CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1296 HIGH · 7.5 The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via… Cisco
- CVE-2015-8777 MEDIUM · 5.5 The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism… Gnu
- CVE-2015-4951 MEDIUM · 5.3 Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1… Ibm
- CVE-2016-1907 MEDIUM · 5.3 The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted… Openbsd
- CVE-2016-1904 HIGH · 7.3 Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact… Php
- CVE-2016-1903 CRITICAL · 9.1 Met de functie gdImageRotateInterpolated in ext/gd/libgd/gd_interpolation.c in PHP vóór 5.5.31, 5.6.x vóór 5.6.17 en 7.x vóór 7.0.2 kunnen aanvallers op afstand gevoelige informatie verkrijgen of… Php
- CVE-2015-8617 CRITICAL · 9.8 Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers… Php
- CVE-2015-8616 HIGH · 8.6 Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or… Php
- CVE-2015-6836 HIGH · 7.3 De SoapClient __oproepmethode in ext/soap/soap.c in PHP vóór 5.4.45, 5.5.x vóór 5.5.29 en 5.6.x vóór 5.6.13 beheert headers niet goed, waardoor externe aanvallers willekeurige code… Php
- CVE-2015-6833 HIGH · 7.5 Directory traversal-kwetsbaarheid in de PharData-klasse in PHP vóór 5.4.44, 5.5.x vóór 5.5.28 en 5.6.x vóór 5.6.12 stelt externe aanvallers in staat om naar willekeurige bestanden… Php
- CVE-2015-6832 HIGH · 7.3 Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute… Php
- CVE-2015-6831 HIGH · 7.3 Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors… Php Debian
- CVE-2015-6527 HIGH · 7.3 Met de php_str_replace_in_subject-functie in ext/standard/string.c in PHP 7.x vóór 7.0.0 kunnen externe aanvallers willekeurige code uitvoeren via een vervaardigde waarde in het derde argument voor… Php
- CVE-2015-5590 HIGH · 7.3 Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause… Php
- CVE-2016-0201 MEDIUM · 5.9 GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to discover credentials by triggering an MD5 collision. Ibm
- CVE-2015-7886 LOW · 3.7 NetApp Data ONTAP vóór 8.2.4P1, wanneer 7-modus en HTTP-toegang zijn ingeschakeld, stelt externe aanvallers in staat om gevoelige volume-informatie te verkrijgen via niet-gespecificeerde vectoren. Netapp
- CVE-2015-5009 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and… Ibm
- CVE-2015-5008 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and… Ibm
- CVE-2015-5002 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Ibm
- CVE-2015-4988 HIGH · 8.6 Directory traversal vulnerability in the replay server in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073,… Ibm
- CVE-2015-4959 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via… Ibm
- CVE-2015-4942 MEDIUM · 5.3 IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and… Ibm
- CVE-2015-7470 HIGH · 7.5 Report Builder in IBM Jazz Reporting Service (JRS) 5.x vóór 5.0.2-Rational-CLM-ifix011 en 6.0 vóór 6.0.0-Rational-CLM-ifix005 stelt man-in-the-middle-aanvallers in staat om gevoelige informatie te verkrijgen via… Ibm
- CVE-2015-7469 MEDIUM · 4.3 Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended read-only restrictions by… Ibm
- CVE-2015-7468 MEDIUM · 4.3 Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended restrictions on administrator… Ibm
- CVE-2015-7467 MEDIUM · 5.4 Cross-site scripting (XSS) kwetsbaarheid in Report Builder in IBM Jazz Reporting Service (JRS) 5.x vóór 5.0.2-Rational-CLM-ifix011 en 6.0 vóór 6.0.0-Rational-CLM-ifix005 staat op afstand geverifieerde gebruikers… Ibm
- CVE-2015-7414 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in de GDS-component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 vóór 11.0.0.0 IF11, 11.3 vóór 11.3.0.0… Ibm
- CVE-2015-4960 MEDIUM · 4.1 IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 vóór 11.0.0.0 IF11, 11.3 vóór 11.3.0.0 IF7 en 11.4 vóór 11.4.0.4 IF1 stelt externe… Ibm
- CVE-2015-4958 LOW · 3.3 IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 vóór 11.0.0.0 IF11, 11.3 vóór 11.3.0.0 IF7 en 11.4 vóór 11.4.0.4 IF1 beperkt browsercaching… Ibm
- CVE-2016-1295 MEDIUM · 5.3 Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775. Cisco
- CVE-2016-1294 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2016-1293 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script… Cisco
- CVE-2016-1142 CRITICAL · 9.1 Seeds acmailer voor 3.8.21 en 3.9.x voor 3.9.15 Beta staat op afstand geverifieerde gebruikers toe om willekeurige OS-commando's uit te voeren via niet-gespecificeerde vectoren. Seeds
- CVE-2016-1133 LOW · 3.7 CRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote attackers to inject arbitrary HTTP headers… Dena
- CVE-2015-6864 MEDIUM · 6.3 HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component. Hp
- CVE-2015-6863 HIGH · 7.3 HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component. Hp
- CVE-2016-1913 MEDIUM · 5.4 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de Redhen-module 7.x-1.x vóór 7.x-1.11 voor Drupal stellen op afstand geverifieerde gebruikers met bepaalde toegang in staat om willekeurig… Redhen Project
- CVE-2016-1912 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2)… Dolibarr
- CVE-2016-1911 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1)… Sap
- CVE-2016-1910 MEDIUM · 5.3 Met de User Management Engine (Ume) in SAP NetWeaver 7.4 kunnen aanvallers niet-gespecificeerde gegevens decoderen via onbekende vectoren, ook bekend als SAP Security Note 2191290. Sap
- CVE-2016-1909 CRITICAL · 9.8 Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x… Fortinet
- CVE-2016-1262 MEDIUM · 5.9 Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol… Juniper
- CVE-2016-1260 MEDIUM · 5.3 Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a denial of service… Juniper
- CVE-2016-1258 MEDIUM · 5.3 Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51… Juniper
- CVE-2016-1257 MEDIUM · 5.9 The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7,… Juniper
- CVE-2016-1256 MEDIUM · 5.3 Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D40, 13.3 before… Juniper
- CVE-2015-8749 MEDIUM · 5.9 The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using… Openstack
- CVE-2015-8688 MEDIUM · 5.4 Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. Gajim
- CVE-2015-8685 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) external… Dolibarr
- CVE-2015-8675 MEDIUM · 6.2 Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physically proximate attackers to obtain sensitive… Huawei