CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-5126 HIGH · 7.8 Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash)… Qemu Canonical Oracle Debian
- CVE-2016-4945 MEDIUM · 6.1 Een XSS-kwetsbaarheid (cross-site scripting) in vpn/js/gateway_login_form_view.js in Citrix NetScaler Gateway 11.0 vóór build 66.11 stelt externe aanvallers in staat om willekeurige webscripts of HTML te… Citrix
- CVE-2016-4810 HIGH · 7.5 Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access… Citrix
- CVE-2016-4454 MEDIUM · 6.0 The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU… Qemu Canonical Debian
- CVE-2016-4453 MEDIUM · 4.4 The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via… Qemu Canonical Debian
- CVE-2016-4423 HIGH · 7.5 The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.8.x before 2.8.6, and 3.0.x before 3.0.6 does not limit the length of… Sensiolabs Debian
- CVE-2016-1902 HIGH · 7.5 The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when… Debian Sensiolabs
- CVE-2015-8875 HIGH · 7.8 Meerdere integer overflows in de (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, en (3) pixops_process functies in pixops/pixops.c in gdk-pixbuf voor 2.33.1 staan externe aanvallers toe om een… Gnome Debian
- CVE-2016-4432 CRITICAL · 9.1 The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform… Apache
- CVE-2016-3697 HIGH · 7.8 libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to… Docker Linuxfoundation Opensuse
- CVE-2016-3094 MEDIUM · 5.9 PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service… Apache
- CVE-2016-3075 HIGH · 7.5 Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a… Opensuse Gnu Fedoraproject Canonical
- CVE-2016-2175 HIGH · 7.8 Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE)… Apache Debian
- CVE-2016-1234 HIGH · 7.5 Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a… Gnu Opensuse Fedoraproject
- CVE-2016-4500 MEDIUM · 5.8 Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access. Moxa
- CVE-2016-0288 MEDIUM · 6.5 IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary files via an XML… Ibm
- CVE-2016-4785 MEDIUM · 5.3 A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100… Siemens
- CVE-2016-4784 MEDIUM · 5.3 A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100… Siemens
- CVE-2016-4521 CRITICAL · 9.8 Sixnet BT-5xxx en BT-6xxx M2M-apparaten vóór 3.8.21 en 3.9.x vóór 3.9.8 hebben hardgecodeerde inloggegevens, waarmee aanvallers op afstand toegang kunnen krijgen via niet-gespecificeerde vectoren. Sixnet
- CVE-2016-4506 HIGH · 8.0 Cross-site request forgery (CSRF) kwetsbaarheid op Resource Data Management (RDM) Intuïtieve 650 TDB Controller-apparaten vóór 2.1.24 stelt op afstand geverifieerde gebruikers in staat om de… Resourcedm
- CVE-2016-4505 HIGH · 8.8 Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors. Resourcedm
- CVE-2016-4502 HIGH · 7.5 Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 en eerder stelt externe aanvallers in staat om beoogde toegangsbeperkingen te omzeilen en willekeurige functies uit te… Envirosys
- CVE-2016-4501 CRITICAL · 9.1 Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 en eerdere verkeerd gebruikte sessies, waarmee externe aanvallers authenticatie kunnen omzeilen en willekeurige configuratiewijzigingen kunnen aanbrengen via… Envirosys
- CVE-2016-2295 HIGH · 7.5 Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with… Moxa
- CVE-2016-2286 HIGH · 7.5 Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with… Moxa
- CVE-2016-2285 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware… Moxa
- CVE-2016-0879 HIGH · 7.5 Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers… Moxa
- CVE-2016-0878 HIGH · 7.5 Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests. Moxa
- CVE-2016-0877 HIGH · 7.5 Geheugenlekkage op Moxa Secure Router EDR-G903-apparaten vóór 3.4.12 stelt externe aanvallers in staat om een denial of service (geheugenverbruik) te veroorzaken door de ping-functie uit… Moxa
- CVE-2016-0876 HIGH · 7.5 Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. Moxa
- CVE-2016-0875 HIGH · 7.5 Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. Moxa
- CVE-2016-4118 HIGH · 7.8 Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors. Microsoft Adobe
- CVE-2016-2311 MEDIUM · 6.5 Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and… Blackbox
- CVE-2016-2309 HIGH · 7.2 iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to modify data or cause a denial of service via unspecified… Irz
- CVE-2016-2025 HIGH · 7.5 HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the… Hp
- CVE-2016-2023 MEDIUM · 5.5 HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors. Hp
- CVE-2016-1999 CRITICAL · 9.8 The server in HP Release Control 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to… Hp
- CVE-2016-0907 MEDIUM · 5.9 EMC Isilon OneFS 7.1.x en 7.2.x vóór 7.2.1.3 en 8.0.x vóór 8.0.0.1, en IsilonSD Edge OneFS 8.0.x vóór 8.0.0.1, vereist geen SMB-ondertekening binnen een DCERPC-sessie… Emc
- CVE-2016-1409 HIGH · 7.5 The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows… Cisco
- CVE-2016-1404 HIGH · 7.5 Cisco UCS Invicta 4.3, 4.5 en 5.0.1 op Invicta-apparaten en Invicta Scaling System maakt gebruik van dezelfde hardgecodeerde GnuPG-coderingssleutel voor de installaties van verschillende klanten,… Cisco
- CVE-2016-1413 MEDIUM · 6.5 The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter… Cisco
- CVE-2016-1410 HIGH · 7.5 Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or (2) hosting a meeting,… Cisco
- CVE-2016-1379 MEDIUM · 6.5 Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory… Cisco
- CVE-2016-3681 HIGH · 7.8 Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers… Huawei
- CVE-2016-3680 HIGH · 7.8 Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers… Huawei
- CVE-2016-0718 CRITICAL · 9.8 Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer… Mozilla Apple Suse Opensuse
- CVE-2016-1385 MEDIUM · 6.5 De XML-parser in de Cisco Adaptive Security Appliance (ASA)-software tot en met versie 9.5.2 stelt externe geauthenticeerde gebruikers in staat een denial-of-service-aanval (instabiliteit, geheugenverbruik of… Cisco
- CVE-2015-7360 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or… Fortinet
- CVE-2016-4792 MEDIUM · 5.3 Pulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors. Ivanti
- CVE-2016-4791 HIGH · 8.6 The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators… Ivanti Pulsesecure