CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-4363 MEDIUM · 6.1 HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors. Hp
- CVE-2016-4362 HIGH · 8.1 HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Hp
- CVE-2016-4361 HIGH · 7.5 HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance… Hp
- CVE-2016-4360 CRITICAL · 9.1 web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3,… Hp
- CVE-2016-4359 CRITICAL · 9.8 Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through… Hp
- CVE-2016-4358 HIGH · 8.1 HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2029. Hp
- CVE-2016-4357 HIGH · 8.1 HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2028. Hp
- CVE-2016-2078 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2… Microsoft Vmware
- CVE-2016-2030 HIGH · 8.1 Met HPE Systems Insight Manager (SIM) vóór 7.5.1 kunnen op afstand geverifieerde gebruikers gevoelige informatie verkrijgen of gegevens wijzigen via niet-gespecificeerde vectoren, een andere kwetsbaarheid… Hp
- CVE-2016-2029 CRITICAL · 9.1 HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358. Hp
- CVE-2016-2028 HIGH · 8.1 HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4357. Hp
- CVE-2016-2027 HIGH · 7.5 HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2026. Hp
- CVE-2016-2026 HIGH · 7.5 HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027. Hp
- CVE-2016-2024 CRITICAL · 9.8 HPE Insight Control before 7.5.1 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Hp
- CVE-2016-2022 HIGH · 8.1 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than… Hp
- CVE-2016-2021 HIGH · 8.1 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than… Hp
- CVE-2016-2020 HIGH · 8.1 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than… Hp
- CVE-2016-2019 HIGH · 8.1 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than… Hp
- CVE-2016-2018 CRITICAL · 9.1 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors. Hp
- CVE-2016-2017 HIGH · 8.1 HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than… Hp
- CVE-2016-1418 HIGH · 7.8 Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via… Cisco
- CVE-2016-1405 HIGH · 7.5 libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security… Clamav Cisco
- CVE-2015-8800 HIGH · 7.3 Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical… Broadcom
- CVE-2015-8799 HIGH · 7.6 Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for… Broadcom
- CVE-2015-8798 HIGH · 8.0 Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for… Broadcom
- CVE-2015-8157 HIGH · 8.8 SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for… Broadcom
- CVE-2016-4545 HIGH · 7.5 Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Traffic Management… F5
- CVE-2016-3093 MEDIUM · 5.3 Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial… Ognl Project Apache
- CVE-2016-3087 CRITICAL · 9.8 Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code… Apache
- CVE-2016-3072 HIGH · 8.8 Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the (1) sort_by… Katello Redhat
- CVE-2013-7440 MEDIUM · 5.9 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers… Python
- CVE-2016-5242 MEDIUM · 5.6 De functie p2m_teardown in arch/arm/p2m.c in Xen 4.4.x tot 4.6.x stelt lokale gastbesturingssysteemgebruikers met toegang tot het driver-domein in staat om een denial of service… Xen
- CVE-2016-4963 MEDIUM · 4.7 The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management… Xen
- CVE-2016-4962 MEDIUM · 6.7 De libxl-apparaatverwerking in Xen 4.6.x en eerder stelt lokale OS-gastbeheerders in staat om een denial of service te veroorzaken (resourceverbruik of verwarring over de beheerfaciliteit)… Oracle Xen
- CVE-2016-4450 HIGH · 7.5 os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash)… Canonical F5 Debian
- CVE-2016-2335 HIGH · 8.8 De CInArchive::ReadFileItem-methode in Archive/Udf/UdfIn.cpp in 7zip 9.20 en 15.05 beta en p7zip stelt externe aanvallers in staat om een denial of service (buiten het bereik… Opensuse Debian 7-zip
- CVE-2015-7695 CRITICAL · 9.8 The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands… Zend Debian
- CVE-2015-7611 HIGH · 8.1 Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors. Apache
- CVE-2015-5723 HIGH · 7.8 Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1,… Zend Debian Doctrine-project
- CVE-2015-5261 HIGH · 7.1 Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL… Canonical Redhat Debian Spice Project
- CVE-2015-5260 HIGH · 7.8 Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly… Redhat Debian Canonical Spice Project
- CVE-2015-5231 MEDIUM · 5.5 The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps… Criu Opensuse
- CVE-2015-5228 HIGH · 7.8 The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files… Opensuse Criu
- CVE-2014-9747 HIGH · 7.5 De functie t42_parse_encoding in type42/t42parse.c in FreeType vóór 2.5.4 werkt de huidige positie niet goed bij voor de modus immediately-only, waardoor externe aanvallers een denial… Freetype Debian
- CVE-2014-9746 CRITICAL · 9.8 The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before… Freetype Debian
- CVE-2014-8177 MEDIUM · 6.5 The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count… Redhat
- CVE-2015-5041 CRITICAL · 9.1 The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1… Ibm Suse Redhat
- CVE-2016-1703 HIGH · 8.8 Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google Canonical Debian Opensuse
- CVE-2016-1702 MEDIUM · 6.5 The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to… Canonical Debian Opensuse Redhat
- CVE-2016-1701 HIGH · 8.8 The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote… Google Debian Opensuse Redhat