CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-7924 HIGH · 8.8 eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier… Ewon
- CVE-2015-7936 HIGH · 7.5 Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a… Motorola
- CVE-2015-7935 HIGH · 7.5 Met Motorola Solutions MOSCAD IP Gateway kunnen aanvallers op afstand willekeurige bestanden lezen via niet-gespecificeerde vectoren. Motorola
- CVE-2015-7917 HIGH · 7.2 Onvertrouwde zoekpadkwetsbaarheid in Open Automation OPC-systemen.NET 8.00.0023 en eerder stelt lokale gebruikers in staat om privileges te verkrijgen via een Trojaans paard DLL in een… Opcsystems
- CVE-2015-7911 CRITICAL · 9.1 Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials,… Saia Burgess Controls
- CVE-2015-6851 MEDIUM · 6.7 EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM… Rsa
- CVE-2015-6471 MEDIUM · 5.3 Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields… Eaton
- CVE-2015-6431 MEDIUM · 6.5 Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka… Cisco
- CVE-2015-8373 MEDIUM · 6.8 The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of… Isc
- CVE-2015-4545 HIGH · 8.0 Met EMC Isilon OneFS 7.1 vóór 7.1.1.8, 7.2.0 vóór 7.2.0.4 en 7.2.1 vóór 7.2.1.1 kunnen externe geverifieerde beheerders een SmartLock root-login-beperking omzeilen door een root-account… Emc
- CVE-2015-8458 MEDIUM · 6.8 Op heap gebaseerde bufferoverloop in AGM.dll in Adobe Reader en Acrobat 10.x vóór 10.1.16 en 11.x vóór 11.0.13, Acrobat en Acrobat Reader DC Classic vóór… Adobe Apple Microsoft
- CVE-2015-7937 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in de GoAhead-webserver op Schneider Electric Modicon M340 PLC BMXNOx- en BMXPx-apparaten stelt externe aanvallers in staat om willekeurige code uit… Schneider-electric
- CVE-2015-7919 CRITICAL · 10.0 SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application crash), via unspecified vectors. Searchblox
- CVE-2015-7908 HIGH · 9.3 Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network. Honeywell
- CVE-2015-7907 HIGH · 8.6 Directory traversal kwetsbaarheid in de webserver op Honeywell Midas gasdetectoren vóór 1.13b3 en Midas Black gasdetectoren vóór 2.13b3 stelt externe aanvallers in staat om authenticatie… Honeywell
- CVE-2015-7906 HIGH · 10.0 LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecified vectors. Loytec
- CVE-2015-7413 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in IBM WebSphere Portal 8.0.0 vóór 8.0.0.1 CF19 en 8.5.0 tot CF08 stelt externe aanvallers in staat om willekeurig webscript of… Ibm
- CVE-2015-6481 HIGH · 8.3 The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain… Moxa
- CVE-2015-6480 HIGH · 8.3 The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command,… Moxa
- CVE-2015-5001 MEDIUM · 4.3 IBM WebSphere Portal 6.1.0 tot en met 6.1.0.6 CF27, 6.1.5 tot en met 6.1.5.3 CF27, 7.0.0 tot en met 7.0.0.2 CF29, 8.0.0 tot en met… Ibm
- CVE-2015-4998 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and… Ibm
- CVE-2015-4993 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and… Ibm
- CVE-2015-1836 HIGH · 7.3 Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products,… Ibm Apache
- CVE-2015-1772 HIGH · 7.3 De LDAP-implementatie in HiveServer2 in Apache Hive vóór 1.0.1 en 1.1.x vóór 1.1.1, zoals gebruikt in IBM InfoSphere BigInsights 3.0, 3.0.0.1 en 3.0.0.2 en andere… Ibm Apache
- CVE-2015-6934 HIGH · 7.3 Met geserialiseerde objectinterfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x en vCenter Application Discovery Manager (vADM) 7.x kunnen… Vmware
- CVE-2015-7756 MEDIUM · 5.0 The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17… Juniper
- CVE-2015-6429 MEDIUM · 5.0 Met de IKEv1-statusmachine in Cisco IOS 15.4 tot en met 15.6 en IOS XE 3.15 tot en met 3.17 kunnen externe aanvallers een denial of… Cisco
- CVE-2015-6556 LOW · 2.3 EACommunicatorSrv.exe in de Framework Service in de client in Symantec Endpoint Encryption (ZIE) vóór 11.1.0 stelt op afstand geverifieerde gebruikers in staat om inloggegevens te… Symantec
- CVE-2015-6428 MEDIUM · 5.0 Cisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCuv03958. Cisco
- CVE-2015-6427 MEDIUM · 5.0 Cisco FireSIGHT Management Center stelt externe aanvallers in staat om de HTTP-aanvalsdetectiefunctie te omzeilen en te voorkomen dat Snort IDS-regels worden geactiveerd via een SSL-sessie… Cisco
- CVE-2015-6426 HIGH · 7.2 Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command,… Cisco
- CVE-2015-6424 HIGH · 7.2 The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via… Cisco
- CVE-2015-8602 LOW · 3.5 De Token Insert Entity-module 7.x-1.x vóór 7.x-1.1 voor Drupal controleert de machtigingen niet goed, waardoor op afstand geverifieerde gebruikers met bepaalde machtigingen de beoogde toegangsbeperkingen… Token Insert Entity Project
- CVE-2015-8601 MEDIUM · 5.0 The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote… Chat Room Project
- CVE-2015-8600 HIGH · 7.5 The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via… Sap
- CVE-2015-8369 HIGH · 7.5 SQL-injectiekwetsbaarheid in include/top_graph_header.php in Cacti 0.8.8f en eerder stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de parameter rra_id in een… Cacti
- CVE-2015-8368 MEDIUM · 6.0 ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to… Ntop
- CVE-2015-8341 HIGH · 7.8 De libxl-toolstackbibliotheek in Xen 4.1.x tot en met 4.6.x geeft de toewijzingen van bestanden die als kernels en initiële ramdisks worden gebruikt niet correct vrij… Xen
- CVE-2015-8340 MEDIUM · 4.7 The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial… Xen
- CVE-2015-8339 MEDIUM · 4.7 De memory_exchange-functie in common/memory.c in Xen 3.2.x tot en met 4.6.x geeft pagina's niet correct terug aan een domein, waardoor gastbesturingssysteembeheerders mogelijk een denial of… Xen
- CVE-2015-8338 HIGH · 7.2 Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap, (3) XENMEM_exchange, and possibly other HYPERVISOR_memory_op… Xen
- CVE-2015-8327 HIGH · 7.5 Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands… Redhat Linuxfoundation Canonical Debian
- CVE-2015-7527 HIGH · 7.5 lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview… Cool Video Gallery Project
- CVE-2015-7518 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global… Theforeman
- CVE-2015-5277 HIGH · 7.2 The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users… Redhat Gnu Canonical
- CVE-2015-5204 MEDIUM · 4.3 CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences… Apache
- CVE-2015-4027 HIGH · 7.2 Met de AcuWVSSchedulerv10-service in Acunetix Web Vulnerability Scanner (WVS) vóór 10 build 20151125 kunnen lokale gebruikers bevoegdheden verkrijgen via een opdrachtparameter in de eigenschap reporttemplate… Acunetix
- CVE-2015-8580 MEDIUM · 6.8 Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote… Foxitsoftware
- CVE-2015-8566 HIGH · 7.5 The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values. Joomla
- CVE-2015-8565 HIGH · 7.5 Directory traversal vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via unknown vectors. Joomla