CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1812 HIGH · 7.8 Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted… Apple
- CVE-2016-1811 MEDIUM · 6.5 ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of… Apple
- CVE-2016-1810 HIGH · 7.8 Het Graphics Drivers-subsysteem in Apple OS X vóór 10.11.5 stelt aanvallers in staat om willekeurige code uit te voeren in een bevoorrechte context of een… Apple
- CVE-2016-1809 HIGH · 7.5 Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors. Apple
- CVE-2016-1808 HIGH · 7.8 The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary… Apple
- CVE-2016-1807 MEDIUM · 5.1 Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local… Apple
- CVE-2016-1806 HIGH · 7.8 Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app. Apple
- CVE-2016-1805 HIGH · 7.8 CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app. Apple
- CVE-2016-1804 HIGH · 7.8 The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service… Apple
- CVE-2016-1803 HIGH · 7.8 CoreCapture in Apple iOS vóór 9.3.2, OS X vóór 10.11.5, tvOS vóór 9.2.1 en watchOS vóór 2.2.1 stelt aanvallers in staat om willekeurige code uit… Apple
- CVE-2016-1802 MEDIUM · 5.5 CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations,… Apple
- CVE-2016-1801 HIGH · 7.5 The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which… Apple
- CVE-2016-1800 HIGH · 8.8 Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified… Apple
- CVE-2016-1799 HIGH · 7.8 Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)… Apple
- CVE-2016-1798 LOW · 3.3 Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app. Apple
- CVE-2016-1797 HIGH · 7.8 Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged… Apple
- CVE-2016-1796 LOW · 3.3 Apple Type Services (ATS) in Apple OS X vóór 10.11.5 stelt aanvallers in staat om gevoelige kernelgeheugen-lay-outinformatie te verkrijgen of een denial of service (toegang… Apple
- CVE-2016-1795 HIGH · 7.8 AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)… Apple
- CVE-2016-1794 HIGH · 7.8 The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial… Apple
- CVE-2016-1793 HIGH · 7.8 Met AppleGraphicsDeviceControlClient in Apple OS X vóór 10.11.5 kunnen aanvallers willekeurige code uitvoeren in een geprivilegieerde context of een denial of service (NULL pointer dereference)… Apple
- CVE-2016-1792 HIGH · 7.8 The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service… Apple
- CVE-2016-1791 LOW · 3.3 The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Apple
- CVE-2016-1790 LOW · 3.3 Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Apple
- CVE-2016-1742 HIGH · 7.8 Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the… Apple
- CVE-2015-8865 HIGH · 7.3 De functie file_check_mem in funcs.c in file voor 5.23, zoals gebruikt in de Fileinfo component in PHP voor 5.5.34, 5.6.x voor 5.6.20 en 7.x voor… Php Apple
- CVE-2016-2208 CRITICAL · 9.1 The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Symantec
- CVE-2016-4480 HIGH · 8.4 The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4… Oracle Xen
- CVE-2016-2077 CRITICAL · 9.8 VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain… Microsoft Vmware
- CVE-2016-0731 MEDIUM · 4.9 De Bestandsbrowserweergave in Apache Ambari vóór 2.2.1 stelt externe geverifieerde beheerders in staat om willekeurige bestanden te lezen via een bestand: URL in de WebHDFS… Apache
- CVE-2016-0707 LOW · 3.3 De agent in Apache Ambari vóór 2.1.2 gebruikt zwakke machtigingen voor de mappen (1) /var/lib/ambari-agent/data en (2) /var/lib/ambari-agent/keys, waarmee lokale gebruikers gevoelige informatie kunnen verkrijgen… Apache
- CVE-2016-4425 MEDIUM · 6.5 Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data. Jansson Project
- CVE-2016-3727 MEDIUM · 4.3 The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to… Jenkins Redhat
- CVE-2016-3726 HIGH · 7.4 Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing… Jenkins Redhat
- CVE-2016-3725 MEDIUM · 4.3 Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE:… Jenkins Redhat
- CVE-2016-3724 MEDIUM · 6.5 Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration. Redhat Jenkins
- CVE-2016-3723 MEDIUM · 4.3 Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks… Jenkins Redhat
- CVE-2016-3722 MEDIUM · 4.3 Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing… Jenkins Redhat
- CVE-2016-3721 MEDIUM · 4.3 Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables. Redhat Jenkins
- CVE-2016-3705 HIGH · 7.5 The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers… Canonical Xmlsoft Debian Hp
- CVE-2016-3674 HIGH · 7.5 Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in… Redhat Debian Fedoraproject Xstream
- CVE-2016-3627 HIGH · 7.5 The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite… Opensuse Debian Hp Xmlsoft
- CVE-2016-0323 MEDIUM · 6.5 The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an… Ibm
- CVE-2016-0306 MEDIUM · 5.9 IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle… Ibm
- CVE-2016-3185 HIGH · 7.1 The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive… Php
- CVE-2016-2554 CRITICAL · 9.8 Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service… Php
- CVE-2015-8874 HIGH · 7.5 Stackconsumptiekwetsbaarheid in GD in PHP vóór 5.6.12 stelt externe aanvallers in staat om een denial of service te veroorzaken via een vervaardigde imagefilltoborder-oproep. Opensuse Php
- CVE-2015-8873 HIGH · 7.5 Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service… Php Opensuse
- CVE-2015-8838 MEDIUM · 5.9 ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows… Php
- CVE-2015-8835 CRITICAL · 9.8 De make_http_soap_request-functie in ext/soap/php_http.c in PHP vóór 5.4.44, 5.5.x vóór 5.5.28 en 5.6.x vóór 5.6.12 haalt sleutels niet correct op, waardoor externe aanvallers een denial… Php
- CVE-2015-6838 HIGH · 7.5 The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider… Php Xmlsoft