CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0790 MEDIUM · 5.3 Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to… Jenkins Redhat
- CVE-2016-0789 MEDIUM · 6.1 CRLF-injectiekwetsbaarheid in de CLI-commandodocumentatie in Jenkins vóór 1.650 en LTS vóór 1.642.2 stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren en HTTP-antwoordsplitsingsaanvallen uit… Jenkins Redhat
- CVE-2016-0788 CRITICAL · 9.8 The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener. Jenkins Redhat
- CVE-2016-2511 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php. Debian Websvn
- CVE-2016-2216 HIGH · 7.5 The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote… Nodejs Fedoraproject
- CVE-2016-2086 HIGH · 7.5 Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a… Nodejs Fedoraproject
- CVE-2016-0729 CRITICAL · 9.8 Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to… Samsung Fedoraproject
- CVE-2015-2774 MEDIUM · 5.9 Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via… Erlang Oracle Opensuse
- CVE-2016-2510 HIGH · 8.1 BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code… Beanshell Debian Canonical
- CVE-2015-8681 HIGH · 7.8 The ovisp driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230,… Huawei
- CVE-2015-8680 HIGH · 7.8 The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230,… Huawei
- CVE-2015-8679 MEDIUM · 5.5 The Maxim_smartpa_dev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230… Huawei
- CVE-2015-8319 HIGH · 7.8 Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230,… Huawei
- CVE-2015-8318 HIGH · 7.8 Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230,… Huawei
- CVE-2015-8307 HIGH · 7.8 The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230,… Huawei
- CVE-2016-3975 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in SAP NetWeaver AS Java 7.1 tot en met 7.5 stelt externe aanvallers in staat om willekeurig webscript of HTML te… Sap
- CVE-2016-3974 CRITICAL · 9.1 XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of… Sap
- CVE-2016-3973 MEDIUM · 5.3 The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain… Sap
- CVE-2016-2858 MEDIUM · 6.5 QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash)… Qemu Canonical Debian
- CVE-2016-1714 HIGH · 8.1 De (1) fw_cfg_write en (2) fw_cfg_read functies in hw/nvram/fw_cfg.c in QEMU voor 2.4, wanneer gebouwd met de Firmware Configuration device emulation support, staan gast OS… Redhat Oracle Qemu
- CVE-2016-0734 MEDIUM · 6.1 De webgebaseerde beheerconsole in Apache ActiveMQ 5.x vóór 5.13.2 verzendt geen X-Frame-Options HTTP-header, wat het voor externe aanvallers gemakkelijker maakt om clickjacking-aanvallen uit te voeren… Apache
- CVE-2015-8305 MEDIUM · 5.5 Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or… Huawei
- CVE-2016-3948 HIGH · 7.5 Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted… Squid-cache
- CVE-2016-3947 HIGH · 8.2 Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to… Squid-cache Canonical
- CVE-2016-1563 MEDIUM · 6.8 NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information… Netapp
- CVE-2016-0888 HIGH · 8.8 EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors. Emc
- CVE-2016-2292 MEDIUM · 6.5 Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute… Schneider-electric
- CVE-2016-2291 MEDIUM · 6.5 Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause… Schneider-electric
- CVE-2016-2290 HIGH · 8.8 Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute… Schneider-electric
- CVE-2016-2277 MEDIUM · 6.3 IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project… Rockwellautomation
- CVE-2016-2272 HIGH · 7.5 Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie. Eaton Lighting Systems
- CVE-2016-1346 MEDIUM · 5.9 The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service… Dell Netgear Samsung Zyxel
- CVE-2016-1313 CRITICAL · 9.8 Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which… Cisco
- CVE-2016-1291 CRITICAL · 9.8 Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data… Cisco Sun
- CVE-2016-1290 HIGH · 8.1 The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended… Cisco Sun
- CVE-2016-1174 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. Hiniarata
- CVE-2016-1173 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Hiniarata
- CVE-2016-1172 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. Hiniarata
- CVE-2016-1171 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de Recruit-plug-in vóór 0.9.3 voor baserCMS stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Hiniarata
- CVE-2016-1170 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de Casebook-plug-in vóór 0.9.4 voor baserCMS stelt externe aanvallers in staat om de authenticatie van beheerders te kapen. Hiniarata
- CVE-2016-1169 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Hiniarata
- CVE-2016-0871 HIGH · 7.5 Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request. Eaton Lighting Systems
- CVE-2015-7921 CRITICAL · 9.1 The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes… Schneider-electric
- CVE-2015-6313 HIGH · 7.5 Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows… Sun Zyxel Zzinc Cisco
- CVE-2015-6312 HIGH · 7.5 Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to… Dell Netgear Zyxel Zzinc
- CVE-2016-3969 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in McAfee Email Gateway (MEG) 7.6.x vóór 7.6.404, wanneer Bestandsfiltering is ingeschakeld met de actie ingesteld op ESERVICES:REPLACE, stelt externe aanvallers… Mcafee
- CVE-2016-3968 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build… Sophos
- CVE-2016-3118 MEDIUM · 6.5 CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote… Broadcom
- CVE-2016-3125 HIGH · 7.5 The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended… Proftpd Opensuse Fedoraproject
- CVE-2016-2000 CRITICAL · 9.8 HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java… Hp