CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0857 CRITICAL · 9.8 Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within… Tardiff Project Debian
- CVE-2016-2062 HIGH · 7.8 The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for… Linux Google
- CVE-2016-2059 HIGH · 7.0 The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions… Linux Google
- CVE-2016-1392 HIGH · 7.4 Open redirect-kwetsbaarheid in Cisco Prime Collaboration Assurance Software 10.5 tot en met 11.0 stelt externe aanvallers in staat om gebruikers om te leiden naar willekeurige… Cisco
- CVE-2016-1387 CRITICAL · 9.8 De XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4 en 7.3.5 en Collaboration Endpoint (CE) 8.0.0, 8.0.1 en 8.1.0 in… Cisco
- CVE-2016-1373 HIGH · 8.6 De gadgets-integratie-API in Cisco Finesse 8.5(1) tot en met 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1) SU1.1, 9.1(1)ES1 tot en met 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)… Cisco
- CVE-2016-1369 HIGH · 7.5 De module Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) voor Cisco ASA met FirePOWER Services 5.3.1 tot en met 6.0.0 stelt kernellogging… Cisco
- CVE-2016-1368 HIGH · 7.5 Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for… Cisco
- CVE-2016-4535 HIGH · 7.5 Integer-ondertekeningsfout in de AV-engine vóór dat 8145, zoals gebruikt in McAfee LiveSafe 14.0, stelt externe aanvallers in staat om een denial of service (geheugenbeschadiging en… Mcafee
- CVE-2016-4534 LOW · 3.0 Met de McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 vóór Hotfix 1123565 (8.8.0.1546) op Windows kunnen lokale beheerders de beoogde zelfbeschermingsregels omzeilen en… Mcafee Microsoft
- CVE-2016-4351 CRITICAL · 9.8 SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL… Trendmicro
- CVE-2016-4008 MEDIUM · 5.9 The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service… Canonical Opensuse Gnu Fedoraproject
- CVE-2016-3717 MEDIUM · 5.5 The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. Canonical Redhat Imagemagick
- CVE-2016-3716 LOW · 3.3 The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image. Canonical Imagemagick Redhat
- CVE-2016-2168 MEDIUM · 6.5 The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to… Apache
- CVE-2016-2167 MEDIUM · 6.8 De canonicalize_username-functie in svnserve/cyrus_auth.c in Apache Subversion vóór 1.8.16 en 1.9.x vóór 1.9.4, wanneer Cyrus SASL-authenticatie wordt gebruikt, stelt externe aanvallers in staat om de… Apache
- CVE-2016-2176 HIGH · 8.2 The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or… Openssl
- CVE-2016-2109 HIGH · 7.5 The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial… Openssl Redhat
- CVE-2016-2108 CRITICAL · 9.8 The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer… Redhat Openssl Google
- CVE-2016-2107 MEDIUM · 5.9 The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers… Redhat Opensuse Openssl Google
- CVE-2016-2106 HIGH · 7.5 Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Openssl Redhat
- CVE-2016-2105 HIGH · 7.5 Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Redhat Opensuse Oracle Apple
- CVE-2000-1254 HIGH · 7.5 crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat… Openssl
- CVE-2016-0895 MEDIUM · 4.3 Met EMC RSA Data Loss Prevention 9.6 before SP2 P5 kunnen externe aanvallers clickjacking-aanvallen uitvoeren via website-elementen met bewerkte transparantie of ondoorzichtigheid. Emc
- CVE-2016-0894 MEDIUM · 6.3 EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter. Emc
- CVE-2016-0893 MEDIUM · 4.3 EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages. Emc
- CVE-2016-0892 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via… Emc
- CVE-2016-3951 MEDIUM · 4.6 Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly… Canonical Novell Suse Linux
- CVE-2016-3689 MEDIUM · 4.6 The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a… Novell Linux Canonical
- CVE-2016-3140 MEDIUM · 4.6 The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Canonical Linux Novell
- CVE-2016-3138 MEDIUM · 4.6 The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Linux Canonical Novell
- CVE-2016-3137 MEDIUM · 4.6 drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a… Novell Canonical Linux
- CVE-2016-3136 MEDIUM · 4.6 De functie mct_u232_msr_to_state in drivers/usb/serial/mct_u232.c in de Linux-kernel vóór 4.5.1 stelt fysiek nabije aanvallers in staat om een denial of service (NULL pointer dereference en… Linux Novell Canonical
- CVE-2016-2854 HIGH · 7.8 The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges… Linux
- CVE-2016-2853 HIGH · 7.8 De aufs-module voor de Linux-kernel 3.x en 4.x beperkt de mount-naamruimte niet goed, waardoor lokale gebruikers privileges kunnen krijgen door een aufs-bestandssysteem bovenop een Fuse-bestandssysteem… Linux
- CVE-2016-2188 MEDIUM · 4.6 The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Novell Linux Canonical
- CVE-2016-2187 MEDIUM · 4.6 The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Canonical Linux Novell
- CVE-2016-2186 MEDIUM · 4.6 The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Linux Novell Canonical
- CVE-2016-2185 MEDIUM · 4.6 The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Canonical Linux Novell
- CVE-2016-2117 HIGH · 7.5 The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel… Oracle Canonical Linux
- CVE-2016-2070 HIGH · 7.5 The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash)… Linux
- CVE-2016-2053 MEDIUM · 4.7 Met de functie asn1_ber_decoder in lib/asn1_decoder.c in de Linux-kernel vóór 4.3 kunnen aanvallers een denial of service (paniek) veroorzaken via een ASN.1 ber-bestand zonder openbare… Linux
- CVE-2016-1576 HIGH · 7.8 The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting… Canonical Linux
- CVE-2016-1575 HIGH · 7.8 The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by… Linux Canonical
- CVE-2015-8839 MEDIUM · 5.1 Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption)… Linux Canonical
- CVE-2015-8830 HIGH · 7.8 Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have… Linux
- CVE-2015-8746 HIGH · 7.5 fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers… Linux
- CVE-2015-8324 MEDIUM · 4.6 De ext4-implementatie in de Linux-kernel vóór 2.6.34 volgt de initialisatie van bepaalde gegevensstructuren niet goed, waardoor fysiek nabije aanvallers een denial of service (NULL pointer… Linux
- CVE-2015-8019 HIGH · 7.8 De functie skb_copy_and_csum_datagram_iovec in net/core/datagram.c in de Linux-kernels 3.14.54 en 3.18.22 accepteert geen lengteargument, waardoor lokale gebruikers een denial-of-serviceaanval (geheugenbeschadiging) kunnen uitvoeren of mogelijk andere… Linux
- CVE-2015-4178 MEDIUM · 5.5 The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users… Linux