CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2463 HIGH · 8.4 Meerdere integer overflows in de h264dec-component in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-06-01… Google
- CVE-2016-2066 HIGH · 7.8 Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM… Linux
- CVE-2016-2061 HIGH · 7.8 Integer-ondertekeningsfout in het MSM V4L2-videostuurprogramma voor de Linux-kernel 3.x, zoals gebruikt in Qualcomm Innovation Center (QuIC) Android-bijdragen voor MSM-apparaten en andere producten, stelt aanvallers in… Linux
- CVE-2016-5233 LOW · 3.7 Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, and NXT-TL00 before NXT-TL00C01B182 allow remote base stations to obtain… Huawei
- CVE-2016-5118 CRITICAL · 9.8 The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the… Graphicsmagick Suse Oracle Opensuse
- CVE-2016-4429 MEDIUM · 5.9 Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial… Opensuse Gnu Canonical
- CVE-2016-3720 CRITICAL · 9.8 XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors. Fedoraproject Fasterxml
- CVE-2016-3706 HIGH · 7.5 Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial… Opensuse Gnu
- CVE-2016-3085 MEDIUM · 6.5 Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers… Apache
- CVE-2016-2786 CRITICAL · 9.8 The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote… Puppet
- CVE-2016-2785 CRITICAL · 9.8 Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended… Puppet
- CVE-2016-4527 LOW · 3.3 ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive information via unspecified vectors. Abb
- CVE-2016-4524 MEDIUM · 6.5 ABB PCM600 voor 2.7 slaat OPC Server IEC61850-wachtwoorden onjuist op in niet-gespecificeerde tijdelijke omstandigheden, waardoor lokale gebruikers gevoelige informatie kunnen verkrijgen via onbekende vectoren. Abb
- CVE-2016-4516 LOW · 3.3 ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users to obtain sensitive information via unspecified vectors. Abb
- CVE-2016-4511 LOW · 2.8 ABB PCM600 voor 2.7 gebruikt een onjuist hash-algoritme voor het wachtwoord van de hoofdtoepassing, waardoor het voor lokale gebruikers gemakkelijker wordt om gevoelige cleartext-informatie te… Abb
- CVE-2016-4495 MEDIUM · 5.3 Met KMC Controls BAC-5051E-apparaten met firmware vóór E0.2.0.2 kunnen externe aanvallers beoogde toegangsbeperkingen omzeilen en een configuratiebestand lezen via niet-gespecificeerde vectoren. Kmc Controls
- CVE-2016-4494 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for… Kmc Controls
- CVE-2016-4328 CRITICAL · 9.8 MEDHOST Perioperative Information Management System (ook bekend als PIMS of VPIMS) vóór 2015R1 heeft hardgecodeerde referenties, waardoor het voor externe aanvallers gemakkelijker wordt om gevoelige… Medhost
- CVE-2016-4326 CRITICAL · 9.8 The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie. Chef
- CVE-2016-1421 HIGH · 7.5 Een kwetsbaarheid in de webtoepassing voor Cisco IP-telefoons kan een niet-geverifieerde, externe aanvaller in staat stellen om code uit te voeren met rootbevoegdheden of een… Cisco
- CVE-2016-1420 HIGH · 7.8 The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root… Cisco
- CVE-2016-1419 HIGH · 8.1 Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP packets, aka Bug ID… Cisco
- CVE-2016-0916 CRITICAL · 9.8 EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to… Emc
- CVE-2016-0910 HIGH · 8.8 EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which… Emc
- CVE-2015-8268 HIGH · 7.5 The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors. Idera
- CVE-2016-4449 HIGH · 7.1 XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read… Debian Canonical Xmlsoft
- CVE-2016-4448 CRITICAL · 9.8 Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. Hp Redhat Apple Xmlsoft
- CVE-2016-4447 HIGH · 7.5 The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via… Hp Canonical Debian Oracle
- CVE-2016-2150 HIGH · 7.1 SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to… Redhat Microsoft Opensuse Debian
- CVE-2016-1582 MEDIUM · 5.5 LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable… Canonical
- CVE-2016-1581 MEDIUM · 5.5 LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data… Canonical
- CVE-2016-0749 CRITICAL · 9.8 De smartcard-interactie in SPICE stelt externe aanvallers in staat om een denial of service (QEMU-KVM-procescrash) te veroorzaken of mogelijk willekeurige code uit te voeren via… Opensuse Debian Redhat Microsoft
- CVE-2016-4532 CRITICAL · 9.1 Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via… Trihedral
- CVE-2016-4510 CRITICAL · 9.1 The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified… Trihedral
- CVE-2016-4370 HIGH · 8.8 HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via… Hpe
- CVE-2016-2310 CRITICAL · 9.8 General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have… Ge
- CVE-2016-3738 HIGH · 8.8 Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain… Redhat
- CVE-2016-3711 LOW · 3.3 HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the… Redhat
- CVE-2016-3708 HIGH · 7.1 Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods… Redhat
- CVE-2016-3703 MEDIUM · 5.3 Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or… Redhat
- CVE-2016-2160 HIGH · 8.8 Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an… Redhat
- CVE-2016-2149 MEDIUM · 6.5 Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted… Redhat
- CVE-2016-2142 MEDIUM · 5.5 Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the… Redhat
- CVE-2016-5108 CRITICAL · 9.8 Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash)… Debian Videolan
- CVE-2016-4369 HIGH · 8.8 HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to… Hp
- CVE-2016-4368 CRITICAL · 9.8 HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary… Hp
- CVE-2016-4367 HIGH · 7.5 The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors. Hp
- CVE-2016-4366 CRITICAL · 9.8 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Hp
- CVE-2016-4365 HIGH · 7.5 HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors. Hp
- CVE-2016-4364 HIGH · 8.4 HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors. Hp