CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-4828 MEDIUM · 6.5 The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address… Welcart
- CVE-2016-4827 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Welcart
- CVE-2016-4826 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Welcart
- CVE-2016-4825 MEDIUM · 5.6 Met de Collne Welcart e-Commerce-plug-in vóór 1.8.3 voor WordPress kunnen aanvallers op afstand PHP-objectinjectieaanvallen uitvoeren en willekeurige PHP-code uitvoeren via vervaardigde geserialiseerde gegevens. Welcart
- CVE-2016-4824 MEDIUM · 5.3 The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier… Corega
- CVE-2016-4823 HIGH · 7.5 Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors. Corega
- CVE-2016-4822 HIGH · 8.0 Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors. Corega
- CVE-2016-1193 HIGH · 7.5 Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors. Cybozu
- CVE-2016-1190 MEDIUM · 6.5 Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors. Cybozu
- CVE-2016-1189 HIGH · 8.1 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors. Cybozu
- CVE-2016-1188 MEDIUM · 6.5 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors. Cybozu
- CVE-2016-4528 MEDIUM · 5.0 Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file. Advantech
- CVE-2016-4525 MEDIUM · 6.6 Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the… Advantech
- CVE-2016-4519 CRITICAL · 9.8 Op stapels gebaseerde bufferoverloop in Unitronics VisiLogic OPLC IDE vóór 9.8.30 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd… Unitronics
- CVE-2016-5723 HIGH · 7.8 Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors. Huawei
- CVE-2016-5722 HIGH · 7.3 Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in… Huawei
- CVE-2016-5709 MEDIUM · 4.7 SolarWinds Virtualization Manager 6.3.1 en eerder maakt gebruik van zwakke codering om wachtwoorden op te slaan in /etc/shadow, waardoor lokale gebruikers met superuser-privileges gebruikerswachtwoorden kunnen… Solarwinds
- CVE-2016-5435 MEDIUM · 5.9 Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby… Huawei
- CVE-2016-5021 MEDIUM · 4.9 The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x… F5
- CVE-2016-4802 HIGH · 7.8 Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrary… Haxx
- CVE-2016-1439 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or… Cisco
- CVE-2016-1438 HIGH · 7.5 Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive,… Cisco
- CVE-2016-1437 MEDIUM · 6.5 SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a… Cisco
- CVE-2016-1436 HIGH · 7.5 The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers… Cisco
- CVE-2016-1435 HIGH · 7.0 Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access,… Cisco
- CVE-2016-1434 MEDIUM · 6.5 The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug… Cisco
- CVE-2016-1428 MEDIUM · 6.5 Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a… Cisco
- CVE-2016-0914 MEDIUM · 6.3 EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch… Emc
- CVE-2015-6289 HIGH · 7.5 Cisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote attackers to cause a denial of service (memory consumption) via… Cisco
- CVE-2016-2364 HIGH · 7.5 The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which… Fonality
- CVE-2016-2363 HIGH · 7.8 Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for… Fonality
- CVE-2016-2362 CRITICAL · 9.8 Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via… Fonality
- CVE-2016-2178 MEDIUM · 5.5 The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users… Openssl Oracle Suse Nodejs
- CVE-2016-2177 CRITICAL · 9.8 OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and… Hp Openssl Oracle
- CVE-2015-8289 HIGH · 7.5 The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext… Netgear
- CVE-2015-8288 MEDIUM · 5.9 NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which… Netgear
- CVE-2016-4811 MEDIUM · 5.6 The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API… Ntt-bp
- CVE-2016-4530 MEDIUM · 6.5 OSIsoft PI SQL Data Access Server (ook bekend als Ole DB) 2016 1.5 stelt op afstand geverifieerde gebruikers in staat om een denial of service… Osisoft
- CVE-2016-4518 MEDIUM · 6.5 OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message. Osisoft
- CVE-2016-4514 HIGH · 7.7 Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. Moxa
- CVE-2016-1864 MEDIUM · 4.3 The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which… Apple
- CVE-2016-1862 LOW · 3.3 Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than… Apple
- CVE-2016-1861 HIGH · 7.8 The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial… Apple
- CVE-2016-1860 LOW · 3.3 Intel Graphics Driver in Apple OS X vóór 10.11.5 stelt aanvallers in staat om gevoelige kernelgeheugen-layout-informatie te verkrijgen via een vervaardigde app, een ander beveiligingslek… Apple
- CVE-2016-1196 MEDIUM · 4.3 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API… Cybozu
- CVE-2016-1192 MEDIUM · 4.3 Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors. Cybozu
- CVE-2016-1191 MEDIUM · 5.3 Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors. Cybozu
- CVE-2016-0912 CRITICAL · 9.8 Met EMC Data Domain OS 5.4 tot en met 5.7 vóór 5.7.2.0 kunnen op afstand geverifieerde gebruikers de beoogde beperkingen voor het wijzigen van wachtwoorden… Dell
- CVE-2016-0911 HIGH · 8.2 EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to… Dell
- CVE-2016-0392 HIGH · 8.4 IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x… Ibm