CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-4177 MEDIUM · 5.5 The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted,… Linux
- CVE-2015-4176 MEDIUM · 5.5 fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root… Linux
- CVE-2015-4170 MEDIUM · 4.7 Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and… Linux Redhat
- CVE-2015-2686 HIGH · 7.8 net/socket.c in de Linux-kernel 3.19 vóór 3.19.3 valideert bepaalde bereikgegevens niet voor (1) sendto en (2) recvfrom systeemaanroepen, waardoor lokale gebruikers privileges kunnen verkrijgen door… Linux
- CVE-2015-2672 MEDIUM · 5.5 The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr_replacement pointers and consequently does not provide any protection against instruction faulting,… Linux
- CVE-2015-1573 MEDIUM · 5.5 The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to… Linux
- CVE-2015-1350 MEDIUM · 5.5 The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows… Linux Redhat
- CVE-2014-9717 MEDIUM · 6.1 fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to… Linux
- CVE-2012-6701 HIGH · 7.8 Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact… Linux
- CVE-2012-6689 HIGH · 7.8 The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified… Linux
- CVE-2011-5321 MEDIUM · 5.5 De tty_open-functie in drivers/tty/tty_io.c in de Linux-kernel vóór 3.1.1 misbruikt een driver-lookup-fout, waardoor lokale gebruikers een denial of service (NULL pointer dereference en systeemcrash) kunnen… Linux
- CVE-2008-7316 MEDIUM · 5.5 mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers… Linux
- CVE-2003-1604 HIGH · 7.5 The redirect_target function in net/ipv4/netfilter/ipt_REDIRECT.c in the Linux kernel before 2.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS)… Linux
- CVE-2016-4421 MEDIUM · 5.9 epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (deep… Wireshark
- CVE-2016-4420 MEDIUM · 5.9 Met de NFS-dissector in Wireshark 2.x vóór 2.0.2 kunnen externe aanvallers een denial of service (applicatiecrash) veroorzaken via een vervaardigd pakket. Wireshark
- CVE-2016-4419 MEDIUM · 5.9 epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service (large loop)… Wireshark
- CVE-2016-4418 MEDIUM · 5.9 epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer… Wireshark
- CVE-2016-4417 MEDIUM · 5.9 Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a… Wireshark
- CVE-2016-4416 MEDIUM · 5.9 epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of service… Wireshark
- CVE-2016-4415 MEDIUM · 5.9 wiretap/vwr.c in de Ixia IxVeriWave-bestandsparser in Wireshark 2.x vóór 2.0.2 verhoogt ten onrechte een bepaald aantal octetten, waardoor externe aanvallers een denial of service (op… Wireshark
- CVE-2015-8325 HIGH · 7.8 The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files… Debian Openbsd Canonical
- CVE-2016-2820 MEDIUM · 4.3 The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it… Mozilla
- CVE-2016-2817 MEDIUM · 5.4 The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows… Mozilla
- CVE-2016-2816 MEDIUM · 6.5 Mozilla Firefox vóór 46.0 stelt externe aanvallers in staat om het beveiligingsmechanisme van het Content Security Policy (CSP) te omzeilen via het contenttype multipart/x-mixed-replace. Mozilla
- CVE-2016-2814 HIGH · 8.8 Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1… Mozilla
- CVE-2016-2813 MEDIUM · 6.5 Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information… Google Mozilla
- CVE-2016-2812 HIGH · 7.5 Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute… Mozilla
- CVE-2016-2811 HIGH · 8.8 Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors… Mozilla
- CVE-2016-2810 MEDIUM · 5.0 Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as… Google Mozilla
- CVE-2016-2809 MEDIUM · 5.5 The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file… Microsoft Mozilla
- CVE-2016-2808 HIGH · 7.5 The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote… Mozilla
- CVE-2016-2807 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote… Mozilla Opensuse Suse
- CVE-2016-2806 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial… Debian Opensuse Suse Mozilla
- CVE-2016-2805 HIGH · 8.8 Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and… Mozilla
- CVE-2016-2804 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application… Mozilla
- CVE-2016-1343 CRITICAL · 10.0 Met de XML-parser in Cisco Information Server (CIS) 6.2 kunnen aanvallers op afstand willekeurige bestanden lezen of een denial of service (CPU- en geheugenverbruik) veroorzaken… Cisco
- CVE-2016-1201 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack the authentication of administrators. Lockon
- CVE-2016-1200 MEDIUM · 6.3 Met het beheerscherm in LOCKON EC-CUBE 3.0.7 tot en met 3.0.9 kunnen op afstand geverifieerde gebruikers beoogde toegangsbeperkingen omzeilen via niet-gespecificeerde vectoren, een andere kwetsbaarheid… Lockon
- CVE-2016-1199 MEDIUM · 5.3 The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors,… Lockon
- CVE-2016-1111 HIGH · 8.8 Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous… Adobe Apple Microsoft
- CVE-2016-4349 HIGH · 7.8 Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll,… Cisco
- CVE-2016-1389 HIGH · 7.4 Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… Cisco
- CVE-2016-1386 HIGH · 7.5 The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug… Cisco
- CVE-2016-1205 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject… Shiro8
- CVE-2016-0211 MEDIUM · 4.3 IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a… Ibm
- CVE-2016-3672 HIGH · 7.8 The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local… Canonical Novell Linux
- CVE-2016-3156 MEDIUM · 5.5 The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service… Novell Canonical Linux
- CVE-2016-3139 MEDIUM · 4.6 The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Novell Linux
- CVE-2016-3135 HIGH · 7.8 Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause… Linux Canonical
- CVE-2016-3134 HIGH · 8.4 The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a… Novell Linux