CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8524 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers… Ibm
- CVE-2015-7491 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web… Ibm
- CVE-2015-7457 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script… Ibm
- CVE-2015-7455 LOW · 3.1 IBM WebSphere Portal 7.x tot en met 7.0.0.2 CF29, 8.0.x vóór 8.0.0.1 CF20 en 8.5.x vóór 8.5.0.0 CF09 maakt gebruik van zwakke machtigingen voor inhoudsitems,… Ibm
- CVE-2015-7428 HIGH · 7.4 Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web… Ibm
- CVE-2016-2532 MEDIUM · 5.9 The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which… Wireshark
- CVE-2016-2531 MEDIUM · 5.9 Off-by-one fout in epan/dissectors/packet-rsl.c in de RSL-dissector in Wireshark 1.12.x vóór 1.12.10 en 2.0.x vóór 2.0.2 stelt externe aanvallers in staat om een denial of… Wireshark
- CVE-2016-2530 MEDIUM · 5.9 The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV… Wireshark
- CVE-2016-2529 MEDIUM · 5.5 The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT… Wireshark
- CVE-2016-2528 MEDIUM · 5.9 The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause… Wireshark
- CVE-2016-2527 MEDIUM · 5.5 wiretap/nettrace_3gpp_32_423.c in de 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x voor 2.0.2 zorgt er niet voor dat er een '' teken aanwezig is… Wireshark
- CVE-2016-2526 MEDIUM · 5.9 epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of… Wireshark
- CVE-2016-2525 MEDIUM · 5.9 epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a… Wireshark
- CVE-2016-2524 MEDIUM · 5.9 epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application… Wireshark
- CVE-2016-2523 MEDIUM · 5.9 The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial… Wireshark
- CVE-2016-2522 MEDIUM · 5.9 The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which… Wireshark
- CVE-2016-2521 HIGH · 7.8 Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to… Wireshark
- CVE-2016-2572 HIGH · 7.5 http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial… Squid-cache
- CVE-2016-2571 HIGH · 7.5 http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP… Squid-cache
- CVE-2016-2570 HIGH · 7.5 The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows… Squid-cache
- CVE-2016-2569 HIGH · 7.5 Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of… Squid-cache
- CVE-2015-7262 HIGH · 7.5 QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file,… Qnap
- CVE-2015-7261 CRITICAL · 9.8 The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for… Qnap
- CVE-2015-6036 HIGH · 7.5 QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request. Qnap
- CVE-2015-6022 HIGH · 8.8 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in QNAP Signage Station vóór 2.0.1 stelt op afstand geverifieerde gebruikers in staat om willekeurige code uit te… Qnap
- CVE-2016-1342 MEDIUM · 5.3 De inlogpagina van het apparaat in Cisco FirePOWER Management Center 5.3 tot en met 6.0.0.1 stelt externe aanvallers in staat om mogelijk gevoelige softwareversie-informatie te… Cisco
- CVE-2016-1297 HIGH · 8.8 The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute… Cisco
- CVE-2016-0763 MEDIUM · 6.3 The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are… Debian Apache Canonical
- CVE-2016-0714 HIGH · 8.8 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote… Apache Debian Canonical
- CVE-2016-0706 MEDIUM · 4.3 Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows… Canonical Debian Apache
- CVE-2015-5351 HIGH · 8.8 The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send… Apache Debian Canonical
- CVE-2015-5346 HIGH · 8.1 Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of… Apache Canonical Debian
- CVE-2015-5345 MEDIUM · 5.3 The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints… Debian Apache Canonical
- CVE-2015-5174 MEDIUM · 4.3 Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended… Debian Apache Canonical
- CVE-2016-2542 HIGH · 7.8 Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working… Flexera
- CVE-2016-1341 CRITICAL · 9.8 Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via… Cisco
- CVE-2015-8277 CRITICAL · 9.8 Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary… Flexerasoftware
- CVE-2015-8805 CRITICAL · 9.8 The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256… Nettle Project Canonical Opensuse
- CVE-2015-8804 CRITICAL · 9.8 x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which… Nettle Project Canonical Opensuse
- CVE-2015-8803 CRITICAL · 9.8 The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256… Nettle Project Canonical Opensuse
- CVE-2013-7448 HIGH · 7.5 Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get. Debian Didiwiki Project
- CVE-2016-2537 HIGH · 7.5 Het pakket is-my-json-valid voor Node.js vóór versie 2.12.4 bevat een onjuiste reguliere expressie exports['utc-millisec'], waardoor externe aanvallers een denial-of-service-aanval (geblokkeerde event loop) kunnen uitvoeren via… Is My Json Valid Project
- CVE-2016-1157 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Log-chat Project
- CVE-2016-2536 HIGH · 8.8 Meerdere use-after-free kwetsbaarheden in SAP 3D Visual Enterprise Viewer stellen externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd SketchUp-document. OPMERKING:… Sap Google
- CVE-2016-2316 MEDIUM · 5.9 chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3,… Fedoraproject Digium
- CVE-2016-2232 MEDIUM · 6.5 Asterisk Open Source 1.8.x, 11.x voor 11.21.1, 12.x en 13.x voor 13.7.1 en Certified Asterisk 1.8.28, 11.6 voor 11.6-cert12 en 13.1 voor 13.1-cert3 stellen op… Digium
- CVE-2016-2037 MEDIUM · 6.5 Met de functie cpio_Safer_name_suffix in util.c in cpio 2.11 kunnen externe aanvallers een denial of service (buiten het bereik schrijven) veroorzaken via een vervaardigd cpio-bestand. Gnu Debian
- CVE-2016-0725 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers… Fedoraproject Moodle
- CVE-2016-0724 MEDIUM · 4.3 The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2… Moodle Fedoraproject
- CVE-2015-5342 MEDIUM · 4.3 De keuzemodule in Moodle via 2.6.11, 2.7.x vóór 2.7.11, 2.8.x vóór 2.8.9 en 2.9.x vóór 2.9.3 stelt externe geverifieerde gebruikers in staat om beoogde toegangsbeperkingen… Moodle