CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3221 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-3220 HIGH · 7.8 atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,… Microsoft
- CVE-2016-3219 HIGH · 7.8 The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege… Microsoft
- CVE-2016-3218 HIGH · 7.8 De kernelmodusstuurprogramma's in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold en R2,… Microsoft
- CVE-2016-3216 MEDIUM · 4.3 GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Microsoft
- CVE-2016-3215 MEDIUM · 5.5 Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory… Microsoft
- CVE-2016-3214 HIGH · 8.8 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Microsoft
- CVE-2016-3213 HIGH · 8.8 The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,… Microsoft
- CVE-2016-3212 MEDIUM · 6.1 The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier for remote attackers to conduct cross-site… Microsoft
- CVE-2016-3211 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2016-3210 HIGH · 8.8 De Microsoft (1) JScript- en (2) VBScript-engines, zoals gebruikt in Internet Explorer 11, stellen externe aanvallers in staat om willekeurige code uit te voeren of… Microsoft
- CVE-2016-3207 HIGH · 7.5 The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote… Microsoft
- CVE-2016-3206 HIGH · 7.5 The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote… Microsoft
- CVE-2016-3205 HIGH · 7.5 The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote… Microsoft
- CVE-2016-3203 HIGH · 7.8 Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via… Microsoft
- CVE-2016-3202 HIGH · 7.5 The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote… Microsoft
- CVE-2016-3201 MEDIUM · 6.5 Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from… Microsoft
- CVE-2016-3199 HIGH · 8.8 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Microsoft
- CVE-2016-3198 MEDIUM · 6.5 Met Microsoft Edge kunnen externe aanvallers het beveiligingsmechanisme van het Content Security Policy (CSP) omzeilen via een vervaardigd document, ook wel "Microsoft Edge Security Feature… Microsoft
- CVE-2016-0200 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2016-0199 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2016-0028 MEDIUM · 5.5 Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does… Microsoft
- CVE-2016-0025 HIGH · 7.3 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011,… Microsoft
- CVE-2016-5367 HIGH · 7.5 Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors, aka HWPSIRT-2016-05053. Huawei
- CVE-2016-5366 HIGH · 7.5 Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to modify configuration data via vectors related to a "file injection vulnerability," aka… Huawei
- CVE-2016-5365 CRITICAL · 9.8 Stack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier allows remote attackers to execute arbitrary commands with root privileges via unspecified… Huawei
- CVE-2016-5338 HIGH · 7.8 The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash)… Qemu Canonical Debian
- CVE-2016-5337 MEDIUM · 5.5 The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control… Qemu Canonical Debian
- CVE-2016-5238 MEDIUM · 4.4 The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash)… Qemu Canonical Debian
- CVE-2016-4579 HIGH · 7.5 Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of… Gnupg Opensuse Canonical
- CVE-2016-4574 HIGH · 7.5 Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds… Gnupg Canonical Opensuse
- CVE-2016-4478 HIGH · 7.5 Bufferoverloop in de xmlrpc_char_encode-functie in modules/transport/xmlrpc/xmlrpclib.c in Atheme vóór 7.2.7 stelt externe aanvallers in staat om een denial of service te veroorzaken via vectoren met… Opensuse Atheme Debian
- CVE-2016-4414 HIGH · 7.5 Met de onReadyRead-functie in core/coreauthhandler.cpp in Quassel vóór 0.12.4 kunnen externe aanvallers een denial of service (NULL pointer dereference en crash) veroorzaken via ongeldige handshake-gegevens. Opensuse Quassel-irc Fedoraproject
- CVE-2016-4356 HIGH · 7.5 The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing… Gnupg Canonical
- CVE-2016-4355 HIGH · 7.5 Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads… Gnupg Canonical
- CVE-2016-4354 HIGH · 7.5 ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER… Canonical Gnupg
- CVE-2016-4353 HIGH · 7.5 ber-decoder.c in Libksba vóór 1.3.3 verwerkt decoderstapeloverlopen niet goed, waardoor externe aanvallers een denial of service (afbreken) kunnen veroorzaken via vervaardigde BER-gegevens. Gnupg Canonical
- CVE-2016-3698 HIGH · 8.1 libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct… Redhat Libndp Debian Canonical
- CVE-2015-8869 CRITICAL · 9.1 OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by… Fedoraproject Opensuse Ocaml
- CVE-2014-9773 HIGH · 7.5 modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) CLEAR, or (3)… Opensuse Atheme
- CVE-2016-5302 CRITICAL · 9.8 Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to… Citrix
- CVE-2016-5234 HIGH · 8.1 Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when… Huawei
- CVE-2016-5104 MEDIUM · 5.3 The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by… Libimobiledevice Canonical Opensuse
- CVE-2016-4911 MEDIUM · 4.3 The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and… Keystone
- CVE-2016-4005 MEDIUM · 5.5 The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors,… Huawei
- CVE-2016-3677 MEDIUM · 6.5 De Huawei Wear-app-applicatie vóór 15.0.0.307 voor Android valideert geen SSL-certificaten, waardoor lokale gebruikers een niet-gespecificeerde impact kunnen hebben via onbekende vectoren, ook bekend als HWPSIRT-2016-03008. Huawei
- CVE-2016-3670 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script… Liferay
- CVE-2016-2174 HIGH · 7.2 SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime… Apache
- CVE-2016-1543 HIGH · 7.5 De RPC API in de RSCD-agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x en 8.7.x op Linux en UNIX stelt externe aanvallers… Bmc
- CVE-2016-1542 HIGH · 7.5 The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers… Bmc