CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8564 HIGH · 7.5 Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in… Joomla
- CVE-2015-8563 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the com_templates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication… Joomla
- CVE-2015-8562 HIGH · 7.5 Joomla! 1.5.x, 2.x en 3.x vóór 3.4.6 staan externe aanvallers toe om PHP-objectinjectieaanvallen uit te voeren en willekeurige PHP-code uit te voeren via de HTTP… Joomla
- CVE-2015-8476 MEDIUM · 5.0 Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the… Debian Phpmailer Project
- CVE-2015-8370 HIGH · 7.4 Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk… Gnu Fedoraproject
- CVE-2015-8358 HIGH · 9.0 Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. (dot… Bitrix
- CVE-2015-8357 MEDIUM · 6.5 Directory traversal-kwetsbaarheid in de bitrix.xscan-module vóór 1.0.4 voor Bitrix stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te hernoemen en bijgevolg gevoelige informatie… Bitrix
- CVE-2015-5304 LOW · 3.5 Red Hat JBoss Enterprise Application Platform (EAP) vóór 6.4.5 autoriseert niet correct de toegang om de server af te sluiten, waardoor op afstand geverifieerde gebruikers… Redhat
- CVE-2015-8579 MEDIUM · 6.4 Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass… Kaspersky
- CVE-2015-8578 MEDIUM · 6.4 AVG Internet Security 2015 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the… Avg
- CVE-2015-8577 LOW · 2.6 The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses… Mcafee
- CVE-2015-8461 HIGH · 7.1 Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service… Isc
- CVE-2015-8000 MEDIUM · 5.0 db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure… Oracle Isc
- CVE-2015-6425 MEDIUM · 5.0 The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0.98000.88) allows remote attackers to cause a denial of service (subsystem outage) via invalid session… Cisco
- CVE-2015-7223 MEDIUM · 4.0 De WebExtension API's in Mozilla Firefox vóór 43.0 stellen externe aanvallers in staat om privileges te verkrijgen en mogelijk gevoelige informatie te verkrijgen of cross-site… Fedoraproject Mozilla Opensuse
- CVE-2015-7222 MEDIUM · 6.8 Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to… Mozilla Opensuse Fedoraproject
- CVE-2015-7221 HIGH · 10.0 Bufferoverloop in de nsDeque:: GrowCapacity-functiein xpcom/glue/nsDeque.cpp in Mozilla Firefox vóór 43.0 kan externe aanvallers toestaan om een denial of service te veroorzaken of mogelijk een… Mozilla Fedoraproject Opensuse
- CVE-2015-7220 HIGH · 10.0 Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly… Opensuse Mozilla Fedoraproject
- CVE-2015-7219 MEDIUM · 5.0 De HTTP/2-implementatie in Mozilla Firefox vóór 43.0 stelt externe aanvallers in staat om een denial of service (integer underflow, assertion failure en applicatie exit) te… Opensuse Mozilla Fedoraproject
- CVE-2015-7218 MEDIUM · 5.0 The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via… Opensuse Fedoraproject Mozilla
- CVE-2015-7217 MEDIUM · 4.3 The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial… Mozilla Gnome Opensuse Fedoraproject
- CVE-2015-7216 MEDIUM · 6.8 The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial… Fedoraproject Mozilla Gnome Opensuse
- CVE-2015-7215 MEDIUM · 5.0 The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering… Fedoraproject Opensuse Mozilla
- CVE-2015-7214 MEDIUM · 5.0 Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs. Opensuse Mozilla Fedoraproject
- CVE-2015-7213 MEDIUM · 6.8 Integer overflow in de MPEG4Extractor::readMetaData-functie in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox vóór 43.0 en Firefox ESR 38.x vóór 38.5 op 64-bits platforms stelt externe… Opensuse Fedoraproject Mozilla
- CVE-2015-7212 HIGH · 7.5 Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by… Fedoraproject Opensuse Mozilla
- CVE-2015-7211 MEDIUM · 5.0 Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors. Mozilla Fedoraproject Opensuse
- CVE-2015-7210 HIGH · 7.5 Use-after-free kwetsbaarheid in Mozilla Firefox vóór 43.0 en Firefox ESR 38.x vóór 38.5 staat externe aanvallers toe om willekeurige code uit te voeren door een… Mozilla Opensuse Fedoraproject
- CVE-2015-7208 MEDIUM · 5.0 Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers. Mozilla Fedoraproject Opensuse
- CVE-2015-7207 MEDIUM · 5.0 Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin… Mozilla Opensuse Fedoraproject
- CVE-2015-7205 HIGH · 10.0 Integer-onderloop in de RTPReceiverVideo:: ParseRtpPacket-functie in Mozilla Firefox vóór 43.0 en Firefox ESR 38.x vóór 38.5 kan externe aanvallers toestaan om gevoelige informatie te verkrijgen,… Fedoraproject Mozilla Opensuse
- CVE-2015-7204 MEDIUM · 6.8 Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable… Opensuse Fedoraproject Mozilla
- CVE-2015-7203 HIGH · 10.0 Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly… Mozilla Fedoraproject Opensuse
- CVE-2015-7202 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application… Mozilla Opensuse Fedoraproject
- CVE-2015-7201 HIGH · 10.0 Meerdere niet-gespecificeerde kwetsbaarheden in de browser-engine in Mozilla Firefox vóór 43.0 en Firefox ESR 38.x vóór 38.5 stellen externe aanvallers in staat om een denial… Fedoraproject Mozilla Opensuse
- CVE-2015-8572 MEDIUM · 6.8 Meerdere bufferoverloopfouten in Autodesk Design Review (ADR) vóór Hotfix 2013 maakten het voor externe aanvallers mogelijk om willekeurige code uit te voeren via speciaal geconstrueerde… Autodesk
- CVE-2015-8571 MEDIUM · 6.8 Integer overflow in Autodesk Design Review (ADR) vóór 2013 Hotfix 2 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigde… Autodesk
- CVE-2015-8570 HIGH · 7.4 The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request. Lepide
- CVE-2015-8377 MEDIUM · 6.5 SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted… Cacti
- CVE-2015-8317 MEDIUM · 5.0 The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete… Debian Canonical Xmlsoft Redhat
- CVE-2015-8247 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in synnefoclient in Synnefo Internet Management Software (IMS) 2015 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Synnefoims
- CVE-2015-8242 MEDIUM · 5.8 The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of… Xmlsoft Hp Apple Canonical
- CVE-2015-8241 MEDIUM · 6.4 De xmlNextChar-functie in libxml2 2.9.2 controleert de status niet goed, waardoor contextafhankelijke aanvallers een denial of service (heap-based buffer over-read en applicatiecrash) kunnen veroorzaken of… Debian Redhat Hp Canonical
- CVE-2015-7500 MEDIUM · 5.0 The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related… Hp Xmlsoft Debian Apple
- CVE-2015-7499 MEDIUM · 5.0 Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors. Apple Canonical Redhat Hp
- CVE-2015-7498 MEDIUM · 5.0 Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors… Hp Canonical Debian Redhat
- CVE-2015-7497 MEDIUM · 5.0 Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors. Debian Canonical Xmlsoft Redhat
- CVE-2015-5312 HIGH · 7.1 The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service… Canonical Redhat Apple Xmlsoft
- CVE-2015-8561 MEDIUM · 6.8 Met het F1BookView ActiveX-besturingselement in F1 Bookview in Schneider Electric ProClima vóór 6.2 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging)… Schneider-electric
- CVE-2015-7918 MEDIUM · 6.8 Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via… Schneider-electric