CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2114 MEDIUM · 5.9 De SMB1-protocolimplementatie in Samba 4.x vóór 4.2.11, 4.3.x vóór 4.3.8 en 4.4.x vóór 4.4.2 herkent de instelling "server signing = mandatory" niet, waardoor man-in-the-middle-aanvallers SMB-servers… Samba Canonical
- CVE-2016-2113 HIGH · 7.4 Samba 4.x vóór 4.2.11, 4.3.x vóór 4.3.8 en 4.4.x vóór 4.4.2 verifieert geen X.509-certificaten van TLS-servers, waardoor man-in-the-middle-aanvallers LDAPS- en HTTPS-servers kunnen vervalsen en gevoelige… Samba Canonical
- CVE-2016-2112 MEDIUM · 5.9 The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap… Samba Canonical
- CVE-2016-2111 MEDIUM · 6.3 The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote… Samba Canonical
- CVE-2016-2110 MEDIUM · 5.9 The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks… Samba Canonical
- CVE-2015-5370 MEDIUM · 5.9 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to… Samba Canonical
- CVE-2016-3126 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or… Blackberry
- CVE-2016-2204 HIGH · 8.2 The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input. Symantec
- CVE-2016-2203 HIGH · 7.8 Met de beheerconsole op Symantec Messaging Gateway (SMG) Apparaatapparaten vóór 10.6.1 kunnen lokale gebruikers een gecodeerd AD-wachtwoord ontdekken door gebruik te maken van bepaalde leesrechten. Symantec
- CVE-2016-1918 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or… Blackberry
- CVE-2016-1917 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or… Blackberry
- CVE-2016-1916 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script… Blackberry
- CVE-2016-1036 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script… Adobe
- CVE-2015-8823 HIGH · 8.8 Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and… Microsoft Adobe Apple Google
- CVE-2016-4065 HIGH · 7.8 The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial… Foxitsoftware
- CVE-2016-4064 HIGH · 7.8 Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via… Foxitsoftware
- CVE-2016-4063 HIGH · 7.8 Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number… Foxitsoftware
- CVE-2016-4062 MEDIUM · 5.5 Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang)… Foxitsoftware
- CVE-2016-4061 HIGH · 7.5 Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream. Foxitsoftware
- CVE-2016-4060 HIGH · 7.5 Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Foxitsoftware
- CVE-2016-4059 HIGH · 7.8 Use-after-free kwetsbaarheid in Foxit Reader en PhantomPDF vóór 7.3.4 op Windows stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigde… Foxitsoftware
- CVE-2016-1596 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via… Novell
- CVE-2016-1595 MEDIUM · 6.5 LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information… Novell
- CVE-2016-1594 MEDIUM · 6.5 Met Micro Focus Novell Service Desk before 7.2 kunnen op afstand geverifieerde gebruikers willekeurige bijlagen lezen via een verzoek naar een LiveTime.woa-URL, zoals blijkt uit… Novell
- CVE-2016-1593 HIGH · 7.2 Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary… Novell
- CVE-2016-3145 MEDIUM · 4.6 Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk… Lexmark
- CVE-2016-2354 HIGH · 8.8 The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands… Lemurmonitors
- CVE-2016-2306 HIGH · 7.5 The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing the network. Ecava
- CVE-2016-2305 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Ecava
- CVE-2016-2304 MEDIUM · 4.3 Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for… Ecava
- CVE-2016-2303 MEDIUM · 5.3 CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via… Ecava
- CVE-2016-2302 MEDIUM · 5.3 Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages. Ecava
- CVE-2016-2301 MEDIUM · 6.3 SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Ecava
- CVE-2016-2300 MEDIUM · 6.5 Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors. Ecava
- CVE-2016-2299 HIGH · 7.3 SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Ecava
- CVE-2016-3977 MEDIUM · 5.5 Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color… Opensuse Giflib Project
- CVE-2016-3190 HIGH · 7.5 The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a… Opensuse Cairographics
- CVE-2013-7449 MEDIUM · 6.5 The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the… Canonical Xchat Hexchat Project
- CVE-2016-3466 CRITICAL · 9.1 Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via… Oracle
- CVE-2016-3465 MEDIUM · 5.5 Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS. Oracle
- CVE-2016-3464 MEDIUM · 5.7 Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related… Oracle
- CVE-2016-3463 MEDIUM · 6.1 Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors… Oracle
- CVE-2016-3462 MEDIUM · 5.5 Niet-gespecificeerde kwetsbaarheid in Oracle Sun Solaris 11.3 stelt lokale gebruikers in staat om de beschikbaarheid te beïnvloeden via vectoren met betrekking tot Network Configuration Service. Oracle
- CVE-2016-3461 HIGH · 7.2 Unspecified vulnerability in the MySQL Enterprise Monitor component in Oracle MySQL 3.0.25 and earlier and 3.1.2 and earlier allows remote administrators to affect confidentiality, integrity,… Oracle
- CVE-2016-3460 MEDIUM · 5.4 Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related… Oracle
- CVE-2016-3457 MEDIUM · 4.6 Unspecified vulnerability in the PeopleSoft Enterprise HCM ePerformance component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors… Oracle
- CVE-2016-3456 HIGH · 8.2 Unspecified vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul component in Oracle Supply Chain Products Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to… Oracle
- CVE-2016-3455 HIGH · 8.6 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and… Oracle
- CVE-2016-3454 CRITICAL · 9.0 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via… Oracle
- CVE-2016-3449 HIGH · 8.3 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment. Oracle