CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8643 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Microsoft Linux
- CVE-2015-8642 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Microsoft Google
- CVE-2015-8641 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Google Microsoft
- CVE-2015-8640 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Microsoft Google
- CVE-2015-8639 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Linux Apple Google
- CVE-2015-8638 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Linux Apple Google
- CVE-2015-8636 HIGH · 8.8 Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233,… Adobe Apple Google Microsoft
- CVE-2015-8635 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Linux Apple Google
- CVE-2015-8634 HIGH · 8.8 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe… Adobe Apple Microsoft Google
- CVE-2015-8460 HIGH · 8.8 Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233,… Adobe Apple Microsoft Linux
- CVE-2015-8459 CRITICAL · 10.0 Adobe Flash Player vóór 18.0.0.324 en 19.x en 20.x vóór 20.0.0.267 op Windows en OS X en vóór 11.2.202.559 op Linux, Adobe AIR vóór 20.0.0.233,… Adobe Apple Google Microsoft
- CVE-2015-6852 MEDIUM · 4.3 Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via… Emc
- CVE-2015-6850 HIGH · 8.4 EMC VPLEX GeoSynchrony 5.4 SP1 voor P3 en 5.5 voor Patch 1 heeft een standaardwachtwoord voor het root-account, waarmee lokale gebruikers privileges kunnen krijgen door… Emc
- CVE-2015-8660 MEDIUM · 6.7 The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access… Linux
- CVE-2015-8569 LOW · 2.3 De functies (1) pptp_bind en (2) pptp_connect in drivers/net/ppp/pptp.c in de Linux-kernel tot en met 4.3.3 verifiëren geen adreslengte, waardoor lokale gebruikers gevoelige informatie uit… Linux
- CVE-2015-8543 HIGH · 7.0 De netwerkimplementatie in de Linux-kernel via 4.3.3, zoals gebruikt in Android en andere producten, valideert geen protocol-ID's voor bepaalde protocolfamilies, waardoor lokale gebruikers een denial… Linux
- CVE-2015-8374 MEDIUM · 4.0 fs/btrfs/inode.c in de Linux-kernel vóór 4.3.3 mishandelt gecomprimeerde inline-uitbreidingen, waardoor lokale gebruikers gevoelige pre-truncatie-informatie uit een bestand kunnen verkrijgen via een kloonactie. Linux
- CVE-2015-7990 MEDIUM · 5.8 Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer… Linux
- CVE-2015-7885 LOW · 2.3 The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive… Linux
- CVE-2015-7884 LOW · 2.3 The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive… Linux
- CVE-2015-7509 MEDIUM · 4.4 fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (system crash) via a crafted no-journal filesystem, a… Linux
- CVE-2013-7446 MEDIUM · 5.3 Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service… Linux
- CVE-2015-7783 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVE-2015-7665 MEDIUM · 5.3 Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to… Tails Project
- CVE-2015-6538 CRITICAL · 9.8 The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently… Ephiphanyheathdata
- CVE-2015-6537 CRITICAL · 9.8 SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL. Epiphanyhealthdata
- CVE-2015-8263 HIGH · 8.6 NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof… Netgear
- CVE-2015-8262 MEDIUM · 6.8 Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query,… Buffalotech
- CVE-2015-8254 MEDIUM · 5.9 The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1)… Rsi Video Technologies
- CVE-2015-8253 LOW · 3.7 The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers… Rsi Video Technologies
- CVE-2015-8252 MEDIUM · 5.9 The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to determine a hardcoded key… Rsi Video Technologies
- CVE-2015-6005 MEDIUM · 6.9 Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP… Progress
- CVE-2015-6004 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter… Progress
- CVE-2015-8669 MEDIUM · 5.3 libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which… Phpmyadmin
- CVE-2015-6409 MEDIUM · 5.9 Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka… Cisco
- CVE-2015-8664 HIGH · 8.8 Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have… Google
- CVE-2015-6792 CRITICAL · 9.8 Het MIDI-subsysteem in Google Chrome vóór 47.0.2526.106 verwerkt het verzenden van gegevens niet correct, waardoor externe aanvallers willekeurige code kunnen uitvoeren of een denial of… Google
- CVE-2015-8663 HIGH · 8.3 The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial… Ffmpeg
- CVE-2015-8662 HIGH · 7.3 The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which… Ffmpeg
- CVE-2015-8661 HIGH · 8.3 The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which… Ffmpeg
- CVE-2015-7934 HIGH · 8.6 The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors. Adcon
- CVE-2015-7932 HIGH · 8.6 Adcon Telemetry A840 Telemetry Gateway Base Station stelt externe aanvallers in staat om gevoelige informatie te verkrijgen door het netwerk te besnuffelen. Adcon
- CVE-2015-7931 HIGH · 8.7 De Java-client in Adcon Telemetry A840 Telemetry Gateway Base Station authenticeert het stationapparaat niet, waardoor man-in-the-middle-aanvallers apparaten kunnen vervalsen en gevoelige informatie kunnen verkrijgen door… Adcon
- CVE-2015-7930 CRITICAL · 10.0 Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors. Adcon
- CVE-2015-8267 CRITICAL · 10.0 The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with… Dovestones
- CVE-2015-7929 MEDIUM · 4.3 eWON-apparaten met firmware via 10.1s0 ondersteunen niet-gespecificeerde GET-verzoeken, waardoor externe aanvallers mogelijk gevoelige informatie kunnen verkrijgen door (1) webserver-toegangslogboeken, (2) webserver-verwijzingslogboeken of (3) de browsergeschiedenis… Ewon
- CVE-2015-7928 HIGH · 8.5 eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to… Ewon
- CVE-2015-7927 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Ewon
- CVE-2015-7926 CRITICAL · 9.9 eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an… Ewon
- CVE-2015-7925 HIGH · 8.0 Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger… Ewon