CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2056 HIGH · 8.8 xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in… Xymon Debian
- CVE-2016-2055 HIGH · 7.5 xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config"… Xymon Debian
- CVE-2016-2054 CRITICAL · 9.8 Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a… Debian Xymon
- CVE-2016-0775 MEDIUM · 6.5 Bufferoverloop in de ImagingFliDecode-functie in libImaging/FliDecode.c in Pillow voor 3.1.1 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een… Python Debian
- CVE-2016-0740 MEDIUM · 6.5 Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file. Python Debian
- CVE-2015-8807 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers… Fedoraproject Horde Debian
- CVE-2015-8843 HIGH · 7.4 The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available,… Foxitsoftware
- CVE-2015-8606 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or… Silverstripe
- CVE-2015-8555 HIGH · 8.6 Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended… Citrix Xen
- CVE-2015-8553 MEDIUM · 6.5 Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control… Xen Redhat
- CVE-2015-8552 MEDIUM · 4.4 The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest… Xen Canonical Debian Novell
- CVE-2015-8551 MEDIUM · 6.0 The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest… Linux Debian Opensuse Suse
- CVE-2015-8080 HIGH · 7.5 Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua… Redislabs Debian Opensuse Redhat
- CVE-2015-7555 MEDIUM · 5.5 Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical… Giflib Project Fedoraproject
- CVE-2015-7545 CRITICAL · 9.8 The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do… Git Project Redhat Canonical Opensuse
- CVE-2015-0861 MEDIUM · 4.3 model/modelstorage.py in trytond 3.2.x voor 3.2.10, 3.4.x voor 3.4.8, 3.6.x voor 3.6.5, en 3.8.x voor 3.8.1 staat op afstand geverifieerde gebruikers toe om beoogde toegangsbeperkingen… Tryton Debian
- CVE-2016-4007 CRITICAL · 9.8 Meerdere niet-gespecificeerde kwetsbaarheden in het obs-service-extract_file-pakket vóór 0.3-5.1 in openSUSE Leap 42.1 en vóór 0.3-3.1 in openSUSE 13.2 stellen aanvallers in staat om willekeurige opdrachten… Opensuse
- CVE-2016-2780 HIGH · 7.8 Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse… Huawei
- CVE-2016-2116 MEDIUM · 5.7 Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted… Canonical Jasper Project
- CVE-2016-1577 HIGH · 7.6 Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute… Canonical Jasper Project
- CVE-2016-1496 MEDIUM · 5.5 The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230… Huawei
- CVE-2016-1495 HIGH · 7.8 Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers… Huawei
- CVE-2015-8682 MEDIUM · 6.1 The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350… Huawei
- CVE-2015-8620 HIGH · 7.8 Op heap gebaseerde bufferoverloop in het Avast-virtualisatiestuurprogramma (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier en Free Antivirus vóór 11.1.2253 stelt lokale gebruikers in staat… Avast
- CVE-2015-8304 HIGH · 7.8 Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or… Huawei
- CVE-2014-9766 CRITICAL · 9.8 Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly… Pixman Canonical
- CVE-2014-6276 MEDIUM · 4.3 schema.py in Roundup voor 1.5.1 beperkt attributen die zijn opgenomen in standaard gebruikersmachtigingen niet correct, waardoor op afstand geverifieerde gebruikers mogelijk gevoelige gebruikersinformatie kunnen verkrijgen… Roundup-tracker Debian
- CVE-2016-2118 HIGH · 7.5 The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows… Samba Canonical Debian
- CVE-2016-2001 HIGH · 7.4 HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors. Hp
- CVE-2016-1377 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug… Cisco
- CVE-2016-1376 MEDIUM · 5.3 Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors,… Cisco
- CVE-2016-1035 HIGH · 7.5 Adobe RoboHelp Server 9 voor 9.0.1 misbruikt SQL-query's, waardoor aanvallers gevoelige informatie kunnen verkrijgen via niet-gespecificeerde vectoren. Adobe
- CVE-2016-1034 CRITICAL · 9.1 The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or… Adobe
- CVE-2016-0887 MEDIUM · 5.9 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE… Dell
- CVE-2016-0166 HIGH · 7.5 Met Microsoft Internet Explorer 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2016-0164 HIGH · 7.5 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2016-0161 MEDIUM · 6.5 Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than… Microsoft
- CVE-2016-0160 HIGH · 7.8 Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability." Microsoft
- CVE-2016-0159 HIGH · 7.5 Met Microsoft Internet Explorer 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2016-0158 MEDIUM · 6.5 Met Microsoft Edge kunnen externe aanvallers het Same Origin-beleid omzeilen via niet-gespecificeerde vectoren, ook bekend als "Microsoft Edge Elevation of Privilege Vulnerability", een andere kwetsbaarheid… Microsoft
- CVE-2016-0157 HIGH · 7.5 Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge… Microsoft
- CVE-2016-0156 HIGH · 7.5 Met Microsoft Edge kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook wel "Microsoft Edge Memory… Microsoft
- CVE-2016-0155 HIGH · 7.5 Met Microsoft Edge kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook wel "Microsoft Edge Memory… Microsoft
- CVE-2016-0154 HIGH · 7.5 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Microsoft
- CVE-2016-0153 HIGH · 7.8 OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2016-0150 HIGH · 7.5 HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests, aka… Microsoft
- CVE-2016-0148 HIGH · 7.8 Microsoft .NET Framework 4.6 en 4.6.1 misbruiken het laden van bibliotheken, waardoor lokale gebruikers privileges kunnen verkrijgen via een vervaardigde applicatie, ook bekend als ".NET… Microsoft
- CVE-2016-0147 HIGH · 8.8 Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability." Microsoft
- CVE-2016-0145 HIGH · 8.8 The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and… Microsoft
- CVE-2016-0143 HIGH · 7.8 The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft