CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1618 MEDIUM · 6.5 Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for… Google
- CVE-2016-1617 MEDIUM · 4.3 The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http… Google
- CVE-2016-1616 MEDIUM · 4.3 The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button. Google
- CVE-2016-1615 MEDIUM · 6.5 Met de Omnibox-implementatie in Google Chrome vóór 48.0.2564.82 kunnen externe aanvallers de oorsprong van een document vervalsen via niet-gespecificeerde vectoren. Google
- CVE-2016-1614 MEDIUM · 4.3 The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive… Google
- CVE-2016-1613 HIGH · 7.6 Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service… Google
- CVE-2016-1612 HIGH · 7.6 The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of… Google
- CVE-2015-7417 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject… Ibm
- CVE-2015-6317 MEDIUM · 6.5 Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926. Cisco
- CVE-2016-1572 HIGH · 8.4 mount.ecryptfs_private.c in eCryptfs-utils valideert geen mount-bestemmingsbestandssysteemtypen, waardoor lokale gebruikers privileges kunnen krijgen door over een niet-standaard bestandssysteem te mounten, zoals aangetoond door /proc/$pid. Ecryptfs Canonical Opensuse Debian
- CVE-2016-1571 MEDIUM · 6.3 The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users… Citrix Xen
- CVE-2016-1570 HIGH · 8.5 The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial… Xen
- CVE-2015-7744 MEDIUM · 5.9 wolfSSL (voorheen CyaSSL) vóór 3.6.8 behandelt fouten die verband houden met het Chinese Remainder Theorem (CRT) -proces niet goed bij het toestaan van kortstondige sleuteluitwisseling… Wolfssl Opensuse Mariadb
- CVE-2015-6925 HIGH · 7.5 wolfSSL (voorheen CyaSSL) vóór 3.6.8 stelt externe aanvallers in staat om een denial of service (resourceverbruik of verkeersversterking) te veroorzaken via een vervaardigde DTLS-cookie in… Wolfssl
- CVE-2015-6015 HIGH · 10.0 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown… Oracle
- CVE-2015-6014 HIGH · 10.0 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown… Oracle
- CVE-2015-6013 HIGH · 10.0 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown… Oracle
- CVE-2016-1984 CRITICAL · 9.8 De setUpSubtleUserAccount-functie in /bin/bw op Harman AMX-apparaten vóór 2016-01-20 heeft een hardgecodeerd wachtwoord voor het 1MB@ tMaN-account, waardoor externe aanvallers gemakkelijker toegang kunnen krijgen via… Harman
- CVE-2016-1135 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90… Buffalotech
- CVE-2016-1134 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware… Buffalotech
- CVE-2015-8362 CRITICAL · 9.8 The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, which makes it easier for remote… Harman
- CVE-2015-7909 HIGH · 7.3 Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion… Hospira
- CVE-2015-6435 CRITICAL · 9.8 An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a),… Cisco
- CVE-2015-6412 CRITICAL · 9.8 Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for remote attackers to obtain… Cisco
- CVE-2015-8472 HIGH · 7.3 Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before… Apple Libpng
- CVE-2016-0618 LOW · 1.4 Niet-gespecificeerde kwetsbaarheid in Oracle Sun Solaris 11 stelt lokale gebruikers in staat om de vertrouwelijkheid te beïnvloeden via onbekende vectoren met betrekking tot zones. Oracle
- CVE-2016-0616 MEDIUM · 4.0 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect… Redhat Canonical Mariadb Oracle
- CVE-2016-0614 MEDIUM · 4.0 Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown… Oracle
- CVE-2016-0611 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL 5.6.27 en eerder en 5.7.9 stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren… Canonical Oracle Opensuse Redhat
- CVE-2016-0610 LOW · 3.5 Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown… Oracle Debian Mariadb Opensuse
- CVE-2016-0609 LOW · 1.7 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows… Oracle Redhat Debian Opensuse
- CVE-2016-0608 LOW · 3.5 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows… Oracle Redhat Debian Canonical
- CVE-2016-0607 LOW · 2.8 Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication. Redhat Oracle Opensuse Canonical
- CVE-2016-0606 LOW · 3.5 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows… Debian Redhat Opensuse Oracle
- CVE-2016-0605 LOW · 2.1 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL 5.6.26 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren. Redhat Opensuse Oracle
- CVE-2016-0602 MEDIUM · 6.2 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown… Oracle
- CVE-2016-0601 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL 5.7.9 stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren met betrekking tot partitie. Oracle
- CVE-2016-0600 LOW · 3.5 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows… Redhat Debian Oracle Opensuse
- CVE-2016-0599 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL 5.7.9 stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via onbekende vectoren met betrekking tot Optimizer. Oracle
- CVE-2016-0598 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL 5.5.46 en eerder, 5.6.27 en eerder, en 5.7.9 en MariaDB vóór 5.5.47, 10.0.x vóór 10.0.23, en 10.1.x vóór 10.1.10 stelt… Opensuse Oracle Redhat Debian
- CVE-2016-0597 MEDIUM · 4.0 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows… Redhat Oracle Opensuse Canonical
- CVE-2016-0596 MEDIUM · 4.0 Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote… Redhat Oracle Debian Opensuse
- CVE-2016-0595 MEDIUM · 4.0 Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. Redhat Oracle Canonical Opensuse
- CVE-2016-0594 MEDIUM · 4.3 Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML. Opensuse Oracle
- CVE-2016-0592 LOW · 2.1 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown… Oracle Debian
- CVE-2016-0591 MEDIUM · 5.5 Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity… Oracle
- CVE-2016-0590 MEDIUM · 4.3 Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown… Oracle
- CVE-2016-0589 MEDIUM · 6.4 Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. Oracle
- CVE-2016-0588 MEDIUM · 4.3 Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation… Oracle
- CVE-2016-0587 MEDIUM · 4.0 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality via unknown… Oracle