CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-1898 MEDIUM · 5.5 Met FFmpeg 2.x kunnen aanvallers op afstand cross-origin-aanvallen uitvoeren en willekeurige bestanden lezen met behulp van het subbestandsprotocol in een HTTP Live Streaming (HLS) M3U8-bestand,… Ffmpeg Canonical Opensuse
- CVE-2016-1897 MEDIUM · 5.5 Met FFmpeg 2.x kunnen aanvallers op afstand cross-origin-aanvallen uitvoeren en willekeurige bestanden lezen met behulp van het Concat-protocol in een HTTP Live Streaming (HLS) M3U8-bestand,… Ffmpeg Canonical Opensuse
- CVE-2016-0860 HIGH · 7.5 Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request. Advantech
- CVE-2016-0859 CRITICAL · 9.8 Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based… Advantech
- CVE-2016-0858 HIGH · 8.1 Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted… Advantech
- CVE-2016-0857 CRITICAL · 9.8 Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors. Advantech
- CVE-2016-0856 CRITICAL · 9.8 Meerdere stackgebaseerde bufferoverlopen in Advantech WebAccess vóór 8.1 stellen externe aanvallers in staat om willekeurige code uit te voeren via niet-gespecificeerde vectoren. Advantech
- CVE-2016-0855 HIGH · 7.5 Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors. Advantech
- CVE-2016-0854 CRITICAL · 9.8 Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers… Advantech
- CVE-2016-0853 HIGH · 7.5 Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted input. Advantech
- CVE-2016-0852 HIGH · 7.5 Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecified vectors. Advantech
- CVE-2016-0851 HIGH · 7.5 Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors. Advantech
- CVE-2015-8281 HIGH · 7.5 Web Viewer 1.0.0.193 op Samsung SRN-1670D-apparaten stelt aanvallers in staat om versleuteling van het bestandssysteem te omzeilen via XOR-berekeningen. Samsung
- CVE-2015-8280 HIGH · 7.5 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages. Samsung
- CVE-2015-8279 HIGH · 8.6 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script. Samsung
- CVE-2015-6467 HIGH · 8.1 Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin. Advantech
- CVE-2015-6423 MEDIUM · 4.3 Met de DCERPC-inspectie-implementatie in Cisco Adaptive Security Appliance (ASA) -software 9.4.1 tot en met 9.5.1 kunnen op afstand geverifieerde gebruikers een beoogde ACL met alleen… Cisco
- CVE-2015-6336 HIGH · 7.3 Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote attackers to… Cisco
- CVE-2015-6323 CRITICAL · 9.8 The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before… Cisco
- CVE-2015-6320 HIGH · 7.5 The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via… Cisco
- CVE-2015-6314 CRITICAL · 9.8 Cisco Wireless LAN Controller (WLC) -apparaten met software 7.6.x, 8.0 vóór 8.0.121.0 en 8.1 vóór 8.1.131.0 stellen externe aanvallers in staat om configuratie-instellingen te wijzigen… Cisco
- CVE-2015-5007 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to… Ibm
- CVE-2015-3948 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in Advantech WebAccess vóór 8.1 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Advantech
- CVE-2015-3947 HIGH · 8.1 SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Advantech
- CVE-2015-3946 HIGH · 8.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Advantech WebAccess vóór 8.1 stelt aanvallers op afstand in staat om de authenticatie van niet-gespecificeerde slachtoffers via onbekende vectoren… Advantech
- CVE-2015-3943 MEDIUM · 5.3 Advantech WebAccess voor 8.1 stelt externe aanvallers in staat om gevoelige cleartext-informatie over e-mailprojectaccounts te lezen via niet-gespecificeerde vectoren. Advantech
- CVE-2016-0778 HIGH · 8.1 The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward… Oracle Openbsd Apple Hp
- CVE-2016-0777 MEDIUM · 6.5 The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process… Sophos Oracle Openbsd Hp
- CVE-2015-8605 MEDIUM · 6.5 ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length… Sophos Isc Debian Canonical
- CVE-2016-0947 HIGH · 7.8 Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,… Adobe Apple Microsoft
- CVE-2016-0946 CRITICAL · 9.8 Adobe Reader en Acrobat Reader DC Classic vóór 11.0.14, Acrobat en Acrobat Reader DC Classic vóór 15.006.30119, en Acrobat en Acrobat Reader DC Continuous vóór… Adobe Apple Microsoft
- CVE-2016-0945 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows… Adobe Apple Microsoft
- CVE-2016-0944 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows… Adobe Apple Microsoft
- CVE-2016-0943 HIGH · 8.8 Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows… Adobe Apple Microsoft
- CVE-2016-0942 CRITICAL · 9.8 Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows… Adobe Apple Microsoft
- CVE-2016-0941 HIGH · 8.8 Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and… Adobe Apple Microsoft
- CVE-2016-0940 CRITICAL · 9.8 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before… Adobe Apple Microsoft
- CVE-2016-0939 HIGH · 8.8 Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows… Adobe Apple Microsoft
- CVE-2016-0938 HIGH · 8.8 The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous… Adobe Apple Microsoft
- CVE-2016-0937 HIGH · 8.8 Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and… Adobe Apple Microsoft
- CVE-2016-0936 HIGH · 8.8 Adobe Reader en Acrobat Reader DC Classic vóór 11.0.14, Acrobat en Acrobat Reader DC Classic vóór 15.006.30119, en Acrobat en Acrobat Reader DC Continuous vóór… Adobe Apple Microsoft
- CVE-2016-0935 HIGH · 8.8 Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous… Adobe Apple Microsoft
- CVE-2016-0934 HIGH · 8.8 Use-after-free kwetsbaarheid in AGM.dll in Adobe Reader en Acrobat vóór 11.0.14, Acrobat en Acrobat Reader DC Classic vóór 15.006.30119, en Acrobat en Acrobat Reader DC… Adobe Apple Microsoft
- CVE-2016-0933 CRITICAL · 9.8 Adobe Reader en Acrobat Reader DC Classic vóór 11.0.14, Acrobat en Acrobat Reader DC Classic vóór 15.006.30119, en Acrobat en Acrobat Reader DC Continuous vóór… Adobe Apple Microsoft
- CVE-2016-0932 HIGH · 8.8 Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and… Adobe Apple Microsoft
- CVE-2016-0931 HIGH · 8.8 Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows… Adobe Apple Microsoft
- CVE-2016-1569 MEDIUM · 6.5 FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an… Firebirdsql
- CVE-2016-1494 MEDIUM · 5.3 Met de verificatiefunctie in het RSA-pakket voor Python (Python-RSA) vóór 3.3 kunnen aanvallers handtekeningen vervalsen met een kleine publieke exponent via bewerkte handtekeningvulling, ook wel… Python Fedoraproject Opensuse
- CVE-2015-8607 HIGH · 7.3 De canonpath-functie in de File:: Spec-module in PathTools voor 3.62, zoals gebruikt in Perl, bewaart het taint-attribuut van gegevens niet goed, waardoor contextafhankelijke aanvallers het… Canonical Perl Debian
- CVE-2015-8466 HIGH · 7.4 Swift3 voor 1.9 stelt externe aanvallers in staat om replay-aanvallen uit te voeren via een autorisatieverzoek zonder datumkop. Fedoraproject Openstack