CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8782 MEDIUM · 6.5 tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781. Debian Libtiff
- CVE-2015-8781 MEDIUM · 6.5 tif_luv.c in libtiff stelt aanvallers in staat om een denial of service (buiten het bereik schrijven) te veroorzaken via een ongeldig aantal samples per pixel… Debian Libtiff
- CVE-2015-8265 HIGH · 7.5 Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port,… Huawei
- CVE-2016-1730 MEDIUM · 5.4 WebSheet in Apple iOS vóór 9.2.1 stelt externe aanvallers in staat om cookies te lezen of ernaar te schrijven door een gemaakt captive-portaal te gebruiken. Apple
- CVE-2016-1729 HIGH · 7.3 Untrusted search path vulnerability in OSA Scripts in Apple OS X before 10.11.3 allows attackers to load arbitrary script libraries via a quarantined application. Apple
- CVE-2016-1728 MEDIUM · 4.3 The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes… Apple
- CVE-2016-1727 HIGH · 8.8 WebKit, zoals gebruikt in Apple iOS vóór 9.2.1, Safari vóór 9.0.3 en tvOS vóór 9.1.1, stelt externe aanvallers in staat om willekeurige code uit te… Apple Webkitgtk
- CVE-2016-1726 HIGH · 8.8 WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service… Apple
- CVE-2016-1725 HIGH · 8.8 WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service… Apple
- CVE-2016-1724 HIGH · 8.8 WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a… Apple Webkitgtk
- CVE-2016-1723 HIGH · 8.8 WebKit, zoals gebruikt in Apple iOS vóór 9.2.1 en Safari vóór 9.0.3, stelt aanvallers op afstand in staat om willekeurige code uit te voeren of… Apple
- CVE-2016-1722 HIGH · 7.8 syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of… Apple
- CVE-2016-1721 HIGH · 7.8 The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial… Apple
- CVE-2016-1720 HIGH · 7.8 IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of… Apple
- CVE-2016-1719 HIGH · 7.8 The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a… Apple
- CVE-2016-1718 HIGH · 7.3 The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption)… Apple
- CVE-2016-1717 HIGH · 7.8 The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause… Apple
- CVE-2016-1716 HIGH · 7.8 AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Apple
- CVE-2016-1948 MEDIUM · 5.3 Mozilla Firefox voor 44.0 op Android zorgt er niet voor dat https wordt gebruikt voor een installatie met een lichtgewicht thema, waarmee man-in-the-middle-aanvallers de afbeeldingen… Google Mozilla
- CVE-2016-1947 MEDIUM · 4.7 Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by… Canonical Opensuse Mozilla
- CVE-2016-1946 CRITICAL · 9.8 The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers… Opensuse Mozilla
- CVE-2016-1945 HIGH · 8.8 The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by… Mozilla Opensuse
- CVE-2016-1944 CRITICAL · 9.8 De Buffer11::NativeBuffer11::kaartfunctie in HOEK, zoals gebruikt in Mozilla Firefox vóór 44.0, kan externe aanvallers toestaan om een denial of service (geheugenbeschadiging) te veroorzaken of mogelijk… Mozilla Opensuse
- CVE-2016-1943 MEDIUM · 4.7 Mozilla Firefox voor 44.0 op Android staat externe aanvallers toe om de adresbalk te vervalsen via de scrollTo methode. Opensuse Mozilla Google
- CVE-2016-1942 HIGH · 7.4 Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1)… Opensuse Mozilla
- CVE-2016-1941 MEDIUM · 6.1 The file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too quickly, which allows remote attackers to conduct clickjacking attacks… Apple Mozilla
- CVE-2016-1940 MEDIUM · 5.3 Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during (1) shortcut opening… Google Mozilla
- CVE-2016-1939 MEDIUM · 5.3 Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.… Opensuse Mozilla
- CVE-2016-1938 MEDIUM · 6.5 De functie s_mp_div in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) vóór 3.21, zoals gebruikt in Mozilla Firefox vóór 44.0, verdeelt getallen onjuist, wat het… Opensuse Mozilla
- CVE-2016-1937 MEDIUM · 6.1 The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action… Mozilla Opensuse
- CVE-2016-1935 HIGH · 8.8 Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via… Opensuse Oracle Mozilla
- CVE-2016-1933 MEDIUM · 6.5 Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash)… Opensuse Mozilla
- CVE-2016-1931 CRITICAL · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application… Mozilla Opensuse
- CVE-2016-1930 CRITICAL · 9.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial… Mozilla Oracle Opensuse
- CVE-2016-1985 CRITICAL · 10.0 Met HPE Operations Manager 8.x en 9.0 op Windows kunnen aanvallers op afstand willekeurige opdrachten uitvoeren via een vervaardigd geserialiseerd Java-object, gerelateerd aan de Apache… Hp Microsoft
- CVE-2016-1145 HIGH · 7.5 Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers… Nec
- CVE-2016-1144 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to… Websquare
- CVE-2016-1143 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vine Mv Project
- CVE-2016-1141 MEDIUM · 4.7 Met KDDI HOME SPOT Cube-apparaten vóór 2 kunnen op afstand geverifieerde gebruikers willekeurige OS-opdrachten uitvoeren via niet-gespecificeerde vectoren. Kddi
- CVE-2016-1140 MEDIUM · 6.1 KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors. Kddi
- CVE-2016-1139 HIGH · 7.5 Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown… Kddi
- CVE-2016-1138 MEDIUM · 4.7 CRLF-injectiekwetsbaarheid op KDDI HOME SPOT CUBE-APPARATEN vóór 2 stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren via niet-gespecificeerde vectoren. Kddi
- CVE-2016-1137 HIGH · 7.4 Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Kddi
- CVE-2016-1136 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… Kddi
- CVE-2016-0867 HIGH · 7.5 CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request. Carel
- CVE-2016-1488 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00… Siemens
- CVE-2016-1304 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in Cisco Unity Connection 10.5(2.3009) stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via een vervaardigde waarde,… Cisco
- CVE-2016-1303 HIGH · 7.5 De web GUI op Cisco Small Business 500-apparaten 1.2.0.92 stelt externe aanvallers in staat om een denial of service te veroorzaken via een vervaardigd HTTP-verzoek,… Cisco
- CVE-2015-7923 CRITICAL · 9.0 Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection… Westermo
- CVE-2016-1493 HIGH · 7.5 Intel Driver Update Utility vóór 2.4 haalt stuurprogramma-updates op in leesbare tekst, waardoor het voor man-in-the-middle-aanvallers gemakkelijker wordt om willekeurige code uit te voeren via… Intel