CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0061 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Microsoft
- CVE-2016-0060 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Microsoft
- CVE-2016-0059 MEDIUM · 4.3 The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL… Microsoft
- CVE-2016-0058 HIGH · 7.8 Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary… Microsoft
- CVE-2016-0056 HIGH · 7.8 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Office Compatibility Pack SP3 allow… Microsoft
- CVE-2016-0055 HIGH · 7.8 Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Microsoft
- CVE-2016-0054 HIGH · 7.8 Met Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel voor Mac 2011, Excel 2016 voor Mac,… Microsoft
- CVE-2016-0053 HIGH · 7.8 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer,… Microsoft
- CVE-2016-0052 HIGH · 7.8 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016… Microsoft
- CVE-2016-0051 HIGH · 7.8 The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0050 MEDIUM · 5.3 Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote… Microsoft
- CVE-2016-0049 MEDIUM · 6.2 Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold en R2 en… Microsoft
- CVE-2016-0048 HIGH · 7.8 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0047 HIGH · 7.5 WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted… Microsoft
- CVE-2016-0046 HIGH · 7.8 Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted… Microsoft
- CVE-2016-0044 HIGH · 7.5 Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a denial of service (SyncShareSvc service… Microsoft
- CVE-2016-0042 HIGH · 7.8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Microsoft
- CVE-2016-0041 HIGH · 7.8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Microsoft
- CVE-2016-0039 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a… Microsoft
- CVE-2016-0038 HIGH · 7.8 Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Microsoft
- CVE-2016-0037 HIGH · 7.5 The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of… Microsoft
- CVE-2016-0036 HIGH · 8.1 The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated… Microsoft
- CVE-2016-0033 HIGH · 7.5 Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6 en 4.6.1 voorkomt geen recursieve compilatie van XSLT-transformaties, waardoor externe aanvallers een denial of service (prestatievermindering)… Microsoft
- CVE-2016-0022 HIGH · 7.8 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016… Microsoft
- CVE-2016-1319 MEDIUM · 5.3 Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and… Sun Samsung Zyxel Zzinc
- CVE-2016-1318 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-1317 MEDIUM · 4.3 Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL,… Zyxel
- CVE-2016-1316 MEDIUM · 5.3 Cisco TelePresence Video Communication Server (VCS) X8.1 tot en met X8.7, zoals gebruikt in combinatie met Jabber Guest, stelt externe aanvallers in staat om gevoelige… Cisco
- CVE-2016-2268 MEDIUM · 6.8 Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… Dell
- CVE-2016-2214 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in een niet-gespecificeerde portal-authenticatiepagina in Huawei Agile Controller-Campus met software vóór V100R001C00SPC319 stelt aanvallers op afstand in staat om willekeurig webscript… Huawei
- CVE-2016-2091 LOW · 3.3 Met de functie dwarf_read_cie_fde_prefix in dwarf_frame2.c in libdwarf 20151114 kunnen aanvallers een denial of service (buiten het bereik lezen) veroorzaken via een vervaardigd ELF-objectbestand. Libdwarf Project
- CVE-2016-2089 MEDIUM · 6.5 The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted… Jasper Project
- CVE-2016-2048 MEDIUM · 5.5 Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the… Djangoproject
- CVE-2015-8361 CRITICAL · 9.1 Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive information, modify… Atlassian
- CVE-2015-8360 CRITICAL · 9.8 An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the… Atlassian
- CVE-2015-3252 CRITICAL · 9.8 Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allows remote attackers to gain access by connecting to… Apache
- CVE-2015-3251 MEDIUM · 4.9 Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information for root accounts of virtual machines via unspecified vectors related to… Apache
- CVE-2014-9757 CRITICAL · 9.8 Met de Ignite Realtime Smack XMPP API, zoals gebruikt in Atlassian Bamboo vóór 5.9.9 en 5.10.x vóór 5.10.0, kunnen op afstand geconfigureerde XMPP-servers willekeurige Java-code… Atlassian
- CVE-2016-2230 CRITICAL · 9.8 OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH… Openelec
- CVE-2016-2201 MEDIUM · 5.3 Siemens SIMATIC S7-1500 CPU-apparaten vóór 1.8.3 stellen externe aanvallers in staat om een replay-beveiligingsmechanisme te omzeilen via pakketten op TCP-poort 102. Siemens
- CVE-2016-2200 HIGH · 7.5 Siemens SIMATIC S7-1500 CPU-apparaten vóór 1.8.3 stellen externe aanvallers in staat om een denial of service (stopmodusovergang) TE veroorzaken via vervaardigde pakketten op TCP-poort 102. Siemens
- CVE-2016-0603 HIGH · 7.6 Niet-gespecificeerde kwetsbaarheid in de Java SE-component in Oracle Java SE 6u111, 7u95, 8u71 en 8u72, wanneer deze op Windows wordt uitgevoerd, stelt externe aanvallers in… Microsoft Oracle
- CVE-2015-2012 MEDIUM · 4.0 De MQXR-service in WMQ-TELEMETRIE in IBM WebSphere MQ 7.1 vóór 7.1.0.7, 7.5 tot 7.5.0.5 en 8.0 vóór 8.0.0.4 gebruikt wereldwijd leesbare machtigingen voor een cleartext-bestand… Ibm
- CVE-2016-0728 HIGH · 7.8 The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain… Google Hp Linux Debian
- CVE-2016-0723 MEDIUM · 6.8 Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or… Linux
- CVE-2015-8787 CRITICAL · 9.8 Met de functie nf_nat_redirect_ipv4 in net/netfilter/nf_nat_redirect.c in de Linux-kernel vóór 4.4 kunnen externe aanvallers een denial of service veroorzaken (NULL pointer dereference en systeemcrash) of… Linux
- CVE-2015-8785 MEDIUM · 6.2 The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev… Linux Suse
- CVE-2015-8767 MEDIUM · 6.2 net/sctp/sm_sideeffect.c in de Linux-kernel vóór 4.3 beheert de relatie tussen een vergrendeling en een socket niet goed, waardoor lokale gebruikers een denial of service (impasse)… Linux Debian Canonical
- CVE-2015-8709 HIGH · 7.0 kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting… Linux
- CVE-2015-8575 MEDIUM · 4.0 The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information… Linux