CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0816 CRITICAL · 9.8 mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media… Google
- CVE-2016-0815 CRITICAL · 9.8 The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers… Google
- CVE-2016-1005 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-1002 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-1001 HIGH · 8.8 Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux,… Adobe Apple Google Linux
- CVE-2016-1000 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0999 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0998 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0997 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0996 HIGH · 8.8 Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before… Adobe Apple Google Linux
- CVE-2016-0995 HIGH · 8.8 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 18.0.0.333 en 19.x tot en met 21.x vóór 21.0.0.182 op Windows en OS X en vóór 11.2.202.577 op… Adobe Apple Google Linux
- CVE-2016-0994 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0993 HIGH · 8.8 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0992 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-0991 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0990 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0989 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-0988 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0987 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0986 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-0963 HIGH · 8.8 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… Adobe Apple Google Linux
- CVE-2016-0962 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-0961 HIGH · 8.8 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… Adobe Apple Google Linux
- CVE-2016-0960 HIGH · 8.8 Adobe Flash Player vóór 18.0.0.333 en 19.x tot en met 21.x vóór 21.0.0.182 op Windows en OS X en vóór 11.2.202.577 op Linux, Adobe AIR… Adobe Apple Google Linux
- CVE-2015-7448 MEDIUM · 5.4 SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before… Ibm
- CVE-2015-7446 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack… Ibm
- CVE-2016-1562 MEDIUM · 4.3 DE REST-API in de DTE Energy Insight-applicatie vóór 1.7.8 voor Android stelt op afstand geverifieerde gebruikers in staat om niet-gespecificeerde klantinformatie te verkrijgen via een… Dte Energy
- CVE-2016-1361 MEDIUM · 5.3 Cisco IOS XR tot en met 4.3.2 op Gigabit Switch Router (GSR) 12000-apparaten controleert niet goed op een BFD-header (Bidirectional Forwarding Detection) in een UDP-pakket,… Cisco
- CVE-2016-1360 HIGH · 7.1 Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext… Cisco
- CVE-2016-1338 MEDIUM · 6.5 Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP outage) via a crafted SIP… Cisco
- CVE-2015-7411 CRITICAL · 9.9 The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges… Ibm
- CVE-2015-6485 MEDIUM · 5.3 Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs… Schneider-electric
- CVE-2016-2088 MEDIUM · 6.8 resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion… Isc
- CVE-2016-1286 HIGH · 8.6 named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit)… Isc Suse Opensuse Fedoraproject
- CVE-2016-1285 MEDIUM · 6.8 genoemd in ISC BIND 9.x voor 9.9.8-P4 en 9.10.x voor 9.10.3-P4 verwerkt DNAME-records niet correct bij het parseren van fetch-antwoordberichten, waardoor externe aanvallers een denial… Isc Suse Opensuse Fedoraproject
- CVE-2016-0886 MEDIUM · 4.3 EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API… Emc
- CVE-2015-6184 HIGH · 8.1 The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (type… Microsoft
- CVE-2016-1327 CRITICAL · 9.8 Buffer overflow in the web server on Cisco DPC2203 and EPC2203 devices with firmware r1_customer_image allows remote attackers to execute arbitrary code via a crafted… Cisco
- CVE-2016-1326 HIGH · 7.5 The administration interface on Cisco DPQ3925 devices with firmware r1 allows remote attackers to cause a denial of service (device restart) via a crafted HTTP… Cisco
- CVE-2016-1325 HIGH · 7.5 The administration interface on Cisco DPC3939B and DPC3941 devices allows remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCus49506. Cisco
- CVE-2016-1312 HIGH · 7.5 The HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM) 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers… Cisco
- CVE-2016-2774 MEDIUM · 5.9 ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to… Isc Debian Canonical
- CVE-2016-1009 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows… Adobe Apple Microsoft
- CVE-2016-1008 HIGH · 8.4 Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC… Adobe Apple Microsoft
- CVE-2016-1007 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows… Adobe Apple Microsoft
- CVE-2016-0954 CRITICAL · 9.8 Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Adobe
- CVE-2016-0134 HIGH · 7.8 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016… Microsoft
- CVE-2016-0133 MEDIUM · 6.8 The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server… Microsoft
- CVE-2016-0132 CRITICAL · 9.8 Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote… Microsoft
- CVE-2016-0130 HIGH · 7.5 Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge… Microsoft