CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-0035 HIGH · 7.8 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office… Microsoft
- CVE-2016-0032 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 Cumulative Update 11, and 2016… Microsoft
- CVE-2016-0031 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via… Microsoft
- CVE-2016-0030 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to… Microsoft
- CVE-2016-0029 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via… Microsoft
- CVE-2016-0024 HIGH · 8.8 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability." Microsoft
- CVE-2016-0020 HIGH · 7.8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loading, which allows local users to gain privileges… Microsoft
- CVE-2016-0019 HIGH · 8.1 The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions… Microsoft
- CVE-2016-0018 HIGH · 7.3 Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2 en Windows 10 Gold en 1511 misbruiken het laden van DLL's, waardoor lokale… Microsoft
- CVE-2016-0016 HIGH · 7.8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Microsoft
- CVE-2016-0015 HIGH · 7.8 DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… Microsoft
- CVE-2016-0014 HIGH · 7.8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold en R2, Windows… Microsoft
- CVE-2016-0012 MEDIUM · 4.3 Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2,… Microsoft
- CVE-2016-0011 MEDIUM · 5.4 Microsoft SharePoint Server 2013 SP1 en SharePoint Foundation 2013 SP1 stellen externe geverifieerde gebruikers in staat om beoogde beperkingen van het toegangsbeheerbeleid te omzeilen en… Microsoft
- CVE-2016-0010 HIGH · 7.8 Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word… Microsoft
- CVE-2016-0009 HIGH · 8.8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute… Microsoft
- CVE-2016-0008 MEDIUM · 4.3 De grafische apparaatinterface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Microsoft
- CVE-2016-0007 HIGH · 7.8 The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Microsoft
- CVE-2016-0006 HIGH · 7.3 De sandbox-implementatie in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold… Microsoft
- CVE-2016-0005 MEDIUM · 4.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability." Microsoft
- CVE-2016-0003 CRITICAL · 9.6 Met Microsoft Edge kunnen aanvallers op afstand willekeurige code uitvoeren via niet-gespecificeerde vectoren, ook bekend als "Microsoft Edge Memory Corruption Vulnerability." Microsoft
- CVE-2016-0002 HIGH · 7.5 De Microsoft (1) VBScript 5.7 en 5.8 en (2) JScript 5.7 en 5.8-engines, zoals gebruikt in Internet Explorer 8 tot en met 11 en andere… Microsoft
- CVE-2015-6117 MEDIUM · 6.1 Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting… Microsoft
- CVE-2016-1715 MEDIUM · 6.6 Het swin.sys kernelstuurprogramma in McAfee Application Control (MAC) 6.1.0 vóór build 706, 6.1.1 vóór build 404, 6.1.2 vóór build 449, 6.1.3 vóór build 441 en… Microsoft Mcafee
- CVE-2016-1232 HIGH · 7.5 The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier… Prosody Fedoraproject Debian
- CVE-2016-1231 MEDIUM · 5.9 Directory traversal-kwetsbaarheid in de HTTP-bestandsdienmodule (mod_http_files) in Prosody 0.9.x vóór 0.9.9 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot… Fedoraproject Prosody Debian
- CVE-2015-8769 HIGH · 7.3 SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors. Joomla
- CVE-2015-8673 MEDIUM · 6.8 Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the… Huawei
- CVE-2015-8672 MEDIUM · 5.3 Het mechanisme voor het beheer van toestemmingen voor presentatietransmissie in Huawei TE30-, TE40-, TE50- en TE60-eindpunten voor multimediale videoconferenties met software vóór V100R001C10SPC100 stelt externe… Huawei
- CVE-2015-8611 CRITICAL · 9.8 BIG-IP LTM, aam, AFM, Analytics, APM, ASM, DNS, Link Controller en PEM 12.0.0 vóór HF1 op de platforms 2000, 4000, 5000, 7000 en 10000 synchroniseren… F5
- CVE-2015-8397 HIGH · 8.2 The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a… Malaterre
- CVE-2015-8396 CRITICAL · 10.0 Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions… Malaterre
- CVE-2015-7759 LOW · 3.7 BIG-IP LTM, aam, AFM, Analytics, APM, ASM, Link Controller en PEM 12.0.0 vóór HF1, wanneer het TCP-profiel voor een virtuele server is geconfigureerd met Congestion… F5
- CVE-2015-7393 HIGH · 7.4 dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0… F5
- CVE-2015-8659 CRITICAL · 10.0 The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug. Apple Nghttp2
- CVE-2015-8603 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipity[entry_id] parameter in an "edit"… S9y
- CVE-2015-8400 HIGH · 7.4 The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via… Fedoraproject Shellinabox Project
- CVE-2015-8337 MEDIUM · 5.5 The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10 before GRA-UL10C00B220 and… Huawei
- CVE-2015-8306 HIGH · 7.8 Bufferoverloop in het HiFi-stuurprogramma in Huawei P8-telefoons met software GRA-TL00 vóór GRA-TL00C01B230, GRA-CL00 vóór GRA-CL00C92B230, GRA-CL10 vóór GRA-CL10C92B230, GRA-UL00 vóór GRA-UL00C00B230 en GRA-UL10 vóór GRA-UL10C00B230… Huawei
- CVE-2015-8098 CRITICAL · 9.8 F5 BIG-IP APM 11.4.1 vóór 11.4.1 HF9, 11.5.x vóór 11.5.3 en 11.6.0 vóór 11.6.0 HF4 staan aanvallers op afstand toe om een denial of service… F5
- CVE-2015-8088 HIGH · 7.8 Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00… Huawei
- CVE-2015-7548 LOW · 3.5 OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote… Openstack
- CVE-2015-7242 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the… Avm
- CVE-2015-5471 MEDIUM · 5.3 Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname… Swim Team Project
- CVE-2015-4703 MEDIUM · 5.3 Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname… Rename Project
- CVE-2015-4671 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php. Opencart
- CVE-2015-1779 HIGH · 8.6 Met de VNC websocket frame decoder in QEMU kunnen externe aanvallers een denial of service (geheugen- en CPU-verbruik) veroorzaken via een grote (1) websocket-payload of… Qemu Canonical Debian Fedoraproject
- CVE-2015-8335 MEDIUM · 6.5 Huawei VCN500 met software vóór V100R002C00SPC201 logt wachtwoorden in leesbare tekst, waarmee op afstand geverifieerde gebruikers gevoelige informatie kunnen verkrijgen door het genereren van logboeken… Huawei
- CVE-2015-8333 HIGH · 7.1 The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media… Huawei
- CVE-2015-8331 HIGH · 7.4 De bedienings- en onderhoudseenheid (OMU) in Huawei VCN500 met software vóór V100R002C00SPC200 maakt de sessie-ID niet correct ongeldig wanneer een "abnormale exit" optreedt, waardoor aanvallers… Huawei