CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1700 HIGH · 7.5 extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause… Debian Opensuse Redhat Suse
- CVE-2016-1699 MEDIUM · 6.5 WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is… Canonical Debian Opensuse Redhat
- CVE-2016-1698 MEDIUM · 6.5 The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load… Debian Opensuse Redhat Suse
- CVE-2016-1697 HIGH · 8.8 The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows… Google Canonical Debian Opensuse
- CVE-2016-1696 HIGH · 8.8 The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via… Google Debian Opensuse Redhat
- CVE-2016-1695 HIGH · 8.8 Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google Canonical Debian Opensuse
- CVE-2016-1694 MEDIUM · 5.3 browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a… Google Debian Opensuse Redhat
- CVE-2016-1693 MEDIUM · 5.3 browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to… Debian Opensuse Redhat Suse
- CVE-2016-1692 MEDIUM · 5.3 WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has… Canonical Debian Opensuse Redhat
- CVE-2016-1691 HIGH · 7.5 Skia, zoals gebruikt in Google Chrome vóór 51.0.2704.63, mishandelt toevalligheden, waardoor externe aanvallers een denial of service (heap-based buffer overflow) kunnen veroorzaken of mogelijk een… Canonical Debian Opensuse Redhat
- CVE-2016-1690 HIGH · 7.5 The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote… Debian Opensuse Redhat Suse
- CVE-2016-1689 MEDIUM · 6.5 Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact… Canonical Debian Opensuse Redhat
- CVE-2016-1688 MEDIUM · 6.5 De regexp (aka reguliere expressie) implementatie in Google V8 vóór 5.0.71.40, zoals gebruikt in Google Chrome vóór 51.0.2704.63, misbruikt externe tekenreeksgroottes, waardoor externe aanvallers een… Canonical Debian Opensuse Redhat
- CVE-2016-1687 MEDIUM · 6.5 The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via… Debian Opensuse Redhat Suse
- CVE-2016-1686 MEDIUM · 6.5 The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial… Google Debian Opensuse Redhat
- CVE-2016-1685 MEDIUM · 6.5 core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds… Google Debian Opensuse Redhat
- CVE-2016-1684 HIGH · 7.5 numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to… Google Xmlsoft
- CVE-2016-1683 HIGH · 7.5 numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service… Xmlsoft Canonical Debian Opensuse
- CVE-2016-1682 MEDIUM · 6.1 The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection… Google Canonical Debian Opensuse
- CVE-2016-1681 HIGH · 8.8 Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause… Debian Opensuse Redhat Suse
- CVE-2016-1680 HIGH · 8.8 Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption)… Google Canonical Debian Opensuse
- CVE-2016-1679 HIGH · 8.8 The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows… Google Canonical Debian Opensuse
- CVE-2016-1678 HIGH · 8.8 objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause… Google Canonical Debian Opensuse
- CVE-2016-1677 MEDIUM · 6.5 uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive… Google Canonical Debian Opensuse
- CVE-2016-1676 HIGH · 8.8 extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy… Debian Opensuse Redhat Suse
- CVE-2016-1675 HIGH · 8.8 Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during… Canonical Debian Opensuse Redhat
- CVE-2016-1674 HIGH · 8.8 The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Debian Opensuse Redhat Suse
- CVE-2016-1673 HIGH · 8.8 Blink, zoals gebruikt in Google Chrome vóór 51.0.2704.63, stelt externe aanvallers in staat om het Same Origin-beleid te omzeilen via niet-gespecificeerde vectoren. Google Canonical Debian Opensuse
- CVE-2016-1672 HIGH · 8.8 De functie ModuleSystem:: RequireForJsInner in extensies/renderer/module_system.cc in de extensiebindingen in Google Chrome vóór 51.0.2704.63 misbruikt eigenschappen, waardoor externe aanvallers bindings-interceptieaanvallen kunnen uitvoeren en hetzelfde oorsprongsbeleid… Google Debian Opensuse Redhat
- CVE-2016-1230 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in NTT PC Communications WebARENA Service formmail vóór 2.2.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Ntt
- CVE-2016-1229 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allows remote authenticated users to inject arbitrary web script or HTML via… Humhub
- CVE-2016-1222 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. Kobe-beauty
- CVE-2016-1212 LOW · 2.7 Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors. Futomi
- CVE-2016-4812 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML… Markdown On Saved Improved Project
- CVE-2016-4564 CRITICAL · 9.8 The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token,… Imagemagick
- CVE-2016-4563 HIGH · 8.8 The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which… Imagemagick
- CVE-2016-4562 HIGH · 8.8 The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to… Imagemagick
- CVE-2016-1403 HIGH · 7.8 CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug… Cisco
- CVE-2016-1211 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Epoch
- CVE-2016-1391 HIGH · 8.8 Cisco Prime Network Analysis Module (NAM) voor 6.1(1) patch.6.1-2-final en 6.2.x voor 6.2(2) en Prime Virtual Network Analysis Module (vNAM) voor 6.1(1) patch.6.1-2-final en 6.2.x… Cisco
- CVE-2016-1390 HIGH · 7.8 Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x… Cisco
- CVE-2016-0908 MEDIUM · 6.7 EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges. Emc
- CVE-2016-4804 MEDIUM · 6.2 The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a… Dosfstools Project Opensuse Canonical
- CVE-2016-3944 HIGH · 7.5 UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com. Lenovo
- CVE-2016-3096 HIGH · 7.8 The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain… Fedoraproject Redhat
- CVE-2016-0376 HIGH · 8.1 The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40),… Novell Ibm Redhat
- CVE-2016-0363 HIGH · 8.1 The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40),… Redhat Novell Ibm
- CVE-2015-8872 MEDIUM · 6.2 The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory… Canonical Opensuse Dosfstools Project
- CVE-2016-1388 CRITICAL · 9.8 Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x… Cisco
- CVE-2016-1370 MEDIUM · 5.3 Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash… Cisco