CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-6837 HIGH · 7.5 De functie xsl_ext_function_php in ext/xsl/xsltprocessor.c in PHP vóór 5.4.45, 5.5.x vóór 5.5.29 en 5.6.x vóór 5.6.13, wanneer libxml2 vóór 2.9.2 wordt gebruikt, houdt geen rekening… Php Xmlsoft
- CVE-2015-6835 CRITICAL · 9.8 The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary… Php
- CVE-2015-6834 CRITICAL · 9.8 Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to… Php
- CVE-2015-5589 CRITICAL · 9.8 The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close… Php
- CVE-2015-4644 HIGH · 7.5 The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate… Redhat Php
- CVE-2015-4643 CRITICAL · 9.8 Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute… Php Debian Redhat Oracle
- CVE-2015-4642 CRITICAL · 9.8 The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS… Microsoft Php
- CVE-2015-4605 HIGH · 7.5 De mcopy-functie in softmagic.c in bestand 5.x, zoals gebruikt in de Fileinfo-component in PHP vóór 5.4.40, 5.5.x vóór 5.5.24 en 5.6.x vóór 5.6.8, beperkt een… Php Redhat
- CVE-2015-4604 HIGH · 7.5 The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8,… Php Redhat
- CVE-2015-4603 CRITICAL · 9.8 The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an… Php Redhat
- CVE-2015-4602 CRITICAL · 9.8 The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service… Redhat Php
- CVE-2015-4601 CRITICAL · 9.8 PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type,… Redhat Php
- CVE-2015-4600 CRITICAL · 9.8 The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash)… Redhat Php
- CVE-2015-4599 CRITICAL · 9.8 De SoapFault::__ toString-methode in ext/soap/soap.c in PHP vóór 5.4.40, 5.5.x vóór 5.5.24 en 5.6.x vóór 5.6.8 stelt externe aanvallers in staat om gevoelige informatie te… Php Redhat
- CVE-2015-4598 MEDIUM · 6.5 PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read… Redhat Php
- CVE-2015-4116 CRITICAL · 9.8 Use-after-free kwetsbaarheid in de spl_ptr_heap_insert-functie in ext/spl/spl_heap.c in PHP vóór 5.5.27 en 5.6.x vóór 5.6.11 stelt externe aanvallers in staat om willekeurige code uit te… Opensuse Php
- CVE-2015-3412 MEDIUM · 5.3 PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read… Php Redhat
- CVE-2015-3411 MEDIUM · 6.5 PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read… Redhat Php
- CVE-2015-3152 MEDIUM · 5.9 Oracle MySQL vóór 5.7.3, Oracle MySQL Connector/C (ook bekend als libmysqlclient) vóór 6.1.3 en MariaDB vóór 5.5.44 gebruiken de optie --ssl om aan te geven… Oracle Mariadb Fedoraproject Debian
- CVE-2014-0236 HIGH · 7.5 file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference… Php
- CVE-2016-0390 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script… Ibm
- CVE-2016-0381 MEDIUM · 4.3 IBM Cognos TM1 10.2.2 vóór FP5, wanneer de instelling host/pmhub/pm/admin AdminGroups leeg is, kunnen op afstand geverifieerde gebruikers een denial of service (configuratie-uitval) veroorzaken via… Ibm
- CVE-2016-0341 HIGH · 7.5 IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain… Ibm
- CVE-2016-1671 HIGH · 8.1 Google Chrome before 50.0.2661.102 on Android mishandles / (slash) and (backslash) characters, which allows attackers to conduct directory traversal attacks via a file: URL, related… Google
- CVE-2016-1670 MEDIUM · 5.3 Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to… Google Opensuse Debian
- CVE-2016-1669 HIGH · 8.8 The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain… Debian Google Opensuse Nodejs
- CVE-2016-1668 HIGH · 8.8 The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows… Google Opensuse Debian
- CVE-2016-1667 HIGH · 8.8 De TreeScope::adoptIfNeed-functie in WebKit/Source/core/dom/TreeScope.cpp in de dom-implementatie in Blink, zoals gebruikt in Google Chrome vóór 50.0.2661.102, voorkomt niet dat scripts worden uitgevoerd tijdens node-adoptiebewerkingen, waardoor… Opensuse Debian Google
- CVE-2016-1666 CRITICAL · 9.8 Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Redhat Opensuse Google
- CVE-2016-1665 MEDIUM · 6.5 De JSGenericLowering-klasse in compiler/js-generic-lowering.cc in Google V8, zoals gebruikt in Google Chrome vóór 50.0.2661.94, verwerkt vergelijkingsoperatoren verkeerd, waardoor aanvallers op afstand gevoelige informatie kunnen verkrijgen… Opensuse Redhat Google
- CVE-2016-1664 MEDIUM · 4.3 The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers… Google Redhat Opensuse
- CVE-2016-1663 HIGH · 8.8 De functie SerializedScriptValue:: transferArrayBuffers in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in de V8-bindingen in Blink, zoals gebruikt in Google Chrome vóór 50.0.2661.94, mishandelt bepaalde array-buffergegevensstructuren, waardoor externe aanvallers een… Opensuse Redhat Google
- CVE-2016-1662 CRITICAL · 9.8 extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a… Google Redhat Opensuse
- CVE-2016-1661 HIGH · 8.0 Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a… Redhat Google Opensuse
- CVE-2016-1660 HIGH · 8.8 Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of… Opensuse Redhat Google
- CVE-2016-4325 CRITICAL · 9.8 Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access via unspecified vectors. Lantronix
- CVE-2016-2298 CRITICAL · 9.8 Meteocontrol WEB'log Basic 100, Light, Pro en Pro Unlimited stellen externe aanvallers in staat om gevoelige informatie in platte tekst te verkrijgen via ongespecificeerde methoden. Meteocontrol
- CVE-2016-2297 CRITICAL · 9.4 Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature." Meteocontrol
- CVE-2016-2296 CRITICAL · 9.4 Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information… Meteocontrol
- CVE-2016-1207 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices… Iodata
- CVE-2016-1206 MEDIUM · 4.3 The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network… Iodata
- CVE-2016-2016 MEDIUM · 5.5 Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1… Hp
- CVE-2016-2015 HIGH · 7.1 HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors. Hp
- CVE-2016-1209 CRITICAL · 9.8 De Ninja Forms-plugin voor WordPress vóór versie 2.9.42.1 stelt externe aanvallers in staat om PHP-objectinjectieaanvallen uit te voeren via zorgvuldig samengestelde geserialiseerde waarden in een… Ninjaforms
- CVE-2016-1208 HIGH · 7.5 The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors. Apple Filemaker
- CVE-2015-8530 MEDIUM · 6.5 Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before… Ibm
- CVE-2016-1399 HIGH · 7.5 De microcode voor pakketverwerking in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2 en 15.2(4)EA op Industrial Ethernet 4000-apparaten en 15.2(2)EB en 15.2(2)EB1 op Industrial Ethernet 5000-apparaten stelt… Cisco
- CVE-2015-8156 HIGH · 7.8 Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse… Symantec
- CVE-2016-4536 MEDIUM · 5.3 De client in OpenAFS vóór 1.6.17 initialiseert de (1) AFSStoreStatus, (2) AFSStoreVolumeStatus, (3) VldbListByAttributes en (4) ListAddrByAttributes-structuren niet correct, waardoor externe aanvallers mogelijk gevoelige geheugeninformatie… Openafs
- CVE-2016-4024 CRITICAL · 9.8 Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an… Enlightenment Debian Opensuse