CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8740 MEDIUM · 5.3 De dissect_tds7_colmetadata_token-functie in epan/dissectors/packet-tds.c in de TDS-dissector in Wireshark 2.0.x vóór 2.0.1 valideert het aantal kolommen niet, waardoor externe aanvallers een denial of service (stack-based… Wireshark
- CVE-2015-8739 MEDIUM · 5.5 The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers… Wireshark
- CVE-2015-8738 MEDIUM · 5.5 De functie s7comm_decode_ud_cpu_szl_subfunc in epan/dissectors/packet-s7comm_szl_ids.c in de S7COMM-dissector in Wireshark 2.0.x vóór 2.0.1 valideert de lijsttelling in een SZL-reactie niet, waardoor externe aanvallers een denial… Wireshark
- CVE-2015-8737 MEDIUM · 5.5 De functie mp2t_open in wiretap/mp2t.c in de MP2T-bestandsparser in Wireshark 2.0.x vóór 2.0.1 valideert de bitsnelheid niet, waardoor externe aanvallers een denial of service (deel… Wireshark
- CVE-2015-8736 MEDIUM · 5.5 The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote… Wireshark
- CVE-2015-8735 MEDIUM · 5.5 The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which… Wireshark
- CVE-2015-8734 MEDIUM · 5.5 De dissect_nwp-functie in epan/dissectors/packet-nwp.c in de NWP dissector in Wireshark 2.0.x vóór 2.0.1 misbruikt het pakkettype, waardoor externe aanvallers een denial of service (applicatiecrash) kunnen… Wireshark
- CVE-2015-8733 MEDIUM · 5.5 The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between… Wireshark
- CVE-2015-8732 MEDIUM · 5.5 The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile… Wireshark
- CVE-2015-8731 MEDIUM · 5.5 The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which… Wireshark
- CVE-2015-8730 MEDIUM · 5.5 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers… Wireshark
- CVE-2015-8729 MEDIUM · 5.5 The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of… Wireshark
- CVE-2015-8728 MEDIUM · 5.5 The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9… Wireshark
- CVE-2015-8727 MEDIUM · 5.5 The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which… Wireshark
- CVE-2015-8726 MEDIUM · 5.5 wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme… Wireshark
- CVE-2015-8725 MEDIUM · 5.5 The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length,… Wireshark
- CVE-2015-8724 MEDIUM · 5.5 The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key… Wireshark
- CVE-2015-8723 MEDIUM · 5.5 The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the… Wireshark
- CVE-2015-8722 MEDIUM · 5.5 epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to… Wireshark
- CVE-2015-8721 MEDIUM · 5.5 Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of… Wireshark
- CVE-2015-8720 MEDIUM · 5.5 De dissect_ber_GeneralizedTime-functie in epan/dissectors/packet-ber.c in de BER dissector in Wireshark 1.12.x vóór 1.12.9 en 2.0.x vóór 2.0.1 controleert ten onrechte een sscanf-retourwaarde, waardoor externe aanvallers… Wireshark
- CVE-2015-8719 MEDIUM · 5.5 De dissect_dns_answer-functie in epan/dissectors/packet-dns.c in de DNS-dissector in Wireshark 1.12.x vóór 1.12.9 misbruikt de EDNS0 Client Subnet-optie, waarmee externe aanvallers een denial of service (applicatiecrash)… Wireshark
- CVE-2015-8718 MEDIUM · 5.5 Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async… Wireshark
- CVE-2015-8717 MEDIUM · 5.5 The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows… Wireshark
- CVE-2015-8716 MEDIUM · 5.5 The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers… Wireshark
- CVE-2015-8715 MEDIUM · 5.5 epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of… Wireshark
- CVE-2015-8714 MEDIUM · 5.5 The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote… Wireshark
- CVE-2015-8713 MEDIUM · 5.5 epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to… Wireshark
- CVE-2015-8712 MEDIUM · 5.5 De dissect_hsdsch_channel_info functie in epan/dissectors/packet-umts_fp.c in de UMTS FP dissector in Wireshark 1.12.x vóór 1.12.9 valideert het aantal PDU's niet, waardoor externe aanvallers een denial… Wireshark
- CVE-2015-8711 MEDIUM · 5.5 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause… Wireshark
- CVE-2015-3182 MEDIUM · 5.5 epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial… Wireshark
- CVE-2015-8509 LOW · 3.5 Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV… Mozilla
- CVE-2015-8508 MEDIUM · 4.7 Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2,… Mozilla
- CVE-2015-5051 MEDIUM · 4.3 IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before… Ibm
- CVE-2015-5038 HIGH · 7.5 IBM Connections 3.x vóór 3.0.1.1 CR3, 4.0 vóór CR4, 4.5 vóór CR5 en 5.0 vóór CR3 detecteert recursie niet goed tijdens XML-entiteitsuitbreiding, waardoor externe aanvallers… Ibm
- CVE-2015-5037 MEDIUM · 5.4 Cross-site request forgery (CSRF) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated… Ibm
- CVE-2015-5036 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users… Ibm
- CVE-2015-5035 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users… Ibm
- CVE-2015-5023 MEDIUM · 5.4 SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Ibm
- CVE-2015-5017 MEDIUM · 5.4 IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and… Ibm
- CVE-2015-5003 HIGH · 8.5 The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands… Ibm
- CVE-2015-4962 LOW · 3.5 Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x… Ibm
- CVE-2015-4946 LOW · 3.3 Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9,… Ibm
- CVE-2016-1283 CRITICAL · 9.8 The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'){97)?J)?J)(?'R'(?'R'){99|(:(?|(?'R')(k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a… Pcre Php Fedoraproject Oracle
- CVE-2015-2007 MEDIUM · 5.0 Directory traversal kwetsbaarheid in IBM Security QRadar SIEM 7.2.x vóór 7.2.5 Patch 6 stelt externe geverifieerde gebruikers in staat om willekeurige bestanden te lezen via… Ibm
- CVE-2015-1985 MEDIUM · 5.6 The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging… Ibm
- CVE-2015-1971 MEDIUM · 4.3 Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before… Ibm
- CVE-2015-8027 HIGH · 7.5 Node.js 0.12.x vóór 0.12.9, 4.x vóór 4.2.3 en 5.x vóór 5.1.1 zorgt niet voor de beschikbaarheid van een parser voor elke HTTP-socket, waardoor externe aanvallers… Nodejs
- CVE-2015-7452 MEDIUM · 4.3 IBM Maximo Asset Management 7.5 vóór 7.5.0.9 FP9 en 7.6 vóór 7.6.0.3 FP3 en Maximo Asset Management 7.5 vóór 7.5.0.9 FP9, 7.5.1 en 7.6 vóór… Ibm
- CVE-2015-7438 MEDIUM · 4.7 IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access. Ibm