CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0889 CRITICAL · 9.8 An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a… Dell
- CVE-2010-5325 CRITICAL · 9.8 Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and… Redhat Linuxfoundation Oracle
- CVE-2015-8677 MEDIUM · 6.5 Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus… Huawei
- CVE-2015-8676 HIGH · 7.5 Geheugenlekkage in Huawei S5300EI, S5300SI, S5310HI, S6300EI/S2350EI en S5300LI Campus-serie schakelaars met software V200R001C00 vóór V200R001SPH018, V200R002C00 vóór V200R003SPH011 en V200R003C00 vóór V200R003SPH011; S9300, S7700… Huawei
- CVE-2015-8336 MEDIUM · 4.3 Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors. Huawei
- CVE-2015-5247 MEDIUM · 6.5 The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by… Redhat Canonical
- CVE-2011-4600 MEDIUM · 5.9 The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow… Canonical Redhat
- CVE-2016-4018 HIGH · 7.3 The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive… Sap
- CVE-2016-4017 HIGH · 7.5 The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka… Sap
- CVE-2016-4016 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in SAP Manufacturing Integration and Intelligence (aka Mii, voorheen xMII) 15 stelt externe aanvallers in staat om willekeurig webscript of HTML… Sap
- CVE-2016-4015 HIGH · 7.5 Met de Enqueue Server in SAP NetWeaver JAVA AS 7.1 tot en met 7.4 kunnen externe aanvallers een denial of service (procescrash) veroorzaken via een… Sap
- CVE-2016-4014 HIGH · 8.6 XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote aanvallers to cause a denial of service (system… Sap
- CVE-2016-3079 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or… Redhat
- CVE-2016-2103 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_1680466951_oldfilterval parameter… Redhat
- CVE-2015-8560 HIGH · 7.3 Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands… Canonical Debian Linuxfoundation
- CVE-2015-8554 HIGH · 7.5 Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain… Xen
- CVE-2015-8550 HIGH · 8.2 Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain… Xen Novell
- CVE-2015-8540 HIGH · 8.8 Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before… Redhat Libpng Fedoraproject Debian
- CVE-2015-7999 HIGH · 8.1 Meerdere kwetsbaarheden voor SQL-injectie in de Administration Web UI-servlets in Citrix Command Center vóór 5.1 Build 36.7 en 5.2 vóór Build 44.11 stellen externe geverifieerde… Citrix
- CVE-2015-5343 HIGH · 7.6 Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial… Apache Debian
- CVE-2015-0284 MEDIUM · 5.4 Cross-site scripting (XSS) kwetsbaarheid in spacewalk-java in Spacewalk en Red Hat Satellite 5.7 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML… Redhat
- CVE-2016-1378 MEDIUM · 5.3 Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol… Cisco
- CVE-2016-1352 CRITICAL · 9.8 Met Cisco Unified Computing System (UCS) Central Software 1.3(1b) en eerder kunnen aanvallers op afstand willekeurige OS-commando's uitvoeren via een vervaardigd HTTP-verzoek, ook bekend als… Cisco
- CVE-2016-2313 HIGH · 8.8 auth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not… Cacti Opensuse
- CVE-2016-0787 MEDIUM · 5.9 The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to… Fedoraproject Opensuse Libssh2 Debian
- CVE-2016-0757 MEDIUM · 4.3 OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and… Openstack
- CVE-2016-0739 MEDIUM · 5.9 libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier… Redhat Canonical Libssh Fedoraproject
- CVE-2015-8806 HIGH · 7.5 dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the… Xmlsoft Canonical Debian
- CVE-2015-8784 MEDIUM · 6.5 The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated… Libtiff Debian
- CVE-2015-8683 MEDIUM · 5.5 The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. Libtiff Debian
- CVE-2015-8665 MEDIUM · 5.5 tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. Libtiff
- CVE-2015-3146 HIGH · 7.5 The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause… Libssh Canonical Debian Fedoraproject
- CVE-2015-1547 MEDIUM · 6.5 The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as… Debian Libtiff
- CVE-2014-9655 MEDIUM · 6.5 The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory… Debian Remotesensing
- CVE-2016-4009 CRITICAL · 9.8 Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new… Python
- CVE-2016-3982 HIGH · 8.8 Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write… Opensuse Debian Optipng Project Canonical
- CVE-2016-3981 HIGH · 7.8 Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or… Optipng Project Canonical Debian
- CVE-2016-3686 MEDIUM · 5.9 The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to… F5
- CVE-2016-3630 HIGH · 8.8 Met de binaire delta-decoder in Mercurial vóór 3.7.3 kunnen aanvallers op afstand willekeurige code uitvoeren via een (1) kloon, (2) push- of (3) pull-opdracht, gerelateerd… Fedoraproject Opensuse Mercurial Debian
- CVE-2016-3159 LOW · 3.8 The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows… Oracle Xen Fedoraproject Debian
- CVE-2016-3158 LOW · 3.8 De xrstor-functie in arch/x86/xstate.c in Xen 4.x verwerkt het schrijven naar de hardware FSW.ES-bit niet goed wanneer deze op amd64-processors wordt uitgevoerd, waardoor lokale gastbesturingssystemen… Xen Fedoraproject Oracle
- CVE-2016-3069 HIGH · 8.8 Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository. Mercurial Debian Suse Opensuse
- CVE-2016-3068 HIGH · 8.8 Mercurial voor 3.7.3 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigde git ext:: URL bij het klonen van een… Debian Mercurial Fedoraproject Redhat
- CVE-2016-2533 MEDIUM · 6.5 Bufferoverloop in de ImagingPcdDecode-functie in PcdDecode.c in Pillow vóór 3.1.1 en Python Imaging Library (pil) 1.1.7 en eerder stelt externe aanvallers in staat om een… Python Python Imaging Project Debian
- CVE-2016-2515 HIGH · 7.5 Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1)… Hawk Project
- CVE-2016-2228 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in horde/templates/topbar/_menubar.html.php in Horde Groupware vóór 5.2.12 en Horde Groupware Webmail Edition vóór 5.2.12 stelt externe aanvallers in staat om willekeurig… Debian Horde Fedoraproject
- CVE-2016-2191 MEDIUM · 6.5 Met de functie bmp_read_rows in pngxtern/pngxrbmp.c in OptiPNG vóór 0.7.6 kunnen externe aanvallers een denial of service (ongeldig geheugen schrijven en crashen) veroorzaken via een… Optipng Canonical Debian Opensuse
- CVE-2016-2084 HIGH · 7.4 F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build… F5
- CVE-2016-2058 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML… Debian Xymon
- CVE-2016-2057 LOW · 3.3 In Xymon 4.1.x, 4.2.x en 4.3.x vóór 4.3.25 gebruikt lib/xymond_ipc.c zwakke machtigingen (666) voor een niet-gespecificeerde IPC-berichtenwachtrij, waardoor lokale gebruikers willekeurige berichten kunnen injecteren door… Xymon Debian