CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0701 LOW · 3.7 The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes… Openssl
- CVE-2015-8797 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary… Apache
- CVE-2015-8796 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML… Apache
- CVE-2015-8795 MEDIUM · 6.1 Meerdere cross-site scripting (XSS) kwetsbaarheden in de Admin UI in Apache Solr vóór 5.1 stellen externe aanvallers in staat om willekeurig webscript of HTML te… Apache
- CVE-2015-8531 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in IBM Security Access Manager for Web 8.0 vóór 8.0.1.3 IF4 en 9.0 vóór 9.0.0.1 IF1 stelt externe aanvallers in staat… Ibm
- CVE-2015-7492 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1… Ibm
- CVE-2015-7472 HIGH · 7.2 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote… Ibm
- CVE-2015-7444 MEDIUM · 5.3 Het update-installatieprogramma in IBM WebSphere Commerce Enterprise 7.0.0.8 en 7.0.0.9 repliceert de zoekindex niet correct, waardoor aanvallers gevoelige informatie kunnen verkrijgen via niet-gespecificeerde vectoren. Ibm
- CVE-2015-7408 LOW · 3.7 The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of… Ibm
- CVE-2015-7398 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x… Ibm
- CVE-2015-5050 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and… Ibm
- CVE-2015-5042 HIGH · 7.5 IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote… Ibm
- CVE-2015-5012 HIGH · 7.5 The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does… Ibm
- CVE-2015-5010 HIGH · 7.5 IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism… Ibm
- CVE-2015-4991 MEDIUM · 4.0 IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified… Ibm
- CVE-2015-4957 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to inject… Ibm
- CVE-2015-4956 HIGH · 7.4 The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown… Ibm
- CVE-2015-3197 MEDIUM · 5.9 ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to… Oracle Openssl
- CVE-2015-2008 MEDIUM · 4.4 IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated… Ibm
- CVE-2015-2005 MEDIUM · 5.3 IBM Security QRadar SIEM 7.1.x vóór 7.1 MR2 Patch 12 en 7.2.x vóór 7.2.5 Patch 6 verlopen sessies niet goed, waardoor externe aanvallers gevoelige informatie… Ibm
- CVE-2016-1627 HIGH · 8.8 The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with… Opensuse Debian Google
- CVE-2016-1626 MEDIUM · 4.3 The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote… Google Opensuse Debian
- CVE-2016-1625 MEDIUM · 4.3 De Chrome Instant-functie in Google Chrome vóór 48.0.2564.109 zorgt er niet voor dat een New Tab Page (NTP) -navigatiedoel op de meest bezochte of suggestieslijst… Opensuse Google Debian
- CVE-2016-1624 HIGH · 8.8 Integer underflow in de ProcessCommandsInterne functie in dec/decode.c in Brotli, zoals gebruikt in Google Chrome vóór 48.0.2564.109, stelt externe aanvallers in staat om een denial… Opensuse Google Debian
- CVE-2016-1623 HIGH · 8.8 The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers… Debian Google Opensuse
- CVE-2016-1622 HIGH · 8.8 The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers… Google Debian Opensuse
- CVE-2016-1949 HIGH · 8.8 Mozilla Firefox vóór 44.0.2 beperkt de interactie tussen Service Workers en plug-ins niet goed, waardoor externe aanvallers het Same Origin-beleid kunnen omzeilen via een vervaardigde… Mozilla
- CVE-2016-1526 HIGH · 8.1 The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly… Debian Mozilla Sil Fedoraproject
- CVE-2016-1525 HIGH · 8.6 Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot… Netgear
- CVE-2016-1524 CRITICAL · 9.6 Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do… Netgear
- CVE-2016-1523 MEDIUM · 6.5 The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles… Fedoraproject Mozilla Sil Debian
- CVE-2016-1522 HIGH · 8.8 Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load… Fedoraproject Mozilla Debian Sil
- CVE-2016-1521 HIGH · 8.8 The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does… Debian Sil Mozilla Fedoraproject
- CVE-2016-0866 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS vóór 5.1 en 4.1.0 Build 16, stelt externe aanvallers in staat… Tollgrade
- CVE-2016-0865 HIGH · 8.8 Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified… Tollgrade
- CVE-2016-0864 MEDIUM · 5.3 Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information… Tollgrade
- CVE-2016-0863 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) -software EMS vóór 5.1 en 4.1.0 Build 16, stelt externe aanvallers in… Tollgrade
- CVE-2015-8631 MEDIUM · 6.5 Meerdere geheugenlekken in kadmin/server/server_Зs.c in kadmind in MIT Kerberos 5 (ook bekend als krb5) vóór 1.13.4 en 1.14.x vóór 1.14.1 stellen op afstand geverifieerde gebruikers… Mit Opensuse Debian Redhat
- CVE-2015-8630 HIGH · 7.5 The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before… Mit
- CVE-2015-8629 MEDIUM · 5.3 The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '' characters… Mit Oracle Debian Opensuse
- CVE-2016-2073 MEDIUM · 6.5 The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document. Xmlsoft Debian Canonical
- CVE-2016-2330 HIGH · 8.8 libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of-bounds array access)… Ffmpeg Canonical
- CVE-2016-2329 HIGH · 8.8 libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of… Opensuse Ffmpeg
- CVE-2016-2328 HIGH · 8.8 libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service (out-of-bounds array read access)… Ffmpeg
- CVE-2016-2327 HIGH · 8.8 libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (out-of-bounds array… Ffmpeg
- CVE-2016-2326 HIGH · 8.8 Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified… Debian Canonical Ffmpeg
- CVE-2016-1986 CRITICAL · 9.8 HP Continuous Delivery Automation (CDA) 1.30 stelt externe aanvallers in staat om willekeurige commando's uit te voeren via een speciaal geconstrueerd, geserialiseerd Java-object, gerelateerd aan… Hp
- CVE-2016-1324 MEDIUM · 5.3 The REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service (resource outage) by accessing an administrative page, aka Bug… Cisco
- CVE-2016-1323 MEDIUM · 4.3 The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID… Cisco
- CVE-2016-1322 HIGH · 7.5 The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka… Cisco