CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0197 HIGH · 7.8 dxgkrnl.sys in het DirectX Graphics kernel subsysteem in de kernel-modus stuurprogramma's in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7… Microsoft
- CVE-2016-0196 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0195 HIGH · 8.8 The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0194 MEDIUM · 5.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web site, aka "Internet Explorer… Microsoft
- CVE-2016-0193 HIGH · 7.5 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Microsoft
- CVE-2016-0192 HIGH · 7.5 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Microsoft
- CVE-2016-0191 HIGH · 7.5 De Chakra JavaScript-engine in Microsoft Edge stelt externe aanvallers in staat om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging) te veroorzaken… Microsoft
- CVE-2016-0190 MEDIUM · 5.5 Volume Manager-stuurprogramma in Microsoft Windows 8.1, Windows Server 2012 Gold en R2 en Windows RT 8.1 controleert niet goed of RemoteFX RDP USB-schijftoegang afkomstig is… Microsoft
- CVE-2016-0188 HIGH · 8.8 De User Mode Code Integrity (UMCI) -implementatie in Device Guard in Microsoft Internet Explorer 11 stelt externe aanvallers in staat om een code-ondertekenend beschermingsmechanisme te… Microsoft
- CVE-2016-0187 HIGH · 7.5 The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to… Microsoft
- CVE-2016-0186 HIGH · 7.5 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Microsoft
- CVE-2016-0184 HIGH · 8.8 Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold… Microsoft
- CVE-2016-0183 HIGH · 8.8 The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010… Microsoft
- CVE-2016-0182 HIGH · 7.8 Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to… Microsoft
- CVE-2016-0181 MEDIUM · 5.5 Met Microsoft Windows 10 Gold en 1511 kunnen lokale gebruikers het Virtual Secure Mode Hypervisor Code Integrity (HVCI) -beveiligingsmechanisme omzeilen en RWX-markeringen van kernelmoduspagina's uitvoeren… Microsoft
- CVE-2016-0180 HIGH · 7.8 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Microsoft
- CVE-2016-0179 HIGH · 7.8 Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary… Microsoft
- CVE-2016-0178 HIGH · 8.8 The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold… Microsoft
- CVE-2016-0176 HIGH · 7.8 dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server… Microsoft
- CVE-2016-0175 LOW · 3.3 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0174 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0173 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0171 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0170 HIGH · 8.8 GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Microsoft
- CVE-2016-0169 MEDIUM · 6.5 GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Microsoft
- CVE-2016-0168 MEDIUM · 6.5 GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Microsoft
- CVE-2016-0152 HIGH · 7.8 Internet Information Services (IIS) in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles library loading, which allows local users to gain privileges via a… Microsoft
- CVE-2016-0149 MEDIUM · 5.9 Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obtain sensitive cleartext information via vectors involving injection… Microsoft
- CVE-2016-0140 HIGH · 7.8 Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to… Microsoft
- CVE-2016-0126 HIGH · 7.8 Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory… Microsoft
- CVE-2016-4561 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML… Ikiwiki Debian
- CVE-2016-4556 HIGH · 7.5 Een kwetsbaarheid in Esi.cc in Squid 3.x vóór 3.5.18 en 4.x vóór 4.0.10, waarbij de server een dubbele free-aanval uitvoert, stelt externe servers in staat… Squid-cache Oracle Canonical
- CVE-2016-4555 HIGH · 7.5 client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes… Squid-cache Canonical Oracle
- CVE-2016-4554 HIGH · 8.6 mime_header.cc in Squid vóór 3.5.18 stelt externe aanvallers in staat om beoogde beperkingen van dezelfde oorsprong te omzeilen en mogelijk cachevergiftigingsaanvallen uit te voeren via… Oracle Squid-cache Canonical
- CVE-2016-4553 HIGH · 8.6 client_side.cc in Squid vóór 3.5.18 en 4.x vóór 4.0.10 negeert de Host-header niet goed wanneer absolute-URI wordt verstrekt, waardoor externe aanvallers cachevergiftigingsaanvallen kunnen uitvoeren via… Canonical Squid-cache Oracle
- CVE-2016-4350 CRITICAL · 9.8 Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storage Manager (STM)) before 6.2.3 allow remote… Solarwinds
- CVE-2016-3105 HIGH · 8.8 The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name. Debian Mercurial
- CVE-2015-5208 MEDIUM · 4.4 Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link. Apache
- CVE-2015-5207 MEDIUM · 5.3 Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified… Apache
- CVE-2016-4477 HIGH · 7.8 wpa_supplicant 0.4.0 tot en met 2.5 verwerpt geen n- en r-tekens in wachtwoordzinparameters, waardoor lokale gebruikers willekeurige bibliotheeklading kunnen activeren en bijgevolg privileges kunnen verkrijgen,… Google
- CVE-2016-4476 HIGH · 7.5 hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject n and r characters in passphrase parameters, which allows remote attackers to cause… W1.fi Canonical
- CVE-2016-2462 HIGH · 7.0 OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via… Google
- CVE-2016-2461 HIGH · 7.0 OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via… Google
- CVE-2016-2460 MEDIUM · 5.5 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers… Google
- CVE-2016-2459 MEDIUM · 5.5 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers… Google
- CVE-2016-2458 MEDIUM · 5.5 The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments, which allows… Google
- CVE-2016-2457 MEDIUM · 5.5 server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes… Google
- CVE-2016-2456 HIGH · 7.0 The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27275187. Google
- CVE-2016-2454 MEDIUM · 5.5 The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service (reboot) via a… Google
- CVE-2016-2453 HIGH · 7.0 The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27549705. Google