CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8539 HIGH · 7.8 The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl… Canonical Suse Linux
- CVE-2015-7566 MEDIUM · 4.6 The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Novell Linux
- CVE-2015-7550 MEDIUM · 5.5 The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial… Linux
- CVE-2015-7513 MEDIUM · 6.5 arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a… Linux Debian Fedoraproject Canonical
- CVE-2013-4312 MEDIUM · 6.2 The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over… Oracle Linux
- CVE-2016-1309 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka… Cisco
- CVE-2016-1308 MEDIUM · 6.5 SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID… Samsung
- CVE-2016-1307 MEDIUM · 5.4 De Openfire-server in Cisco Finesse Desktop 10.5(1) en 11.0(1) en Unified Contact Center Express 10.6(1) heeft een hardgecodeerd account, waardoor aanvallers op afstand gemakkelijker toegang… Zyxel Zzinc
- CVE-2016-1305 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-1302 HIGH · 8.8 Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h)… Samsung Sun Zyxel Zzinc
- CVE-2016-1301 HIGH · 8.8 The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to… Cisco
- CVE-2015-6398 HIGH · 7.5 Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service (device reload) via… Zyxel
- CVE-2016-0813 MEDIUM · 6.1 packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate… Google
- CVE-2016-0812 MEDIUM · 6.1 The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion,… Google
- CVE-2016-0811 HIGH · 7.5 Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an… Google
- CVE-2016-0810 HIGH · 7.8 media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, which allows attackers to gain privileges… Google
- CVE-2016-0809 HIGH · 8.8 Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers to gain privileges by leveraging access to the… Google
- CVE-2016-0808 MEDIUM · 6.2 Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to… Google
- CVE-2016-0807 HIGH · 8.4 The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc… Google
- CVE-2016-0806 HIGH · 8.4 The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges… Google
- CVE-2016-0805 HIGH · 8.4 The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain… Google
- CVE-2016-0804 CRITICAL · 9.8 The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers… Google
- CVE-2016-0803 CRITICAL · 9.8 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause… Google
- CVE-2016-0802 HIGH · 8.8 Met het wifi-stuurprogramma Broadcom in de kernel in Android 4.x vóór 4.4.4, 5.x vóór 5.1.1 LMY49G en 6.x vóór 2016-02-01 kunnen aanvallers op afstand willekeurige… Google Apple
- CVE-2016-0801 CRITICAL · 9.8 The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute… Apple Google
- CVE-2016-1311 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-1310 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug… Sun
- CVE-2016-1306 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka… Sun
- CVE-2015-7916 MEDIUM · 6.5 Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted… Sauter-controls
- CVE-2015-7915 CRITICAL · 9.8 Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Sauter
- CVE-2015-7914 HIGH · 8.1 Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password. Sauter
- CVE-2016-0862 MEDIUM · 6.5 General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified… Ge
- CVE-2016-0861 HIGH · 8.8 General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter-apparaten met firmware vóór 4.8 staan op afstand geverifieerde gebruikers toe om willekeurige opdrachten uit te voeren via… Ge
- CVE-2016-1284 MEDIUM · 5.9 rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE… Isc
- CVE-2015-8269 HIGH · 7.5 Met de API op Fisher-Price Smart Toy Bear-apparaten kunnen aanvallers op afstand gevoelige informatie verkrijgen of gegevens wijzigen door gebruik te maken van de aanwezigheid… Fisher-price
- CVE-2016-1906 CRITICAL · 9.8 Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not… Kubernetes
- CVE-2016-1905 HIGH · 7.7 The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object. Kubernetes
- CVE-2016-1505 CRITICAL · 10.0 The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as… Radicale Microsoft
- CVE-2015-8748 MEDIUM · 5.3 Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*". Radicale
- CVE-2015-8747 CRITICAL · 10.0 The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name. Radicale
- CVE-2015-7546 HIGH · 7.5 De identiteitsservice in OpenStack Identity (Keystone) vóór 2015.1.3 (Kilo) en 8.0.x vóór 8.0.2 (Liberty) en keystonemiddleware (voorheen python-keystoneclient) vóór 1.5.4 (Kilo) en Liberty vóór 2.3.3… Openstack Oracle
- CVE-2015-7539 HIGH · 7.5 De Plugins Manager in Jenkins vóór 1.640 en LTS vóór 1.625.2 verifieert geen controlesommen voor plug-inbestanden waarnaar wordt verwezen in update-sitegegevens, waardoor het voor man-in-the-middle-aanvallers… Jenkins Redhat
- CVE-2015-7538 HIGH · 8.8 Jenkins vóór versie 1.640 en LTS vóór versie 1.625.2 stellen externe aanvallers in staat om het CSRF-beveiligingsmechanisme te omzeilen via niet-gespecificeerde methoden. Jenkins Redhat
- CVE-2015-7537 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that… Redhat Jenkins
- CVE-2015-7536 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… Jenkins
- CVE-2015-5344 CRITICAL · 9.8 The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object… Apache
- CVE-2016-2213 MEDIUM · 6.5 The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG… Ffmpeg
- CVE-2016-2199 HIGH · 8.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager (MVM) before 7.5.10 allow remote… Mcafee
- CVE-2016-2049 HIGH · 8.8 examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might allow… Janrain
- CVE-2015-8783 MEDIUM · 6.5 tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image. Libtiff Debian