CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8231 HIGH · 7.5 Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service (device restart)… Huawei
- CVE-2015-8230 HIGH · 7.5 Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart)… Huawei
- CVE-2015-7706 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1)… Ssp-europe
- CVE-2015-6566 HIGH · 8.4 zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-*. Zarafa Fedoraproject
- CVE-2015-7399 MEDIUM · 5.3 IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 before 10.0.0.0 allow remote attackers… Ibm
- CVE-2015-7024 MEDIUM · 6.7 Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse… Apple
- CVE-2015-6980 HIGH · 7.8 Directoryhulpprogramma in Apple OS X vóór 10.11.1 misbruikt authenticatie voor nieuwe sessies, waardoor lokale gebruikers privileges kunnen krijgen via niet-gespecificeerde vectoren. Apple
- CVE-2015-7466 LOW · 3.1 Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 vóór 6.0.0-Rational-CLM-ifix005 stelt op afstand geverifieerde gebruikers in staat om LDAP-injectieaanvallen uit te voeren… Ibm
- CVE-2015-7465 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack… Ibm
- CVE-2015-7397 HIGH · 7.4 Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to… Ibm
- CVE-2015-7116 MEDIUM · 4.3 libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial… Apple
- CVE-2015-7115 MEDIUM · 4.3 libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial… Apple
- CVE-2015-8512 MEDIUM · 4.6 De lockscreen-functie in Mozilla Firefox OS vóór 2.5 beperkt mislukte verificatiepogingen niet goed, waardoor het voor fysiek nabije aanvallers gemakkelijker wordt om toegang te krijgen… Mozilla
- CVE-2015-8511 MEDIUM · 6.4 Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors. Mozilla
- CVE-2015-8510 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de internationaliseringsfunctie in de standaard homescreen-app in Mozilla Firefox OS vóór 2.5 stelt door de gebruiker ondersteunde externe aanvallers in… Mozilla
- CVE-2015-7939 CRITICAL · 9.6 Op heap gebaseerde bufferoverloop in Unitronics VisiLogic OPLC IDE vóór 9.8.09 stelt externe aanvallers in staat om willekeurige code uit te voeren via een lange… Unitronics
- CVE-2015-7938 CRITICAL · 9.8 Advantech EKI-132x-apparaten met firmware vóór 31-12-2015 stellen externe aanvallers in staat om authenticatie te omzeilen via niet-gespecificeerde vectoren. Advantech
- CVE-2015-7575 MEDIUM · 5.9 Mozilla Network Security Services (NSS) vóór versie 3.20.2, zoals gebruikt in Mozilla Firefox vóór 43.0.2 en Firefox ESR 38.x vóór 38.5.2, weigert geen MD5-handtekeningen in… Mozilla Opensuse Canonical
- CVE-2015-7117 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Apple
- CVE-2015-7092 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a… Apple
- CVE-2015-7091 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Apple
- CVE-2015-7090 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Apple
- CVE-2015-7089 MEDIUM · 6.6 Apple QuickTime vóór 7.7.9 staat externe aanvallers toe om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging en applicatiecrash) te veroorzaken via… Apple
- CVE-2015-7088 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Apple
- CVE-2015-7087 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Apple
- CVE-2015-7086 MEDIUM · 6.6 Apple QuickTime vóór 7.7.9 staat externe aanvallers toe om willekeurige code uit te voeren of een denial of service (geheugenbeschadiging en applicatiecrash) te veroorzaken via… Apple
- CVE-2015-7085 MEDIUM · 6.6 Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted… Apple
- CVE-2015-6933 MEDIUM · 6.3 The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and… Vmware
- CVE-2016-1565 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings… Field Group Project
- CVE-2016-1501 MEDIUM · 4.3 ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in… Owncloud
- CVE-2016-1500 LOW · 3.1 ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the… Owncloud
- CVE-2016-1499 HIGH · 8.5 ownCloud Server vóór 8.0.10, 8.1.x vóór 8.1.5 en 8.2.x vóór 8.2.2 staan op afstand geverifieerde gebruikers toe om gevoelige informatie uit een directory-lijst te verkrijgen… Owncloud
- CVE-2016-1498 MEDIUM · 6.1 Cross-site scripting (XSS) -kwetsbaarheid in de OCS-detectieprovidercomponent in ownCloud Server vóór 7.0.12, 8.0.x vóór 8.0.10, 8.1.x vóór 8.1.5 en 8.2.x vóór 8.2.2 stelt externe aanvallers… Owncloud
- CVE-2015-8766 MEDIUM · 6.1 Meerdere cross-site scripting (XSS) kwetsbaarheden in content/content.systempreferences.php in Symphony CMS vóór 2.6.4 staan externe aanvallers toe om willekeurig webscript of HTML te injecteren via de… Getsymphony
- CVE-2015-8376 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation… Getsymphony
- CVE-2015-7541 CRITICAL · 10.0 The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via… Colorscore Project
- CVE-2015-7512 CRITICAL · 9.0 Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial… Qemu Redhat Debian Oracle
- CVE-2014-7151 MEDIUM · 6.1 Meerdere cross-site scripting (XSS) kwetsbaarheden in de NEX-Forms Lite plugin 2.1.0 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Nex-forms Lite Project
- CVE-2014-6444 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the Titan Framework plugin before 1.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via… Titan Framework Project
- CVE-2015-8765 HIGH · 8.3 Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute… Mcafee
- CVE-2015-8557 CRITICAL · 9.0 The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name. Canonical Pygments
- CVE-2015-4694 HIGH · 8.6 Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot… Zip Attachments Project
- CVE-2014-8886 HIGH · 8.1 AVM FRITZ!OS vóór 6.30 uur extraheert de inhoud van firmware-updates voordat ze hun cryptografische handtekening verifiëren, waardoor externe aanvallers symlinks kunnen maken of kritieke bestanden… Avm
- CVE-2015-8761 CRITICAL · 9.0 The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute… Values Project
- CVE-2015-8760 MEDIUM · 6.1 The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing." Typo3
- CVE-2015-8759 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web… Typo3
- CVE-2015-8758 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary… Typo3
- CVE-2015-8757 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script… Typo3
- CVE-2015-8756 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to… Typo3
- CVE-2015-8755 MEDIUM · 5.4 Meerdere XSS-kwetsbaarheden (cross-site scripting) in niet nader gespecificeerde backend-componenten in TYPO3 6.2.x vóór 6.2.16 en 7.x vóór 7.6.1 stellen externe geauthenticeerde editors in staat om… Typo3