CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-7547 HIGH · 8.1 Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6)… Debian Canonical Hp Sophos
- CVE-2015-8287 MEDIUM · 5.3 Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified… Swann
- CVE-2015-8286 CRITICAL · 9.8 Zhuhai RaySharp-firmware heeft een hardgecodeerd root-wachtwoord, waardoor externe aanvallers gemakkelijker toegang kunnen krijgen via een sessie op TCP-poort 23 of 9000. Zhuhai
- CVE-2016-2398 MEDIUM · 6.5 Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4… Comcast
- CVE-2016-1334 MEDIUM · 5.3 Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka… Cisco
- CVE-2016-1333 MEDIUM · 6.5 Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an… Cisco
- CVE-2016-2397 CRITICAL · 9.8 The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute… Sonicwall
- CVE-2016-2396 CRITICAL · 9.9 The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users… Sonicwall
- CVE-2016-2072 MEDIUM · 6.1 The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e… Citrix
- CVE-2016-2071 CRITICAL · 9.8 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows… Citrix
- CVE-2016-2046 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the… Sophos
- CVE-2016-0773 HIGH · 7.5 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service… Postgresql Canonical Debian
- CVE-2016-0766 HIGH · 8.8 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration… Postgresql Canonical Debian
- CVE-2013-7447 MEDIUM · 6.5 Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications,… Canonical Samsung
- CVE-2016-1153 MEDIUM · 6.5 aangepaste app in Cybozu Office 9.9.0 tot en met 10.3.0 stelt op afstand geverifieerde gebruikers in staat om een denial of service te veroorzaken via… Cybozu
- CVE-2016-1152 MEDIUM · 5.4 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a… Cybozu
- CVE-2016-1151 HIGH · 8.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users. Cybozu
- CVE-2016-1150 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Cybozu Office 9.0.0 tot en met 10.3.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Cybozu
- CVE-2016-1149 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different… Cybozu
- CVE-2015-8489 MEDIUM · 6.5 customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file,… Cybozu
- CVE-2015-8488 MEDIUM · 4.3 Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487. Cybozu
- CVE-2015-8487 MEDIUM · 4.3 Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488. Cybozu
- CVE-2015-8486 MEDIUM · 5.4 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability… Cybozu
- CVE-2015-8485 MEDIUM · 5.4 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability… Cybozu
- CVE-2015-8484 MEDIUM · 5.4 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152. Cybozu
- CVE-2015-8483 HIGH · 7.4 Open redirect-kwetsbaarheid in Cybozu Office 10.2.0 tot en met 10.3.0 stelt externe aanvallers in staat om gebruikers om te leiden naar willekeurige websites en phishing-aanvallen… Cybozu
- CVE-2015-7798 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different… Cybozu
- CVE-2015-7797 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Cybozu Office 9.0.0 tot en met 10.3.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Cybozu
- CVE-2015-7796 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different… Cybozu
- CVE-2015-7795 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Cybozu Office 9.0.0 tot en met 10.3.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Cybozu
- CVE-2016-2389 HIGH · 7.5 Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to… Sap
- CVE-2016-2387 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or… Sap
- CVE-2016-0753 MEDIUM · 5.3 Actief model in Ruby on Rails 4.1.x vóór 4.1.14.1, 4.2.x vóór 4.2.5.1 en 5.x vóór 5.0.0.beta1.1 ondersteunt het gebruik van instantie-niveau-schrijvers voor klasse-accessors, waarmee externe… Rubyonrails Debian Fedoraproject Opensuse
- CVE-2016-0751 HIGH · 7.5 actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails vóór 3.2.22.1, 4.0.x en 4.1.x vóór 4.1.14.1, 4.2.x vóór 4.2.5.1 en 5.x vóór 5.0.0.beta1.1 beperkt het gebruik… Rubyonrails
- CVE-2015-7581 HIGH · 7.5 actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous… Rubyonrails
- CVE-2015-7580 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary… Rubyonrails
- CVE-2015-7579 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or… Rubyonrails
- CVE-2015-7578 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script… Rubyonrails
- CVE-2015-7577 MEDIUM · 5.3 activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1… Rubyonrails
- CVE-2015-7576 LOW · 3.7 The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x… Rubyonrails
- CVE-2016-1331 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug… Sun
- CVE-2016-1330 MEDIUM · 6.5 Cisco IOS 15.2(4)E op Industrial Ethernet 2000-apparaten stelt externe aanvallers in staat om een denial of service (herladen van het apparaat) te veroorzaken via vervaardigde… Zzinc
- CVE-2016-1321 MEDIUM · 5.8 Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain… Cisco
- CVE-2016-0232 MEDIUM · 4.3 IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive… Ibm
- CVE-2016-0231 MEDIUM · 4.3 IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive… Ibm
- CVE-2016-0747 MEDIUM · 5.3 The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of… F5 Canonical Debian Opensuse
- CVE-2016-0746 CRITICAL · 9.8 Gebruik-na-vrije kwetsbaarheid in de resolver in nginx 0.6.18 tot 1.8.0 en 1.9.x vóór 1.9.10 stelt externe aanvallers in staat om een denial of service (crash… F5 Canonical Debian Opensuse
- CVE-2016-0742 HIGH · 7.5 Met de resolver in nginx vóór 1.8.1 en 1.9.x vóór 1.9.10 kunnen externe aanvallers een denial of service (ongeldige pointer-dereferentie en crash van het werkproces)… F5 Canonical Debian Opensuse
- CVE-2016-2314 MEDIUM · 4.9 GlobespanVirata ftpd 1.0, zoals gebruikt op Huawei SmartAX MT882-apparaten V200R002B022 arg, stelt op afstand geverifieerde gebruikers in staat om een denial of service (apparaatuitval) te… Huawei
- CVE-2016-2231 CRITICAL · 9.8 De Windows-gebaseerde Host Interface Program (WHIP) -service op Huawei SmartAX MT882-apparaten V200R002B022 arg vertrouwt op de client om een lengteveld te verzenden dat consistent is… Huawei