CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-4790 MEDIUM · 5.5 Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4… Ivanti Pulsesecure
- CVE-2016-4789 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2,… Ivanti Pulsesecure
- CVE-2016-4788 MEDIUM · 5.8 Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system… Ivanti Pulsesecure
- CVE-2016-4787 CRITICAL · 10.0 Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication… Ivanti Pulsesecure
- CVE-2016-4786 HIGH · 7.5 Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of… Ivanti Pulsesecure
- CVE-2016-4021 HIGH · 7.5 The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted… Fedoraproject Pgpdump Project
- CVE-2016-2784 MEDIUM · 4.7 CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links,… Cmsmadesimple
- CVE-2016-4575 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software… Huawei
- CVE-2016-4020 MEDIUM · 6.5 De functie patch_instruction in hw/i386/kvmvapic.c in QEMU initialiseert de variabele imm32 niet, waardoor lokale beheerders van het gastbesturingssysteem gevoelige informatie uit het hoststackgeheugen kunnen verkrijgen… Qemu Canonical Debian Redhat
- CVE-2016-1887 HIGH · 7.8 Integer signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to… Freebsd
- CVE-2016-1886 HIGH · 7.8 Integer signedness error in the genkbd_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows… Freebsd
- CVE-2015-8853 HIGH · 7.5 The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite… Fedoraproject Perl
- CVE-2014-3672 MEDIUM · 6.5 The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing… Redhat Xen
- CVE-2016-1407 HIGH · 7.5 Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop)… Cisco
- CVE-2016-1406 HIGH · 8.8 The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended… Cisco
- CVE-2016-1400 HIGH · 7.5 Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in… Cisco
- CVE-2016-1383 HIGH · 7.5 Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via… Cisco
- CVE-2016-1382 HIGH · 7.5 Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allows remote attackers to… Cisco
- CVE-2016-1381 HIGH · 7.5 Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service… Cisco
- CVE-2016-1380 HIGH · 7.5 Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) via a crafted… Cisco
- CVE-2016-0264 MEDIUM · 5.6 Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25),… Suse Ibm Redhat
- CVE-2016-4783 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified… Google Lenovo
- CVE-2016-4782 HIGH · 8.8 Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL… Google Lenovo
- CVE-2016-4577 HIGH · 7.5 Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows… Huawei
- CVE-2016-4576 CRITICAL · 9.8 Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and… Huawei
- CVE-2016-4087 HIGH · 8.1 Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause… Huawei
- CVE-2016-4049 HIGH · 7.5 The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of… Quagga Opensuse
- CVE-2016-4037 MEDIUM · 6.0 Met de functie ehci_advance_state in hw/usb/hcd-ehci.c in QEMU kunnen lokale gastbesturingssysteembeheerders een denial of service (oneindige lus en CPU-verbruik) veroorzaken via een circulaire split isochronous… Fedoraproject Canonical Qemu Debian
- CVE-2016-4001 HIGH · 8.6 Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to… Qemu Canonical Fedoraproject Debian
- CVE-2016-3959 HIGH · 7.5 The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which… Opensuse Golang Fedoraproject
- CVE-2016-3958 HIGH · 7.8 Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL… Golang
- CVE-2016-3664 HIGH · 7.4 Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application login server, which allows man-in-the-middle attackers to… Trend Micro
- CVE-2016-2855 HIGH · 7.8 The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain… Huawei
- CVE-2015-8558 MEDIUM · 5.5 The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a… Qemu Debian
- CVE-2016-4951 HIGH · 7.8 The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of… Linux Canonical Oracle
- CVE-2016-4913 HIGH · 7.8 De functie get_rock_ridge_filename in fs/isofs/rock.c in de Linux-kernel vóór 4.5.5 mishandelt NM (aka alternatieve naam) -vermeldingen die tekens bevatten, waardoor lokale gebruikers gevoelige informatie uit… Canonical Linux Oracle Novell
- CVE-2016-4805 HIGH · 7.8 Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or… Novell Redhat Canonical Linux
- CVE-2016-4794 HIGH · 7.8 Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other… Linux Canonical
- CVE-2016-4581 MEDIUM · 5.5 fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows… Canonical Linux Oracle
- CVE-2016-4580 HIGH · 7.5 The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive… Linux Canonical
- CVE-2016-4578 MEDIUM · 5.5 sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack… Linux Canonical Debian Redhat
- CVE-2016-4569 MEDIUM · 5.5 The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive… Linux Canonical Novell
- CVE-2016-4568 HIGH · 7.8 drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other… Linux
- CVE-2016-4565 HIGH · 7.8 De InfiniBand (ook bekend als IB) -stack in de Linux-kernel vóór 4.5.3 vertrouwt ten onrechte op de schrijfsysteemaanroep, waarmee lokale gebruikers een denial of service… Linux Canonical Debian
- CVE-2016-4558 HIGH · 7.0 Het BPF-subsysteem in de Linux-kernel vóór versie 4.5.5 behandelt referentietellers onjuist, waardoor lokale gebruikers een denial-of-service-aanval (use-after-free) kunnen uitvoeren of mogelijk andere ongespecificeerde gevolgen kunnen… Linux Canonical
- CVE-2016-4557 HIGH · 7.8 The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain… Linux
- CVE-2016-4486 LOW · 3.3 De functie rtnl_fill_link_ifmap in net/core/rtnetlink.c in de Linux-kernel vóór 4.5.5 initialiseert geen bepaalde gegevensstructuur, waardoor lokale gebruikers gevoelige informatie uit het kernel-stackgeheugen kunnen verkrijgen door… Novell Canonical Linux
- CVE-2016-4485 HIGH · 7.5 De functie llc_cmsg_rcv in net/llc/af_llc.c in de Linux-kernel vóór 4.5.5 initialiseert geen bepaalde gegevensstructuur, waardoor aanvallers gevoelige informatie uit het kernel-stackgeheugen kunnen verkrijgen door een… Novell Canonical Linux
- CVE-2016-4482 MEDIUM · 6.2 The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive… Canonical Linux Novell Fedoraproject
- CVE-2016-2190 MEDIUM · 5.3 Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers… Moodle