CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1177 MEDIUM · 6.1 Het beheerscherm in Falcon WisePoint 4.3.1 en eerder en WisePoint Authenticator 4.1.19.22 en eerder stelt externe aanvallers in staat om clickjacking-aanvallen uit te voeren via… Falconsc
- CVE-2016-1789 MEDIUM · 5.5 Met Apple iBooks Author vóór 2.4.1 kunnen aanvallers op afstand willekeurige bestanden lezen via een iBooks Author-bestand met een XML-declaratie van een externe entiteit in… Apple
- CVE-2016-1176 MEDIUM · 6.3 Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page. Sharp
- CVE-2016-1175 MEDIUM · 4.3 Cross-site request forgery (CSRF) -kwetsbaarheid in AQUOS Photo Player HN-PP150 1.02.00.04 tot 1.03.01.04 stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te… Sharp
- CVE-2016-0289 MEDIUM · 4.3 shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass… Ibm
- CVE-2015-8523 HIGH · 7.5 The server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via… Ibm
- CVE-2015-8522 CRITICAL · 9.8 Bufferoverloop in de server in IBM Tivoli Storage Manager FastBack 5.5.x en 6.x vóór 6.1.12.2 stelt externe aanvallers in staat om willekeurige code uit te… Ibm
- CVE-2015-8521 CRITICAL · 9.8 Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a… Ibm
- CVE-2015-8520 CRITICAL · 9.8 Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a… Ibm
- CVE-2015-8519 CRITICAL · 9.8 Bufferoverloop in de server in IBM Tivoli Storage Manager FastBack 5.5.x en 6.x vóór 6.1.12.2 stelt externe aanvallers in staat om willekeurige code uit te… Ibm
- CVE-2016-2343 CRITICAL · 9.8 Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via… Patterson Dental
- CVE-2016-2289 HIGH · 7.5 Directory traversal-kwetsbaarheid in ICONICS WebHMI 9 en eerder stelt externe aanvallers in staat om configuratiebestanden te lezen en bijgevolg wachtwoordhashes te ontdekken, via niet-gespecificeerde vectoren. Iconics
- CVE-2016-0793 HIGH · 7.5 Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the… Redhat Microsoft
- CVE-2016-1168 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid op NEC Aterm WF800HP-apparaten met firmware 1.0.17 en eerder stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers… Aterm
- CVE-2016-1167 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users. Aterm
- CVE-2016-1345 HIGH · 7.5 Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields… Cisco
- CVE-2016-3142 HIGH · 8.2 The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from… Php Apple
- CVE-2016-3141 CRITICAL · 9.8 Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service… Apple Php
- CVE-2015-8837 HIGH · 7.3 Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly… Fuseiso Project Debian Fedoraproject
- CVE-2015-8836 HIGH · 7.3 Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly… Fedoraproject Fuseiso Project
- CVE-2016-2288 HIGH · 7.8 Met Cogent DataHub vóór 7.3.10 kunnen lokale gebruikers privileges krijgen door gebruik te maken van de gebruikers- of gastrol om een bestand te wijzigen. Cogentdatahub
- CVE-2016-1760 MEDIUM · 6.2 The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via… Apple
- CVE-2016-3679 HIGH · 8.8 Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly… Google Canonical Opensuse
- CVE-2016-1650 HIGH · 8.8 The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by… Opensuse Debian Google
- CVE-2016-1649 HIGH · 8.8 Het programma::getUniformInternal-functie in Program.cpp in libANGLE, zoals gebruikt in Google Chrome vóór 49.0.2623.108, behandelt een bepaalde data-type mismatch niet goed, waardoor externe aanvallers een denial… Debian Canonical Opensuse Google
- CVE-2016-1648 HIGH · 8.8 Use-after-free kwetsbaarheid in de GetLoadTimes-functie in renderer/loadtimes_extension_bindings.cc in de Extensions-implementatie in Google Chrome vóór 49.0.2623.108 stelt externe aanvallers in staat om een denial of service… Google Opensuse Debian
- CVE-2016-1647 HIGH · 8.8 Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of… Google Canonical Debian Opensuse
- CVE-2016-2344 HIGH · 7.5 Stapelgebaseerde bufferoverloop in manager.exe in Backburner Manager in Autodesk Backburner 2016 2016.0.0.2150 en eerder stelt externe aanvallers in staat om willekeurige code uit te voeren… Autodesk
- CVE-2016-1314 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a… Sun
- CVE-2016-0226 HIGH · 7.8 The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap… Ibm Microsoft
- CVE-2014-9769 HIGH · 7.3 pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allows remote attackers to cause a denial of service (stack… Pcre
- CVE-2016-3119 MEDIUM · 5.3 The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles… Opensuse Mit
- CVE-2016-1351 HIGH · 7.5 De implementatie van het Locator/ID Separation Protocol (LISP) in Cisco IOS 15.1 en 15.2 en NX-OS 4.1 tot en met 6.2 stelt externe aanvallers in… Cisco
- CVE-2016-1350 HIGH · 7.5 Cisco IOS 15.3 en 15.4, Cisco IOS XE 3.8 tot en met 3.11 en Cisco Unified Communications Manager stellen externe aanvallers in staat om een… Cisco Lenovo Samsung Sun
- CVE-2016-1349 HIGH · 7.5 The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial… Cisco Intel Netgear Samsung
- CVE-2016-1348 HIGH · 7.5 Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted… Cisco Netgear Samsung Sun
- CVE-2016-1344 MEDIUM · 5.9 De IKEv2-implementatie in Cisco IOS 15.0 tot en met 15.6 en IOS XE 3.3 tot en met 3.17 stelt externe aanvallers in staat om een… Cisco Lenovo Netgear Samsung
- CVE-2016-1160 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de WP Favorite Posts-plug-in vóór 1.6.6 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Wp Favorite Posts Project
- CVE-2016-2340 MEDIUM · 5.4 The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a… Graniteds
- CVE-2016-1366 MEDIUM · 6.5 De SCP- en SFTP-modules in Cisco IOS XR 5.0.0 tot en met 5.2.5 op Network Convergence System 6000-apparaten gebruiken zwakke machtigingen voor systeembestanden, waardoor op… Cisco
- CVE-2016-1347 HIGH · 7.5 The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload)… Cisco
- CVE-2016-0636 HIGH · 8.1 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 7u97, 8u73 en 8u74 stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en beschikbaarheid te beïnvloeden via onbekende… Redhat Oracle
- CVE-2016-1788 MEDIUM · 5.9 Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote… Apple
- CVE-2016-1787 MEDIUM · 5.3 Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors. Apple
- CVE-2016-1786 MEDIUM · 5.4 De Page Loading-implementatie in WebKit in Apple iOS vóór 9.3 en Safari vóór 9.1 misbruikt HTTP-reacties met een 3xx-statuscode (ook bekend als omleiding), waarmee externe… Apple
- CVE-2016-1785 MEDIUM · 6.5 The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows… Apple
- CVE-2016-1784 MEDIUM · 6.5 The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of… Apple
- CVE-2016-1783 HIGH · 8.8 WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of… Apple Webkitgtk
- CVE-2016-1782 MEDIUM · 6.5 WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers… Apple
- CVE-2016-1781 MEDIUM · 4.3 WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via… Apple