CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1031 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows… Adobe Linux Apple Microsoft
- CVE-2016-1030 HIGH · 8.1 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass… Adobe Linux Apple Microsoft
- CVE-2016-1029 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1028 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1027 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1026 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1025 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1024 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1023 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1022 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1021 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1020 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1018 HIGH · 8.8 Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux… Adobe Linux Apple Microsoft
- CVE-2016-1017 HIGH · 8.8 Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before… Adobe Linux Apple Microsoft
- CVE-2016-1016 HIGH · 8.8 Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and… Adobe Linux Apple Microsoft
- CVE-2016-1015 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1014 HIGH · 7.3 Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on… Adobe Linux Apple Microsoft
- CVE-2016-1013 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows… Adobe Linux Apple Microsoft
- CVE-2016-1012 HIGH · 8.8 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2016-1011 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows… Adobe Linux Apple Microsoft
- CVE-2016-1006 HIGH · 8.1 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass… Adobe Linux Apple Microsoft
- CVE-2016-3984 MEDIUM · 5.1 The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL)… Mcafee
- CVE-2016-3983 HIGH · 7.5 McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process. Mcafee
- CVE-2016-3963 MEDIUM · 5.3 Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443. Siemens
- CVE-2016-2513 LOW · 3.1 The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login… Djangoproject
- CVE-2016-2512 HIGH · 7.4 The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Djangoproject
- CVE-2016-2381 HIGH · 7.5 Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp. Perl Debian Oracle Opensuse
- CVE-2016-1375 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted… Cisco
- CVE-2016-1180 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML… Cyber-will Ec-cube
- CVE-2015-5969 MEDIUM · 6.2 The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2… Opensuse Suse
- CVE-2015-5229 HIGH · 7.5 The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow… Redhat
- CVE-2016-3980 HIGH · 7.5 The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via… Sap
- CVE-2016-3979 HIGH · 7.5 Internet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (heap memory… Sap
- CVE-2016-3978 MEDIUM · 6.1 The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users to arbitrary… Fortinet
- CVE-2016-3188 HIGH · 7.3 The _prepopulate_request_walk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the (1) actions, (2) container, (3) token, (4)… Prepopulate Project
- CVE-2016-3187 HIGH · 7.3 The Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the REQUEST superglobal array, and consequently have unspecified impact, via a base64-encoded… Prepopulate Project
- CVE-2016-3154 CRITICAL · 9.8 The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to conduct PHP object injection… Spip
- CVE-2016-3153 CRITICAL · 9.8 SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the… Debian Spip
- CVE-2016-2324 CRITICAL · 9.8 Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers… Suse Opensuse Git-scm
- CVE-2016-2315 CRITICAL · 9.8 revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or… Suse Opensuse Git-scm
- CVE-2015-6541 HIGH · 8.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the authentication of… Zimbra
- CVE-2015-8840 HIGH · 8.8 The XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information,… Sap
- CVE-2016-2851 CRITICAL · 9.8 Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash)… Debian Opensuse Cypherpunks
- CVE-2016-2789 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1… Citrix
- CVE-2016-2563 CRITICAL · 9.8 Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of… 9bis Simon Tatham
- CVE-2016-2098 HIGH · 7.3 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging… Debian Rubyonrails
- CVE-2016-2097 MEDIUM · 5.3 Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging… Rubyonrails
- CVE-2016-1531 HIGH · 7.0 Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument. Exim
- CVE-2016-0792 HIGH · 8.8 Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an… Jenkins Redhat
- CVE-2016-0791 CRITICAL · 9.8 Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to… Redhat Jenkins