CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-6479 MEDIUM · 4.3 ACEmanager in Sierra Wireless ALEOS 4.4.2 en eerder op ES440-, ES450-, GX400-, GX440-, GX450- en LS300-apparaten stelt externe aanvallers in staat om het gefilterde logs.txt-bestand… Sierrawireless
- CVE-2015-6360 HIGH · 7.5 The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug… Cisco
- CVE-2016-2202 MEDIUM · 5.5 The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to… Symantec
- CVE-2016-2003 CRITICAL · 9.8 HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to… Hp
- CVE-2016-2002 CRITICAL · 9.8 Met de validateAdminConfig-handler in de Analytics Management Console in HPE Vertica 7.0.x vóór 7.0.2.12, 7.1.x vóór 7.1.2-12 en 7.2.x vóór 7.2.2-1 kunnen aanvallers op afstand… Opentext
- CVE-2016-1384 HIGH · 7.5 The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted… Cisco
- CVE-2016-0891 HIGH · 8.8 Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators. Emc
- CVE-2015-8842 LOW · 3.3 tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. Opensuse
- CVE-2015-7802 MEDIUM · 5.5 gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF… Optipng Project Canonical
- CVE-2015-7801 HIGH · 8.8 Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file. Optipng Project Canonical
- CVE-2014-9770 LOW · 3.3 tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information… Opensuse
- CVE-2016-3628 HIGH · 8.8 Bufferoverloop in tibemsd in de server in Tibco Enterprise Message Service (EMS) vóór 8.3.0 en EMS Appliance vóór 2.4.0 stelt op afstand geverifieerde gebruikers in… Tibco
- CVE-2016-2390 MEDIUM · 5.9 The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl… Squid-cache
- CVE-2016-0741 HIGH · 7.5 slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection… Redhat Fedoraproject
- CVE-2015-8779 CRITICAL · 9.8 Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial… Suse Opensuse Canonical Debian
- CVE-2015-8778 CRITICAL · 9.8 Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or… Fedoraproject Debian Canonical Gnu
- CVE-2015-8776 CRITICAL · 9.1 The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash)… Suse Opensuse Canonical Debian
- CVE-2015-7511 LOW · 2.0 Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by… Gnupg Debian Canonical
- CVE-2015-1776 MEDIUM · 6.2 Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk… Apache
- CVE-2014-9765 HIGH · 8.8 Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file. Canonical Debian Xdelta Opensuse
- CVE-2014-9761 CRITICAL · 9.8 Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application… Suse Opensuse Fedoraproject Gnu
- CVE-2016-4040 HIGH · 7.2 SQL-injectiekwetsbaarheid in het Workflowscherm in dotCMS vóór 3.3.2 stelt externe beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de orderby-parameter. Dotcms
- CVE-2016-3960 HIGH · 8.8 Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly… Xen Fedoraproject Oracle
- CVE-2016-3688 MEDIUM · 6.5 SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr. Dotcms
- CVE-2016-3186 MEDIUM · 6.2 Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted… Opensuse Libtiff
- CVE-2015-5479 MEDIUM · 6.5 The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a… Ubuntu Libav Opensuse
- CVE-2016-3972 LOW · 2.7 Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the… Dotcms
- CVE-2016-3971 MEDIUM · 4.8 Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to… Dotcms
- CVE-2016-3943 HIGH · 7.8 Panda Endpoint Administration Agent voor 7.50.00 uur, zoals gebruikt in Panda Security for Business-producten voor Windows, gebruikt een zwakke ACL voor de Panda Security/WaAgent-directory en… Watchguard
- CVE-2016-3941 MEDIUM · 5.5 Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash)… Videolan Canonical
- CVE-2015-7378 HIGH · 7.8 Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to… Watchguard
- CVE-2016-4036 MEDIUM · 5.5 Het quagga-pakket vóór 0.99.23-2.6.1 in openSUSE en SUSE Linux Enterprise Server 11 SP 1 gebruikt zwakke machtigingen voor /etc/quagga, waarmee lokale gebruikers gevoelige informatie kunnen… Opensuse
- CVE-2016-3950 MEDIUM · 6.5 Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via crafted packets. Huawei
- CVE-2016-3071 HIGH · 7.5 Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform. Libreswan Fedoraproject
- CVE-2015-8106 HIGH · 7.8 Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in… Latex2rtf Project Fedoraproject
- CVE-2015-7552 HIGH · 7.8 Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary… Opensuse
- CVE-2016-1659 CRITICAL · 9.8 Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Debian Opensuse Suse Canonical
- CVE-2016-1658 MEDIUM · 4.3 The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same… Novell Opensuse Google Debian
- CVE-2016-1657 MEDIUM · 4.3 The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar… Debian Novell Opensuse Google
- CVE-2016-1656 HIGH · 7.5 The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors. Google Opensuse Suse
- CVE-2016-1655 HIGH · 8.8 Google Chrome vóór 50.0.2661.75 houdt er niet naar behoren rekening mee dat frameverwijdering kan optreden tijdens het uitvoeren van callback, waardoor externe aanvallers een denial… Debian Opensuse Suse Google
- CVE-2016-1654 MEDIUM · 6.5 The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service… Debian Opensuse Suse Google
- CVE-2016-1653 HIGH · 8.8 The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of… Debian Opensuse Suse Canonical
- CVE-2016-1652 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary… Debian Opensuse Suse Google
- CVE-2016-1651 HIGH · 8.1 fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, zoals gebruikt in Google Chrome vóór 50.0.2661.75, implementeert de functies sycc420_to_rgb en sycc422_to_rgb niet correct, waardoor aanvallers op afstand gevoelige informatie uit… Google Debian Opensuse Suse
- CVE-2016-2427 MEDIUM · 5.5 De AES-GCM-specificatie in RFC 5084, zoals gebruikt in Android 5.x en 6.x, beveelt 12 octetten aan voor het parameterveld aes-ICVlen, wat het voor aanvallers gemakkelijker… Bouncycastle Google
- CVE-2016-2426 MEDIUM · 5.5 server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a… Google
- CVE-2016-2425 MEDIUM · 5.5 mail/compose/ComposeActivity.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 supports file:///data attachments, which allows attackers… Google
- CVE-2016-2424 MEDIUM · 5.5 server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mismanages certain authority data, which allows attackers… Google
- CVE-2016-2423 MEDIUM · 6.1 server/telecom/CallsManager.java in Telephony in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-04-01 niet goed overwegen of een apparaat is… Google