CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-6019 HIGH · 8.5 The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote attackers to bypass intended… Zyxel
- CVE-2015-6018 CRITICAL · 9.8 De diagnostische ping-implementatie op ZyXEL PMG5318-B20A-apparaten met firmware vóór 1.00(AANC.2)C0 stelt externe aanvallers in staat om willekeurige opdrachten uit te voeren via de PingIPAddr-parameter. Zyxel
- CVE-2015-6017 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or… Zyxel
- CVE-2015-6016 CRITICAL · 9.8 ZyXEL P-660HW-T1 2-apparaten met ZyNOS-firmware 3.40(AXH.0), PMG5318-B20A-apparaten met firmware 1.00AANC0b5 en NBG-418N-apparaten hebben een standaardwachtwoord van 1234 voor het beheerdersaccount, waarmee externe aanvallers administratieve toegang… Zyxel
- CVE-2015-5996 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users. Mediabridge
- CVE-2015-5995 CRITICAL · 9.8 Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring… Tenda Mediabridge
- CVE-2015-5994 MEDIUM · 6.8 De webbeheerinterface op Mediabridge Medialink MWN-WAPR300N-apparaten met firmware 5.07.50 heeft een standaardwachtwoord van admin voor het beheerdersaccount en een standaardwachtwoord van password voor het medialink-account,… Mediabridge
- CVE-2015-2918 MEDIUM · 6.1 The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it… Orientdb
- CVE-2015-2913 MEDIUM · 5.9 server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of… Orientdb
- CVE-2015-2912 HIGH · 8.8 The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which… Orientdb
- CVE-2015-2896 MEDIUM · 5.3 The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sensitive version, OS, process, and event-log information via a… Idera
- CVE-2015-2895 HIGH · 7.3 Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute arbitrary code via long command input. Idera
- CVE-2015-2894 MEDIUM · 5.3 Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attackers to cause a denial of service (application… Idera
- CVE-2015-2876 HIGH · 8.8 Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105… Lacie Seagate
- CVE-2015-2875 HIGH · 7.5 Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105… Seagate Lacie
- CVE-2015-2874 CRITICAL · 9.8 Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of… Seagate Lacie
- CVE-2014-4876 LOW · 3.7 Toshiba 4690 Operating System 6 Release 3, wanneer de logische naam van ADXSITCF niet correct is beperkt, stelt externe aanvallers in staat om potentieel gevoelige… Toshiba
- CVE-2014-3260 HIGH · 7.5 Pacom 1000 CCU and RTU GMS devices allow remote attackers to spoof the controller-to-base data stream by leveraging improper use of cryptography. Pacom
- CVE-2015-8703 MEDIUM · 6.5 ZTE ZXHN H108N R1A-APPARATEN vóór ZTE.bhs.ZXHNH108NR1A.k_PE en ZXV10 W300-apparaten W300V1.0.0f_ER1_PE stellen op afstand geverifieerde gebruikers in staat om beoogde toegangsbeperkingen te omzeilen en referenties en… Zte
- CVE-2015-7794 MEDIUM · 5.8 Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service (traffic amplification) via crafted queries. Corega
- CVE-2015-7793 MEDIUM · 5.8 Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors. Corega
- CVE-2015-7792 CRITICAL · 9.8 Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors. Corega
- CVE-2015-7790 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified… Asus
- CVE-2015-7789 MEDIUM · 4.3 ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors. Asus
- CVE-2015-7788 HIGH · 7.3 ASUS Japan WL-330NUL-apparaten met firmware vóór 3.0.0.42 staan aanvallers op afstand toe om willekeurige opdrachten uit te voeren via niet-gespecificeerde vectoren. Asus
- CVE-2015-7787 MEDIUM · 4.3 ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors. Asus
- CVE-2015-7784 MEDIUM · 4.3 SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute… Bokublock
- CVE-2015-7782 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVE-2015-7252 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via… Zte
- CVE-2015-7251 CRITICAL · 9.8 ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access… Zte
- CVE-2015-7250 HIGH · 7.5 Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname… Zte
- CVE-2015-7249 MEDIUM · 4.9 ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the… Zte
- CVE-2015-7248 HIGH · 7.5 ZTE ZXHN H108N R1A-APPARATEN vóór ZTE.bhs.ZXHNH108NR1A.k_PE stellen externe aanvallers in staat om gebruikersnamen en wachtwoordhashes te ontdekken door de cgi-bin/webproc HTML-broncode te lezen, een andere… Zte
- CVE-2015-5663 HIGH · 7.4 The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to… Rarlab
- CVE-2015-8467 HIGH · 7.5 De functie samldb_check_user_account_control_acl in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x vóór 4.1.22, 4.2.x vóór 4.2.7 en 4.3.x vóór 4.3.3 controleert niet goed op beheerdersrechten tijdens het maken… Samba Debian Canonical
- CVE-2015-7791 MEDIUM · 6.3 Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via… Welcart
- CVE-2015-7540 HIGH · 7.5 The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which… Samba Canonical Debian
- CVE-2015-5330 HIGH · 7.5 ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths,… Samba
- CVE-2015-5299 MEDIUM · 5.3 The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST… Samba Debian Canonical
- CVE-2015-5296 MEDIUM · 5.4 Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to… Samba Debian Canonical
- CVE-2015-5252 HIGH · 7.2 vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist,… Samba Canonical Debian
- CVE-2015-3223 MEDIUM · 5.3 The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and… Samba
- CVE-2015-7786 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary… Nttdata
- CVE-2015-8650 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Google Microsoft
- CVE-2015-8649 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Microsoft Google
- CVE-2015-8648 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Google Microsoft
- CVE-2015-8647 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Google Microsoft
- CVE-2015-8646 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Google Microsoft
- CVE-2015-8645 HIGH · 8.8 Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233,… Adobe Apple Google Microsoft
- CVE-2015-8644 HIGH · 8.8 Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233,… Adobe Apple Microsoft Linux