-2016-2141 CRITICAL · 9.8 It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use… Redhat
- CVE-2016-0349 MEDIUM · 6.5 IBM Business Process Manager 8.5.6 tot en met 8.5.6.2 en 8.5.7 vóór 8.5.7.CF201606 stelt externe geauthenticeerde gebruikers in staat om beoogde toegangsbeperkingen te omzeilen en… Ibm
- CVE-2016-0322 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authenticated users to… Ibm
- CVE-2016-5839 HIGH · 7.5 WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors. Wordpress
- CVE-2016-5838 HIGH · 7.5 WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie. Wordpress
- CVE-2016-5837 HIGH · 7.5 WordPress vóór 4.5.3 stelt externe aanvallers in staat om beoogde toegangsbeperkingen te omzeilen en een categoriekenmerk uit een bericht te verwijderen via niet-gespecificeerde vectoren. Wordpress
- CVE-2016-5836 HIGH · 7.5 The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors. Wordpress
- CVE-2016-5835 HIGH · 7.5 WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/revision.php. Wordpress
- CVE-2016-5834 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de wp_get_attachment_link-functie in wp-includes/post-template.php in WordPress vóór 4.5.3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Wordpress
- CVE-2016-5833 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de column_title-functie in wp-admin/includes/class-wp-media-list-table.php in WordPress vóór 4.5.3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Wordpress
- CVE-2016-5832 HIGH · 7.5 Met de customizer in WordPress vóór 4.5.3 kunnen aanvallers op afstand de beoogde omleidingsbeperkingen omzeilen via niet-gespecificeerde vectoren. Wordpress
- CVE-2016-5101 HIGH · 8.8 Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted e-mail message. Opera Microsoft
- CVE-2016-1237 MEDIUM · 5.5 nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and… Linux
- CVE-2012-6703 HIGH · 7.8 Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial… Linux
- CVE-2016-0304 HIGH · 8.1 The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames… Ibm
- CVE-2016-0298 MEDIUM · 6.5 Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL. Ibm
- CVE-2016-0267 HIGH · 7.7 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via (1)… Ibm
- CVE-2016-0263 HIGH · 7.0 IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or… Ibm
- CVE-2016-0260 HIGH · 7.5 Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumption) by… Ibm
- CVE-2015-8699 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before… Broadcom
- CVE-2015-8698 HIGH · 7.1 CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read… Broadcom
- CVE-2016-0233 HIGH · 8.8 SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Ibm
- CVE-2016-0229 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a… Ibm
- CVE-2016-0224 CRITICAL · 9.8 SQL-injectiekwetsbaarheid in IBM Marketing Platform 8.5.x, 8.6.x en 9.x vóór 9.1.2.2 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren. Ibm
- CVE-2016-5829 HIGH · 7.8 Meerdere op heap gebaseerde bufferoverlopen in de functie hiddev_ioctl_usage in drivers/hid/usbhid/hiddev.c in de Linux-kernel tot 4.6.3 stellen lokale gebruikers in staat om een denial of… Debian Linux Novell Canonical
- CVE-2016-5828 HIGH · 7.8 The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial… Linux Novell Debian Canonical
- CVE-2016-5728 MEDIUM · 6.3 Race condition in the vop_ioctl function in drivers/misc/mic/vop/vop_vringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain sensitive… Debian Linux
- CVE-2016-5244 HIGH · 7.5 The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive… Fedoraproject Suse Redhat Linux
- CVE-2016-5243 MEDIUM · 5.5 The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive… Linux
- CVE-2016-4470 MEDIUM · 5.5 The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users… Oracle Linux Novell Redhat
- CVE-2016-4440 HIGH · 7.8 arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the… Linux
- CVE-2016-3949 HIGH · 7.5 Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause… Siemens
- CVE-2016-3713 HIGH · 7.1 The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the… Linux
- CVE-2016-3707 HIGH · 8.1 The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat… Linux Redhat Novell
- CVE-2016-1583 HIGH · 7.8 The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory… Linux Novell Canonical Debian
- CVE-2016-0758 HIGH · 7.8 Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. Redhat Linux Canonical
- CVE-2014-9904 HIGH · 7.8 The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows… Linux Debian Novell
- CVE-2014-9903 MEDIUM · 5.5 The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from… Linux
- CVE-2016-0301 HIGH · 7.8 Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to… Ibm
- CVE-2016-0279 HIGH · 7.8 Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to… Ibm
- CVE-2016-0278 HIGH · 7.8 Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to… Ibm
- CVE-2016-0277 HIGH · 7.8 Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to… Ibm
- CVE-2016-0259 LOW · 2.5 runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display… Ibm
- CVE-2015-7473 LOW · 2.5 runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp. Ibm
- CVE-2016-5087 MEDIUM · 4.4 Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency… Alertus
- CVE-2016-4513 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script… Schneider-electric
- CVE-2016-2901 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de PA_Theme_Creator-applicatie in IBM WebSphere Portal 8.5 CF08 via CF10 en Web Content Manager stelt externe aanvallers in staat… Ibm
- CVE-2015-7988 CRITICAL · 9.8 The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified… Apple
- CVE-2015-7987 CRITICAL · 9.8 Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2)… Apple