CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3985 MEDIUM · 6.5 The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to… Pulsesecure
- CVE-2016-2857 HIGH · 8.4 The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the… Qemu Canonical Debian Redhat
- CVE-2016-1885 MEDIUM · 6.2 Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to… Freebsd
- CVE-2016-1568 HIGH · 8.8 Use-after-free kwetsbaarheid in hw/ide/ahci.c in QEMU, wanneer gebouwd met ondersteuning voor IDE AHCI-emulatie, stelt gastbesturingssysteemgebruikers in staat om een denial of service (instantiecrash) te veroorzaken… Qemu Redhat Debian
- CVE-2015-8841 CRITICAL · 9.8 Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number… Eset
- CVE-2015-8833 CRITICAL · 9.8 Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary… Cypherpunks
- CVE-2015-8108 MEDIUM · 5.3 The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before… Lenovo
- CVE-2015-5158 MEDIUM · 5.5 Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of… Qemu
- CVE-2015-8710 CRITICAL · 9.8 The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash),… Xmlsoft Debian
- CVE-2015-8708 HIGH · 7.3 Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving… Claws-mail
- CVE-2015-8614 HIGH · 7.3 Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to… Claws-mail Opensuse
- CVE-2015-8604 HIGH · 8.8 SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the… Cacti
- CVE-2015-8399 MEDIUM · 4.3 Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action. Atlassian
- CVE-2015-8398 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check. Atlassian
- CVE-2015-7528 MEDIUM · 5.3 Kubernetes vóór versie 1.2.0-alpha.5 stelt externe aanvallers in staat om willekeurige pod-logs te lezen via de containernaam. Kubernetes Redhat
- CVE-2015-7502 MEDIUM · 5.1 Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME) 5.5.0 do not properly encrypt data in the backend PostgreSQL database,… Redhat
- CVE-2015-7330 HIGH · 8.8 Puppet Enterprise 2015.3 vóór 2015.3.1 stelt externe aanvallers in staat om een host whitelist-beveiligingsmechanisme te omzeilen door gebruik te maken van het Puppet-communicatieprotocol. Puppet
- CVE-2015-5349 HIGH · 7.8 The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute… Apache
- CVE-2015-5329 HIGH · 7.3 The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes… Redhat
- CVE-2015-5313 LOW · 2.5 Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create… Redhat
- CVE-2015-5303 HIGH · 7.5 The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the… Openstack
- CVE-2015-5233 MEDIUM · 4.2 Voorman vóór 1.8.4 en 1.9.x vóór 1.9.1 passen view_hosts-machtigingen niet correct toe, waardoor (1) op afstand geverifieerde gebruikers met de view_reports-machtiging rapporten van willekeurige hosts… Theforeman Redhat
- CVE-2014-9759 MEDIUM · 5.3 Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via… Mantisbt
- CVE-2016-0735 HIGH · 8.8 Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy. Apache
- CVE-2015-0266 HIGH · 7.1 The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs. Apache
- CVE-2015-0265 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via… Apache
- CVE-2016-3678 HIGH · 7.5 Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via… Huawei
- CVE-2016-3676 MEDIUM · 6.4 Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to a fake… Huawei
- CVE-2016-3675 HIGH · 8.1 SQL-injectiekwetsbaarheid in Huawei Policy Center met software vóór V100R003C10SPC020 stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren… Huawei
- CVE-2016-3659 HIGH · 8.8 SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter. Cacti
- CVE-2016-3065 CRITICAL · 9.1 The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and… Postgresql
- CVE-2016-2385 CRITICAL · 9.8 Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to… Debian Kamailio
- CVE-2016-2193 HIGH · 7.5 PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging… Postgresql
- CVE-2016-1235 HIGH · 8.8 The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related… Oar Project Debian
- CVE-2012-6700 HIGH · 7.5 The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service… Debian Dhcpcd Project
- CVE-2012-6699 HIGH · 7.5 The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response. Debian Dhcpcd Project
- CVE-2012-6698 HIGH · 7.5 The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response. Debian Dhcpcd Project
- CVE-2016-2393 HIGH · 7.8 Lenovo Fingerprint Manager vóór 8.01.57 en Touch Fingerprint vóór 1.00.08 gebruiken zwakke ACL's voor niet-gespecificeerde (1) services en (2) bestanden, waarmee lokale gebruikers privileges kunnen… Lenovo
- CVE-2016-2171 HIGH · 7.5 The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2)… Apache
- CVE-2016-2164 HIGH · 7.5 The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol… Apache
- CVE-2016-2163 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating… Apache
- CVE-2016-0784 MEDIUM · 6.5 Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a… Apache
- CVE-2016-0783 HIGH · 7.5 The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords… Apache
- CVE-2016-0712 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal. Apache
- CVE-2016-0711 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when… Apache
- CVE-2016-0710 HIGH · 8.8 Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1)… Apache
- CVE-2016-0709 HIGH · 7.2 Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary… Apache
- CVE-2015-8240 HIGH · 7.5 The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before… F5
- CVE-2016-1033 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1032 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft