CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8229 MEDIUM · 4.0 Huawei eSpace U2980 uniforme gateway met software vóór V100R001C10 en U2990 met software vóór V200R001C10 stellen op afstand geverifieerde gebruikers in staat om een denial… Huawei
- CVE-2015-8228 MEDIUM · 4.0 Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 routers with software before V200R006SPH003… Huawei
- CVE-2015-8227 HIGH · 8.5 The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial… Huawei
- CVE-2015-7985 HIGH · 7.2 Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse… Valvesoftware
- CVE-2015-7981 MEDIUM · 5.0 The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory… Canonical Debian Redhat Libpng
- CVE-2015-7869 MEDIUM · 6.6 Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on… Canonical Nvidia Linux Microsoft
- CVE-2015-7866 HIGH · 7.2 Unquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352… Nvidia Microsoft
- CVE-2015-7865 HIGH · 7.7 nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows… Nvidia Microsoft
- CVE-2015-7808 HIGH · 7.5 Met de vB_Api_Hook:: decodeArguments-methode in vBulletin 5 Connect 5.1.2 tot en met 5.1.9 kunnen externe aanvallers PHP-objectinjectieaanvallen uitvoeren en willekeurige PHP-code uitvoeren via een vervaardigd… Vbulletin
- CVE-2015-7496 HIGH · 7.2 Gnome Display Manager (gdm) vóór 3.18.2 stelt fysiek nabije aanvallers in staat om het vergrendelingsscherm te omzeilen door de Escape-toets ingedrukt te houden. Fedoraproject Gnome
- CVE-2015-5281 LOW · 2.6 The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot… Redhat
- CVE-2015-5053 HIGH · 10.0 De functie voor het toewijzen van hostgeheugen in het grafische stuurprogramma van de NVIDIA GPU R346 vóór 346.87 en R352 vóór 352.41 voor Linux en… Nvidia
- CVE-2015-0856 MEDIUM · 4.6 daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when… Fedoraproject Sddm Project
- CVE-2015-6380 MEDIUM · 6.5 An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary… Cisco
- CVE-2015-6377 HIGH · 7.8 Cisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP port outage)… Cisco
- CVE-2015-8320 MEDIUM · 5.0 Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data, which makes it easier for attackers to conduct bridge hijacking attacks by predicting a… Apache
- CVE-2015-5256 MEDIUM · 4.3 Apache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly implements a JavaScript whitelist protection mechanism, which allows attackers to bypass intended… Apache
- CVE-2015-5451 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown… Hp
- CVE-2015-7036 HIGH · 7.5 The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or… Apple
- CVE-2015-5859 MEDIUM · 4.3 The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari… Apple
- CVE-2015-5787 MEDIUM · 4.3 De kernel in Apple iOS vóór 8.4.1 beperkt de foutopsporingsfuncties niet goed, waardoor aanvallers achtergronduitvoeringsbeperkingen kunnen omzeilen via een vervaardigde app. Apple
- CVE-2015-7913 HIGH · 7.2 ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the… Tibbo
- CVE-2015-7912 HIGH · 10.0 The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java… Tibbo
- CVE-2015-7777 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in index.php in JosephErnest Void vóór 2015-10-02 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via een… Void Project
- CVE-2015-7291 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows… Arris
- CVE-2015-7290 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in adv_pwd_cgi in de webbeheerinterface op Arris DG860A-, TG862A- en TG862G-apparaten met firmware TS0703128_100611 tot TS0705125D_031115 stelt externe aanvallers in staat… Arris
- CVE-2015-7289 HIGH · 9.3 Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes it easier… Arris
- CVE-2015-6376 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Cisco TelePresence Video Communication Server (VCS) X8.5.1 stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te… Cisco
- CVE-2015-6375 LOW · 2.1 Met de functie debug-logging (ook bekend als debug cns) in Cisco Networking Services (CNS) voor IOS 15.2(2)E3 kunnen lokale gebruikers gevoelige informatie verkrijgen door een… Cisco
- CVE-2009-5149 MEDIUM · 4.3 Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access… Arris
- CVE-2015-7773 MEDIUM · 6.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in de Panel-component in Bastian Allgeier Kirby vóór 2.1.2 stelt op afstand geverifieerde gebruikers in staat om willekeurige… Bastian Allgeier
- CVE-2015-7772 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary… Newphoria Corporation
- CVE-2015-7771 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary… Newphoria Corporation
- CVE-2015-8087 MEDIUM · 5.0 Huawei NE20E-S-, NE40E-M- en NE40E-M2-routers met software vóór V800R007C10SPC100 en NE40E- en NE80E-routers met software vóór V800R007C00SPC100 stellen externe aanvallers in staat om pakketten naar… Huawei
- CVE-2015-8083 HIGH · 7.8 An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when… Huawei
- CVE-2015-7984 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to… Horde Debian
- CVE-2015-7845 MEDIUM · 5.0 The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows… Huawei
- CVE-2015-7385 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in… Open-xchange
- CVE-2015-0794 LOW · 3.6 modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map. Dracut Project Opensuse
- CVE-2014-9756 MEDIUM · 5.0 De psf_fwrite-functie in file_io.c in libsndfile stelt aanvallers in staat om een denial of service (deel door nul-fout en applicatiecrash) te veroorzaken via niet-gespecificeerde vectoren… Libsndfile Project Canonical Opensuse
- CVE-2015-8236 HIGH · 10.0 Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as… Arista
- CVE-2015-7910 HIGH · 7.8 Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access… Exemys
- CVE-2015-4112 MEDIUM · 4.3 The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote… Blackberry
- CVE-2015-6374 MEDIUM · 4.3 The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it… Cisco
- CVE-2015-6371 MEDIUM · 4.0 Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified scripts, aka… Cisco
- CVE-2015-6370 HIGH · 7.2 The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as… Cisco
- CVE-2015-6369 MEDIUM · 4.9 The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of service via… Cisco
- CVE-2015-6368 MEDIUM · 5.0 Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP request, aka Bug ID CSCux10608. Cisco
- CVE-2015-8090 MEDIUM · 4.0 The Web Server component in TIBCO LogLogic Unity before 1.1.1 allows remote authenticated users to gain privileges, and consequently obtain sensitive information, via an HTTP… Tibco
- CVE-2015-8053 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or… Adobe