CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0756 MEDIUM · 5.3 The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to… Prosody
- CVE-2016-0755 HIGH · 7.3 De functie ConnectionExists in lib/url.c in libcurl vóór 7.47.0 hergebruikt NTLM-geverifieerde proxyverbindingen niet correct, waardoor externe aanvallers zich via een verzoek kunnen authenticeren als andere… Haxx Canonical Debian
- CVE-2016-0754 MEDIUM · 5.3 cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in… Haxx Microsoft
- CVE-2016-0738 HIGH · 7.5 OpenStack Object Storage (Swift) vóór 2.3.1 (Kilo), 2.4.x en 2.5.x vóór 2.5.1 (Liberty) sluiten serververbindingen niet goed af, waardoor externe aanvallers een denial of service… Openstack
- CVE-2016-0737 HIGH · 7.5 OpenStack Object Storage (Swift) vóór 2.4.0 sluit clientverbindingen niet goed af, waardoor externe aanvallers een denial of service (verbruik van proxy-serverbronnen) kunnen veroorzaken via een… Openstack
- CVE-2015-8773 HIGH · 7.5 Op stack gebaseerde bufferoverloop in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection stelt aanvallers in staat om een denial of service… Mcafee
- CVE-2015-8772 CRITICAL · 9.1 McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial… Mcafee
- CVE-2015-7521 HIGH · 8.3 The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended… Apache
- CVE-2016-1882 HIGH · 7.5 FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related… Freebsd
- CVE-2016-1879 HIGH · 7.5 The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for… Freebsd
- CVE-2015-8794 MEDIUM · 6.5 Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full… Roundcube
- CVE-2015-8793 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via… Roundcube
- CVE-2015-8792 MEDIUM · 5.3 The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an… Matroska Opensuse
- CVE-2015-8791 MEDIUM · 4.3 The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an… Matroska
- CVE-2015-8790 MEDIUM · 4.3 The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers… Matroska
- CVE-2015-8789 CRITICAL · 9.6 Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size"… Matroska
- CVE-2015-8770 HIGH · 7.5 Directory traversal kwetsbaarheid in de set_skin functie in programma/include/rcmail_output_html.php in Roundcube vóór 1.0.8 en 1.1.x vóór 1.1.4 staat op afstand geverifieerde gebruikers met bepaalde machtigingen… Roundcube
- CVE-2015-7464 HIGH · 7.5 Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service (Report… Ibm
- CVE-2016-0868 CRITICAL · 9.8 Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via… Rockwellautomation
- CVE-2016-1300 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka… Cisco
- CVE-2016-1299 MEDIUM · 5.3 The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS… Cisco
- CVE-2015-6421 HIGH · 7.5 cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5… Cisco
- CVE-2015-6319 CRITICAL · 9.8 SQL-injectiekwetsbaarheid in de webgebaseerde beheerinterface op Cisco RV220W-apparaten stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via een vervaardigde header in een… Cisco Sun
- CVE-2016-2047 MEDIUM · 5.9 The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and… Mariadb Oracle Opensuse Redhat
- CVE-2016-1983 HIGH · 7.5 Met de client_host-functie in parsers.c in Privoxy vóór 3.0.24 kunnen externe aanvallers een denial of service (ongeldige lees- en crashfunctie) veroorzaken via een lege HTTP-host-header. Privoxy
- CVE-2016-1982 HIGH · 7.5 The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded… Privoxy
- CVE-2016-1924 MEDIUM · 6.5 The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000… Uclouvain
- CVE-2016-1923 MEDIUM · 6.5 Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via… Uclouvain
- CVE-2015-8618 HIGH · 7.5 The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for… Opensuse Golang
- CVE-2016-1896 CRITICAL · 9.8 Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows… Lexmark
- CVE-2016-0209 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Ibm
- CVE-2015-7488 MEDIUM · 5.9 IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via… Ibm
- CVE-2015-7487 MEDIUM · 4.1 IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and… Ibm
- CVE-2015-7439 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software… Ibm
- CVE-2016-1926 MEDIUM · 6.1 Cross-site scripting (XSS) kwetsbaarheid in de grafiekenmodule in Greenbone Security Assistant (GSA) 6.x vóór 6.0.8 stelt externe aanvallers in staat om willekeurig webscript of HTML… Greenbone Fedoraproject
- CVE-2016-1567 HIGH · 8.1 chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct… Tuxfamily
- CVE-2016-1492 MEDIUM · 6.1 The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for… Lenovo
- CVE-2016-1491 HIGH · 8.8 The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier… Lenovo
- CVE-2016-1490 MEDIUM · 4.1 Met de wifi-hotspot in Lenovo SHAREit voor 3.2.0 voor Windows kunnen aanvallers op afstand gevoelige bestandsnamen verkrijgen via een vervaardigde bestandsaanvraag naar /list. Lenovo
- CVE-2016-1489 HIGH · 8.0 Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information… Lenovo
- CVE-2016-1233 HIGH · 7.8 An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions… Debian
- CVE-2016-0869 MEDIUM · 5.0 Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document. Microsys
- CVE-2015-8379 HIGH · 8.8 CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter. Cakephp
- CVE-2015-7974 HIGH · 7.7 NTP 4.x vóór 4.2.8p6 en 4.3.x vóór 4.3.90 verifieert geen peer-associaties van symmetrische sleutels bij het verifiëren van pakketten, waardoor externe aanvallers mogelijk imitatieaanvallen kunnen… Ntp Siemens Netapp Debian
- CVE-2016-1298 MEDIUM · 6.1 Meerdere cross-site scripting (XSS) kwetsbaarheden in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1) en 11.0(1) stellen externe aanvallers in staat om willekeurig webscript of… Cisco
- CVE-2015-6337 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-2052 HIGH · 7.6 Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have… Harfbuzz Project Google
- CVE-2016-2051 CRITICAL · 9.8 Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly… Google Redhat
- CVE-2016-1620 HIGH · 8.8 Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google
- CVE-2016-1619 HIGH · 7.6 Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers… Google