CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-7437 MEDIUM · 5.5 Queue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive information via unspecified vectors. Ibm
- CVE-2015-7436 LOW · 2.5 IBM Tivoli Common Reporting (TCR) 2.1 vóór IF14, 2.1.1 vóór IF22, 2.1.1.2 vóór IF9, 3.1.0.0 tot en met 3.1.2 zoals gebruikt in Cognos Business Intelligence… Ibm
- CVE-2015-7435 LOW · 2.5 IBM Tivoli Common Reporting (TCR) 2.1 vóór IF14, 2.1.1 vóór IF22, 2.1.1.2 vóór IF9, 3.1.0.0 tot 3.1.2 zoals gebruikt in Cognos Business Intelligence vóór 10.2… Ibm
- CVE-2015-7431 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2 allows remote attackers to inject arbitrary web script or HTML via a… Ibm
- CVE-2015-7430 HIGH · 8.4 The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System (GPFS) allows local users to read… Apache
- CVE-2015-7426 CRITICAL · 10.0 The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual… Ibm
- CVE-2015-7422 MEDIUM · 5.5 Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors. Ibm Microsoft
- CVE-2015-7416 MEDIUM · 4.0 AFP Workbench Viewer in IBM i Access 7.1 on Windows allows remote attackers to cause a denial of service (viewer crash) via a crafted workbench… Ibm Microsoft
- CVE-2015-7407 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests… Ibm
- CVE-2015-7403 MEDIUM · 4.0 IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to… Ibm
- CVE-2015-7400 HIGH · 7.7 The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML external… Ibm
- CVE-2015-7396 MEDIUM · 5.4 The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1,… Ibm
- CVE-2015-2023 HIGH · 8.8 Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors. Ibm Microsoft
- CVE-2015-1928 MEDIUM · 6.8 Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x… Ibm
- CVE-2015-7451 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9… Ibm
- CVE-2015-7442 HIGH · 7.0 consoleinst.sh in IBM Installation Manager vóór 1.7.4.4 en 1.8.x vóór 1.8.4 en Packaging Utility vóór 1.7.4.4 en 1.8.x vóór 1.8.4 stelt lokale gebruikers in staat… Ibm
- CVE-2015-7429 HIGH · 8.5 De extensie voor gegevensbescherming in de VMware GUI in IBM Tivoli Storage Manager voor virtuele omgevingen: Gegevensbescherming voor VMware (ook bekend als Spectrum Protect voor… Ibm
- CVE-2015-7402 MEDIUM · 5.4 Cross-site scripting (XSS) kwetsbaarheid in IBM Curam Social Program Management 6.1 vóór 6.1.1.1 stelt externe geverifieerde gebruikers in staat om willekeurig webscript of HTML te… Ibm
- CVE-2015-5020 MEDIUM · 4.3 The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary… Ibm
- CVE-2015-5018 HIGH · 8.0 IBM Security Access Manager voor Web 7.0.0 vóór FP19 en 8.0 vóór 8.0.1.3 IF3, en Security Access Manager 9.0 vóór 9.0.0.0 IF1, stelt op afstand… Ibm
- CVE-2015-4996 MEDIUM · 5.1 IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors. Ibm
- CVE-2015-4990 MEDIUM · 4.0 The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A… Ibm
- CVE-2015-4989 LOW · 3.7 The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A… Ibm
- CVE-2015-7456 MEDIUM · 6.5 IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors. Ibm
- CVE-2015-7409 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in IBM Security QRadar SIEM 7.2.x vóór 7.2.6 stelt externe geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren… Ibm
- CVE-2015-7445 MEDIUM · 4.3 IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain… Ibm
- CVE-2015-7421 LOW · 3.7 Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than… Ibm
- CVE-2015-7420 LOW · 3.7 Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than… Ibm
- CVE-2015-7415 MEDIUM · 5.4 Meerdere cross-site scripting (XSS) kwetsbaarheden in IBM UrbanCode Deploy 6.0 vóór 6.0.1.12, 6.1 vóór 6.1.3.2 en 6.2 vóór 6.2.0.2 stellen op afstand geverifieerde gebruikers in… Ibm
- CVE-2015-7410 HIGH · 7.4 De Health Check-tool in IBM Sterling B2B Integrator 5.2 gebruikt cookies niet correct in combinatie met HTTPS-SESSIES, waardoor man-in-the-middle-aanvallers gevoelige informatie kunnen verkrijgen of gegevens… Ibm
- CVE-2015-5049 MEDIUM · 5.4 SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to… Ibm
- CVE-2015-4943 MEDIUM · 5.3 IBM WebSphere MQ Light 1.x voor 1.0.2 stelt externe aanvallers in staat om een denial of service (MQXR-servicecrash) te veroorzaken via een reeks verbindings- en… Ibm
- CVE-2015-4941 MEDIUM · 5.3 IBM WebSphere MQ Light 1.x before 1.0.2 mishandelt afgekorte TLS-handshakes, waardoor externe aanvallers een denial of service (MQXR-servicecrash) kunnen veroorzaken via niet-gespecificeerde vectoren. Ibm
- CVE-2015-7489 HIGH · 7.8 IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows local users to gain privileges… Ibm
- CVE-2015-7441 MEDIUM · 6.8 Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5… Ibm
- CVE-2015-5990 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users. Zyxel
- CVE-2015-5989 CRITICAL · 9.8 Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes… Zyxel
- CVE-2015-5988 CRITICAL · 9.8 De webbeheerinterface op Belkin F9K1102 2-apparaten met firmware 2.10.17 heeft een leeg wachtwoord, waarmee externe aanvallers beheerdersrechten kunnen verkrijgen door gebruik te maken van een… Zyxel
- CVE-2015-5987 HIGH · 8.6 Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes… Zyxel
- CVE-2015-1947 HIGH · 7.4 Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges… Ibm
- CVE-2015-7447 MEDIUM · 5.3 IBM WebSphere Portal 6.1.0 tot en met 6.1.0.6 CF27, 6.1.5 tot en met 6.1.5.3 CF27, 7.0.0 tot en met 7.0.0.2 CF29, 8.0.0 vóór 8.0.0.1 CF20,… Ibm
- CVE-2015-7284 HIGH · 8.0 Cross-site request forgery (CSRF) -kwetsbaarheid op ZyXEL NBG-418N-apparaten met firmware 1.00(AADZ.3)C0 stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te kapen. Zyxel
- CVE-2015-7283 HIGH · 8.1 The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a default password of 1234 for the admin account, which allows remote attackers… Zyxel
- CVE-2015-7282 MEDIUM · 5.8 ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof… Readynet Solutions
- CVE-2015-7281 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users. Readynet Solutions
- CVE-2015-7280 CRITICAL · 9.8 The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers… Readynet Solutions
- CVE-2015-7279 MEDIUM · 5.3 Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes… Ampedwireless
- CVE-2015-7278 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users. Ampedwireless
- CVE-2015-7277 CRITICAL · 9.8 De webbeheerinterface op Amped Wireless R10000-apparaten met firmware 2.5.2.11 heeft een standaardwachtwoord van admin voor het beheerdersaccount, waarmee externe aanvallers beheerdersrechten kunnen verkrijgen door gebruik… Ampedwireless
- CVE-2015-6020 HIGH · 8.0 Met ZyXEL PMG5318-B20A-apparaten met firmware 1.00 AANC0b5kunnen op afstand geverifieerde gebruikers beheerdersrechten verkrijgen door gebruik te maken van de toegang tot het gebruikersaccount. Zyxel