CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8754 HIGH · 7.5 The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom blacklist via unspecified vectors. Acquia
- CVE-2015-8753 CRITICAL · 9.1 SAP Afaria 7.0.6001.5 stelt externe aanvallers in staat om autorisatiecontroles te omzeilen en mobiele apparaten te wissen of te vergrendelen via een vervaardigd verzoek, gerelateerd… Sap
- CVE-2015-8668 CRITICAL · 9.8 Op heap gebaseerde bufferoverloop in de PackBitsPreEncode-functie in tif_packbits.c in bmp2tiff in libtiff 4.0.6 en eerder stelt externe aanvallers in staat om willekeurige code uit… Libtiff Oracle Redhat
- CVE-2015-8615 MEDIUM · 5.0 De hvm_set_callback_via functie in arch/x86/hvm/irq.c in Xen 4.6 beperkt het aantal printk console berichten niet bij het loggen van de nieuwe callback methode, waardoor lokale… Xen
- CVE-2015-8612 HIGH · 8.4 The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument. Blueman Project
- CVE-2015-8597 HIGH · 7.4 Open redirect-kwetsbaarheid in Blue Coat ProxySG 6.5 vóór 6.5.8.8 en 6.6 en Advanced Secure Gateway (ASG) 6.6 kunnen externe aanvallers in staat stellen gebruikers om… Bluecoat
- CVE-2015-8547 HIGH · 7.5 Met de CoreUserInputHandler:: doMode-functie in core/coreuserinputhandler.cpp in Quassel 0.10.0 kunnen externe aanvallers een denial of service (applicatiecrash) veroorzaken via het commando "/op *" in een… Quassel-irc Opensuse
- CVE-2015-8481 LOW · 3.1 Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3 en het gebundelde JIRA Service Desk 3.0.3-installatieprogramma voegen de verkeerde afbeelding toe aan e-mailmeldingen wanneer een gebruiker een… Atlassian
- CVE-2015-8303 MEDIUM · 4.0 Huawei Document Security Management (DSM) with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain… Huawei
- CVE-2015-8226 MEDIUM · 5.5 The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before… Huawei
- CVE-2015-8225 MEDIUM · 5.5 Het Joint Photographic Experts Group Processing Unit (JPU) -stuurprogramma in Huawei ALE-smartphones met software vóór ALE-UL00C00B220 en ALE-TL00C01B220 en GEM-703L-smartphones met software vóór V100R001C233B111 stelt… Huawei
- CVE-2015-7758 LOW · 3.3 Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an… Opensuse Gummi Project
- CVE-2015-7754 HIGH · 8.1 Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code… Juniper
- CVE-2015-7554 CRITICAL · 9.8 The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified… Libtiff
- CVE-2015-7519 LOW · 3.7 agent/Core/Controller/SendRequest.cpp in Phusion Passenger vóór 4.0.60 en 5.0.x vóór 5.0.22, bij gebruik in Apache-integratiemodus of in standalone modus zonder filterproxy, stelt externe aanvallers in staat… Phusionpassenger
- CVE-2015-7362 HIGH · 7.8 Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to… Fortinet
- CVE-2015-7328 MEDIUM · 4.7 Puppet Server in Puppet Enterprise vóór 3.8.x vóór 3.8.3 en 2015.2.x vóór 2015.2.3 gebruikt wereldleesbare machtigingen voor de privésleutel van het certificaat van de certificeringsinstantie… Puppet
- CVE-2015-6856 HIGH · 7.8 Dell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call. Dell
- CVE-2015-5259 HIGH · 8.6 Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol… Apache
- CVE-2015-5254 CRITICAL · 9.8 Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code… Redhat Apache Fedoraproject
- CVE-2016-1131 HIGH · 7.8 Buffer overflow in the CL_vsprintf function in Takumi Yamada DX Library before 3.16 allows remote attackers to execute arbitrary code via a crafted string. Dx Library Project
- CVE-2015-8261 CRITICAL · 9.8 De DroneDeleteOldMeasurements-implementatie in Ipswitch WhatsUp Gold vóór 16.4 valideert niet goed geserialiseerde XML-objecten, waardoor externe aanvallers SQL-injectieaanvallen kunnen uitvoeren via een vervaardigd SOAP-verzoek. Progress
- CVE-2015-6862 HIGH · 8.4 HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors. Hp
- CVE-2015-6434 MEDIUM · 6.1 Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other… Cisco
- CVE-2015-6433 MEDIUM · 6.5 SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID… Cisco
- CVE-2015-6647 HIGH · 7.8 The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that… Google
- CVE-2015-6646 MEDIUM · 6.2 De System V IPC-implementatie in de kernel in Android vóór 6.0 2016-01-01 stelt aanvallers in staat om een denial of service (wereldwijd verbruik van kernelbronnen)… Google
- CVE-2015-6645 MEDIUM · 5.0 SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted application, aka… Google
- CVE-2015-6644 LOW · 3.3 Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146. Google
- CVE-2015-6643 MEDIUM · 6.6 Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism… Google
- CVE-2015-6642 CRITICAL · 9.8 The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via… Google
- CVE-2015-6641 LOW · 3.1 Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427. Google
- CVE-2015-6640 HIGH · 7.8 The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a… Google
- CVE-2015-6639 HIGH · 7.8 The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that… Google
- CVE-2015-6638 HIGH · 7.8 The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal… Google
- CVE-2015-6637 HIGH · 7.8 The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug… Google
- CVE-2015-6636 CRITICAL · 9.8 mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Google
- CVE-2015-5310 MEDIUM · 4.3 The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was… Google
- CVE-2015-6861 HIGH · 7.5 HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a… Eucalyptus
- CVE-2015-6860 HIGH · 8.4 HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859. Hp
- CVE-2015-6859 HIGH · 7.8 HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860. Hp
- CVE-2015-6858 LOW · 3.7 HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors. Hp
- CVE-2015-5447 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in HP StoreOnce Backup-systeemsoftware vóór 3.13.1 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via… Hp
- CVE-2015-5446 HIGH · 7.5 HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors. Hp
- CVE-2015-5445 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via… Hp
- CVE-2015-5434 MEDIUM · 6.5 HPE-netwerkproducten, oorspronkelijk gebrandmerkt als Comware 5, Comware 7, H3C of HP, stellen externe aanvallers in staat om beoogde toegangsbeperkingen te omzeilen of een denial of… Hp
- CVE-2015-6432 HIGH · 7.5 Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for… Cisco
- CVE-2014-5040 MEDIUM · 6.8 HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary… Eucalyptus
- CVE-2015-8742 MEDIUM · 5.5 The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to… Wireshark
- CVE-2015-8741 MEDIUM · 5.5 The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers… Wireshark