CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-7776 MEDIUM · 4.3 Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users… Cybozu
- CVE-2015-7462 MEDIUM · 4.4 IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to… Ibm
- CVE-2016-1226 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Trendmicro
- CVE-2016-1225 MEDIUM · 6.5 Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors. Trendmicro
- CVE-2016-1197 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different… Cybozu
- CVE-2016-1195 HIGH · 7.4 Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Cybozu
- CVE-2015-7775 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability… Cybozu
- CVE-2016-4821 MEDIUM · 5.3 I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors. Iodata
- CVE-2016-4820 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid op I-O-GEGEVENSAPPARAAT Met ETX-R-apparaten kunnen externe aanvallers de authenticatie van willekeurige gebruikers kapen. Iodata
- CVE-2016-4819 CRITICAL · 9.8 De printfDx-functie in de Takumi Yamada DX Library voor Borland C++ 3.13f tot en met 3.16b, de DX Library voor Gnu C++ 3.13f tot en… Dx Library Project
- CVE-2016-4817 HIGH · 7.5 lib/http2/connection.c in H2O voor 1.7.3 en 2.x voor 2.0.0-beta5 misbruikt HTTP/2 ontkoppeling, waardoor externe aanvallers een denial of service (use-after-free en applicatiecrash) kunnen veroorzaken of… Dena
- CVE-2016-4816 MEDIUM · 6.5 BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors. Buffalo
- CVE-2016-4815 HIGH · 7.5 Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read… Buffalo
- CVE-2016-4814 HIGH · 7.5 Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan (aka GSI) Old_GSI_Maps before January 2015 on Windows allows remote attackers to read arbitrary… Gsi
- CVE-2016-4813 HIGH · 8.8 NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM_ADMIN account. Netcommons
- CVE-2016-4371 HIGH · 8.0 HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct… Hp
- CVE-2016-1424 MEDIUM · 6.5 Cisco IOS 15.2(1)T1.11 en 15.2(2)TST stelt externe aanvallers in staat om een denial of service (apparaatcrash) te veroorzaken via een vervaardigd LLDP-pakket, ook bekend als… Cisco
- CVE-2016-1397 MEDIUM · 6.5 Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with… Cisco
- CVE-2016-1396 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W… Cisco
- CVE-2016-1395 CRITICAL · 9.8 De webgebaseerde beheerinterface op Cisco RV110W-apparaten met firmware vóór 1.2.1.7, RV130W-apparaten met firmware vóór 1.0.3.16 en RV215W-apparaten met firmware vóór 1.3.0.8 stelt externe aanvallers in… Cisco
- CVE-2016-1224 MEDIUM · 6.1 CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and… Trendmicro
- CVE-2016-1223 MEDIUM · 5.3 Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary… Trendmicro
- CVE-2016-1183 LOW · 3.7 NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to… Nttdata
- CVE-2016-1432 MEDIUM · 6.5 Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service (NULL pointer dereference… Cisco
- CVE-2016-1431 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML… Cisco
- CVE-2016-1427 HIGH · 7.5 The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain… Cisco
- CVE-2016-5433 MEDIUM · 6.1 Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors. Citrix
- CVE-2016-5363 HIGH · 8.2 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause… Openstack
- CVE-2016-5362 HIGH · 8.2 Met de IPTables-firewall in OpenStack Neutron vóór 7.0.4 en 8.0.0 tot 8.1.0 kunnen externe aanvallers een bedoeld beschermingsmechanisme voor DHCP-spoofing omzeilen en bijgevolg een denial… Openstack
- CVE-2016-3642 CRITICAL · 9.8 The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to… Solarwinds
- CVE-2015-8914 CRITICAL · 9.1 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause… Openstack
- CVE-2016-5300 HIGH · 7.5 The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption)… Canonical Debian Libexpat Project Google
- CVE-2016-3687 MEDIUM · 5.3 Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO),… F5
- CVE-2016-3062 HIGH · 8.8 The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or… Libav Ffmpeg Debian Opensuse
- CVE-2016-2841 MEDIUM · 6.0 Met de functie ne2000_receive in de NE2000 Nic emulatie-ondersteuning (hw/net/ne2000.c) in QEMU vóór 2.5.1 kunnen lokale gastbesturingssysteembeheerders een denial of service (oneindige lus en QEMU-procescrash)… Qemu Canonical
- CVE-2016-2538 HIGH · 7.1 Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service… Qemu
- CVE-2016-2392 MEDIUM · 6.5 De is_rndis-functie in de USB Net-apparaatemulator (hw/usb/dev-network.c) in QEMU voor 2.5.1 valideert USB-configuratiedescriptorobjecten niet correct, waardoor lokale gastbesturingssysteembeheerders een denial of service (NULL pointer dereference… Qemu Canonical
- CVE-2016-2391 MEDIUM · 5.0 De ohci_bus_start-functie in de USB OHCI-emulatieondersteuning (hw/usb/hcd-ohci.c) in QEMU stelt lokale gastbesturingssysteembeheerders in staat om een denial of service (NULL pointer dereference en QEMU-procescrash) te… Qemu Canonical Debian
- CVE-2012-6702 MEDIUM · 5.9 Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to… Libexpat Project Canonical Debian Google
- CVE-2016-5361 HIGH · 7.5 programma's/pluto/ikev1.c in libreswan voordat 3.17 opnieuw uitzendt in initiële responstoestanden, waardoor externe aanvallers een denial of service (verkeersversterking) kunnen veroorzaken via een vervalst UDP-pakket. OPMERKING:… Libreswan
- CVE-2016-4167 CRITICAL · 9.8 Adobe DNG Software Development Kit (SDK) before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified… Adobe
- CVE-2016-4166 HIGH · 8.8 Niet-gespecificeerde kwetsbaarheid in Adobe Flash Player 21.0.0.242 en eerder, zoals gebruikt in de Adobe Flash-bibliotheken in Microsoft Internet Explorer 10 en 11 en Microsoft Edge,… Adobe Apple Microsoft Google
- CVE-2016-4165 CRITICAL · 9.8 The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input. Adobe
- CVE-2016-4164 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Adobe Brackets vóór 1.7 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Adobe
- CVE-2016-4163 CRITICAL · 9.8 Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute… Microsoft Adobe Apple Google
- CVE-2016-4162 CRITICAL · 9.8 Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute… Microsoft Adobe Apple Google
- CVE-2016-4161 CRITICAL · 9.8 Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute… Microsoft Adobe Apple Google
- CVE-2016-4160 CRITICAL · 9.8 Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute… Microsoft Adobe Apple Google
- CVE-2016-4159 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject… Adobe
- CVE-2016-4158 HIGH · 7.3 Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse… Microsoft Adobe