CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8822 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe… Adobe Linux Apple Microsoft
- CVE-2015-8821 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe… Adobe Linux Apple Microsoft
- CVE-2015-8820 HIGH · 8.8 Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204,… Adobe Linux Apple Microsoft
- CVE-2015-8658 HIGH · 8.8 Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204,… Adobe Linux Apple Microsoft
- CVE-2015-8657 HIGH · 8.8 Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204,… Adobe Linux Apple Microsoft
- CVE-2015-8656 HIGH · 8.8 Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204,… Adobe Linux Apple Microsoft
- CVE-2015-8655 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe… Adobe Linux Apple Microsoft
- CVE-2015-8654 HIGH · 8.8 Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204,… Adobe Linux Apple Microsoft
- CVE-2015-8653 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe… Adobe Linux Apple Microsoft
- CVE-2015-8652 HIGH · 8.8 Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204,… Adobe Linux Apple Microsoft
- CVE-2016-2283 MEDIUM · 5.3 Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to… Moxa
- CVE-2016-2282 MEDIUM · 5.3 Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to… Moxa
- CVE-2016-2244 MEDIUM · 5.9 HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors. Hp
- CVE-2016-2243 HIGH · 7.9 Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access. Hp Samsung Zyxel
- CVE-2016-1359 HIGH · 8.8 Cisco Prime Infrastructure 3.0 stelt op afstand geverifieerde gebruikers in staat om willekeurige code uit te voeren via een vervaardigd HTTP-verzoek dat verkeerd wordt behandeld… Cisco
- CVE-2016-1358 MEDIUM · 6.4 Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document… Cisco
- CVE-2016-1357 MEDIUM · 5.3 De component voor wachtwoordbeheer in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att en 7.5.0 stelt externe aanvallers in staat om de beoogde RBAC-beperkingen… Cisco
- CVE-2016-1356 LOW · 3.7 Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to enumerate valid usernames… Cisco
- CVE-2016-1288 MEDIUM · 5.3 The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a… Cisco
- CVE-2016-1158 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administrative… Corega
- CVE-2016-0227 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, and 8.5.5 and 8.5.6… Ibm
- CVE-2015-7490 LOW · 3.1 IBM InfoSphere Information Server 8.5 tot en met FP3, 8.7 tot en met FP2, 9.1 tot en met 9.1.2.0, 11.3 tot en met 11.3.1.2, en… Ibm
- CVE-2015-6260 HIGH · 7.5 Cisco NX-OS 7.1(1)N1(1) op Nexus 5500-, 5600- en 6000-apparaten valideert PDU's in SNMP-pakketten niet correct, waardoor externe aanvallers een denial of service (SNMP-toepassing opnieuw opstarten)… Zyxel Cisco
- CVE-2015-0718 HIGH · 7.5 Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to… Cisco Netgear Samsung Sun
- CVE-2016-2842 CRITICAL · 9.8 De doapr_outch-functie in crypto/bio/b_print.c in OpenSSL 1.0.1 vóór 1.0.1s en 1.0.2 vóór 1.0.2g verifieert niet dat een bepaalde geheugentoewijzing slaagt, waardoor externe aanvallers een denial… Openssl
- CVE-2016-0799 CRITICAL · 9.8 De fmtstr-functie in crypto/bio/b_print.c in OpenSSL 1.0.1 voor 1.0.1s en 1.0.2 voor 1.0.2g berekent tekenreekslengtes onjuist, waardoor externe aanvallers een denial of service (overflow en… Openssl Pulsesecure
- CVE-2016-0798 HIGH · 7.5 Geheugenlek in de SRP_VBASE_get_by_user-implementatie in OpenSSL 1.0.1 vóór 1.0.1s en 1.0.2 vóór 1.0.2g stelt externe aanvallers in staat om een denial of service (geheugenverbruik) te… Openssl
- CVE-2016-0797 HIGH · 7.5 Meerdere integer overflows in OpenSSL 1.0.1 vóór 1.0.1s en 1.0.2 vóór 1.0.2g stellen externe aanvallers in staat om een denial of service (heap memory corruption… Openssl Nodejs Canonical Debian
- CVE-2016-0705 CRITICAL · 9.8 Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial… Oracle Openssl Google Canonical
- CVE-2016-0702 MEDIUM · 5.1 The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which… Openssl Nodejs Debian Canonical
- CVE-2016-1355 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary… Cisco
- CVE-2016-1354 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-1329 CRITICAL · 9.8 Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows remote… Cisco Samsung Sun Zyxel
- CVE-2016-2279 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or… Rockwellautomation
- CVE-2016-2278 HIGH · 7.2 Met Schneider Electric Struxureware Building Operations Automation Server AS 1.7 en eerder en AS-P 1.7 en eerder kunnen op afstand geverifieerde beheerders willekeurige OS-commando's uitvoeren… Schneider-electric
- CVE-2016-0704 MEDIUM · 5.9 An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and… Openssl
- CVE-2016-0703 MEDIUM · 5.9 De functie get_client_master_key in s2_srvr.c in de SSLv2-implementatie in OpenSSL vóór 0.9.8zf, 1.0.0 vóór 1.0.0r, 1.0.1 vóór 1.0.1m en 1.0.2 vóór 1.0.2a accepteert een niet-nul… Openssl
- CVE-2016-0800 MEDIUM · 5.9 The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before… Openssl Pulsesecure
- CVE-2016-2562 MEDIUM · 6.8 The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof… Phpmyadmin
- CVE-2016-2561 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML… Phpmyadmin
- CVE-2016-2560 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script… Phpmyadmin
- CVE-2016-2559 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in de indelingsfunctie in bibliotheken/sql-parser/src/Utils/Error.php in de SQL-parser in phpMyAdmin 4.5.x vóór 4.5.5.1 stelt op afstand geverifieerde gebruikers in staat om… Phpmyadmin
- CVE-2016-1353 MEDIUM · 5.3 De TCP-implementatie in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3(0), 3.3(1), 4.0(0) en 4.1(0) initieert nieuwe TCP-sessies niet goed wanneer een vorige sessie… Cisco
- CVE-2016-0245 MEDIUM · 5.4 The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or… Ibm
- CVE-2016-0244 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and… Ibm
- CVE-2016-0243 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and… Ibm
- CVE-2016-0225 MEDIUM · 4.9 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtain sensitive information via unspecified vectors. Ibm
- CVE-2016-0216 CRITICAL · 9.8 Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash)… Ibm
- CVE-2016-0213 CRITICAL · 9.8 Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash)… Ibm
- CVE-2016-0212 CRITICAL · 9.8 Op stapels gebaseerde bufferoverloop in IBM Tivoli Storage Manager FastBack 5.5 en 6.1.x tot 6.1.11.1 stelt externe aanvallers in staat om een denial of service… Ibm