CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0139 HIGH · 7.8 Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft… Microsoft
- CVE-2016-0136 HIGH · 7.8 Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010… Microsoft
- CVE-2016-0135 HIGH · 8.4 The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation… Microsoft
- CVE-2016-0128 MEDIUM · 6.8 The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server… Microsoft
- CVE-2016-0127 HIGH · 7.8 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation… Microsoft
- CVE-2016-0122 HIGH · 7.8 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and… Microsoft
- CVE-2016-0090 HIGH · 7.1 Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2 en Windows 10 stelt gastgebruikers van het besturingssysteem in staat om gevoelige informatie uit het geheugen… Microsoft
- CVE-2016-0089 HIGH · 7.1 Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold en R2 en Windows 10 stelt gastgebruikers van het besturingssysteem in staat om gevoelige informatie uit… Microsoft
- CVE-2016-0088 CRITICAL · 9.3 Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold en R2 en Windows 10 stelt gastgebruikers van het besturingssysteem in staat om willekeurige code uit… Microsoft
- CVE-2016-4004 MEDIUM · 4.9 Directory traversal kwetsbaarheid in Dell OpenManage Server Administrator (OMSA) 8.2 stelt externe geverifieerde beheerders in staat om willekeurige bestanden te lezen via een .. (dot… Dell
- CVE-2016-3657 CRITICAL · 9.8 Een bufferoverloop in de GlobalProtect Portal van Palo Alto Networks PAN-OS vóór versie 5.0.18, 6.0.x vóór 6.0.13, 6.1.x vóór 6.1.10 en 7.0.x vóór 7.0.5 stelt… Paloaltonetworks
- CVE-2016-3656 HIGH · 7.5 The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause… Paloaltonetworks
- CVE-2016-3655 CRITICAL · 9.8 De beheerwebinterface in Palo Alto Networks PAN-OS vóór 5.0.18, 6.0.x vóór 6.0.13, 6.1.x vóór 6.1.10 en 7.0.x vóór 7.0.5 stelt aanvallers op afstand in staat… Paloaltonetworks
- CVE-2016-3654 HIGH · 7.2 The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x… Paloaltonetworks
- CVE-2016-2405 HIGH · 8.8 Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted… Huawei
- CVE-2015-7520 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before… Apache
- CVE-2015-5347 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow… Apache
- CVE-2016-4003 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in de URLDecoder-functie in JRE voor 1.8, zoals gebruikt in Apache Struts 2.x voor 2.3.28, bij gebruik van een enkele byte… Apache
- CVE-2016-3172 HIGH · 8.8 SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an… Cacti
- CVE-2016-3157 HIGH · 7.8 The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users… Xen Canonical
- CVE-2016-2162 MEDIUM · 6.1 Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting… Apache
- CVE-2016-0785 HIGH · 8.8 Apache Struts 2.x before 2.3.28 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation. Apache
- CVE-2016-3171 HIGH · 8.1 Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code… Php Drupal Debian
- CVE-2016-3170 MEDIUM · 5.3 The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain… Debian Drupal
- CVE-2016-3169 HIGH · 8.1 De User-module in Drupal 6.x vóór 6.38 en 7.x vóór 7.43 stelt externe aanvallers in staat om privileges te verkrijgen door gebruik te maken van… Debian Drupal
- CVE-2016-3168 MEDIUM · 6.4 De systeemmodule in Drupal 6.x vóór 6.38 en 7.x vóór 7.43 kan externe aanvallers in staat stellen om de authenticatie van sitebeheerders te kapen voor… Drupal Debian
- CVE-2016-3167 HIGH · 7.4 Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to… Php Drupal Debian
- CVE-2016-3166 MEDIUM · 5.9 CRLF-injectiekwetsbaarheid in de drupal_set_header-functie in Drupal 6.x vóór 6.38, bij gebruik met PHP vóór 5.1.2, stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren… Debian Drupal
- CVE-2016-3165 HIGH · 7.5 The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by… Drupal
- CVE-2016-3164 HIGH · 7.4 Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code… Drupal Debian
- CVE-2016-3163 HIGH · 7.5 Het XML-RPC-systeem in Drupal 6.x vóór 6.38 en 7.x vóór 7.43 kan het voor aanvallers op afstand gemakkelijker maken om brute-force-aanvallen uit te voeren via… Debian Drupal
- CVE-2016-3162 HIGH · 8.1 The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows remote authenticated users to bypass access restrictions and read, delete, or substitute… Drupal Debian
- CVE-2016-2558 HIGH · 8.4 The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows… Microsoft Nvidia
- CVE-2016-2557 HIGH · 8.4 De Escape-interface in de Kernel Mode Driver-laag van de NVIDIA GPU-grafische driver R340 vóór 341.95 en R352 vóór 354.74 op Windows stelt lokale gebruikers in… Nvidia Microsoft
- CVE-2016-2556 HIGH · 7.8 The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows improperly… Microsoft Nvidia
- CVE-2016-2170 CRITICAL · 9.8 Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the… Apache
- CVE-2016-2166 MEDIUM · 6.5 De (1) proton.reactor.Connector, (2) proton.reactor.Container en (3) proton.utils.BlockingConnection-klassen in Apache Qpid Proton vóór 0.12.1 gebruiken ten onrechte een niet-versleutelde verbinding voor een amqps URI-schema wanneer… Apache Fedoraproject
- CVE-2016-2140 MEDIUM · 5.3 The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false,… Openstack
- CVE-2016-1866 HIGH · 8.1 Salt 2015.8.x vóór 2015.8.4 verwerkt niet-versleutelde berichten op de minion niet correct, waardoor man-in-the-middle-aanvallers willekeurige code kunnen uitvoeren door pakketten in de gegevensstroom van de… Saltstack Opensuse
- CVE-2016-0733 CRITICAL · 9.8 The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication… Apache
- CVE-2015-8702 HIGH · 8.6 The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in… Debian Inspircd
- CVE-2015-8537 MEDIUM · 5.3 app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed. Debian Redmine
- CVE-2015-8474 HIGH · 7.4 Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect… Debian Redmine
- CVE-2015-8473 MEDIUM · 4.3 The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages… Debian Redmine
- CVE-2015-8346 MEDIUM · 5.3 app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing… Redmine Debian
- CVE-2015-8021 MEDIUM · 4.3 Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0… F5
- CVE-2015-5167 MEDIUM · 6.5 The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API. Apache
- CVE-2015-3268 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the DisplayEntityField.getDescription method in ModelFormField.java in Apache OFBiz before 12.04.06 and 13.07.x before 13.07.03 allows remote attackers to inject arbitrary… Apache
- CVE-2016-3987 CRITICAL · 9.8 The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2)… Trendmicro
- CVE-2016-3986 HIGH · 7.8 Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to authenticode… Avast