CVE-database
129.141 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-8052 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Adobe ColdFusion 10 vóór Update 18 en 11 vóór Update 7 stelt externe aanvallers in staat om willekeurig webscript of… Adobe
- CVE-2015-8051 HIGH · 10.0 The Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vectors. Adobe
- CVE-2015-5255 MEDIUM · 4.3 Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180,… Hp Adobe
- CVE-2015-8035 LOW · 2.6 The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process… Debian Xmlsoft Apple Canonical
- CVE-2015-8023 MEDIUM · 5.0 De serverimplementatie van het EAP-MSCHAPv2-protocol in de eap-mschapv2-plug-in in strongSwan 4.2.12 tot en met 5.x vóór 5.3.4 valideert de lokale staat niet correct, waardoor externe… Canonical Strongswan
- CVE-2015-7942 MEDIUM · 6.8 The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause… Hp Debian Apple Canonical
- CVE-2015-7941 MEDIUM · 4.3 libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via… Canonical Xmlsoft
- CVE-2015-5999 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de D-Link DIR-816L draadloze router met firmware vóór 2.06.B09_BETA stellen externe aanvallers in staat om de authenticatie van… Dlink
- CVE-2015-5253 MEDIUM · 4.0 Met de SAML Web SSO-module in Apache CXF vóór 2.7.18, 3.0.x vóór 3.0.7 en 3.1.x vóór 3.1.3 kunnen op afstand geverifieerde gebruikers authenticatie omzeilen via… Apache
- CVE-2015-6373 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Cisco Firepower Extensible Operating System 1.1(1.160) op Firepower 9000-apparaten stelt externe aanvallers in staat om de authenticatie van willekeurige… Cisco
- CVE-2015-6372 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to inject… Cisco
- CVE-2015-6847 LOW · 2.1 The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to… Emc
- CVE-2015-6357 MEDIUM · 6.8 De rule-update-functie in Cisco FireSIGHT Management Center (MC) 5.2 tot en met 5.4.0.1 verifieert niet het X.509-certificaat van de SSL-server support.sourcefire.com, waarmee man-in-the-middle-aanvallers deze server… Cisco
- CVE-2015-6330 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug… Cisco
- CVE-2015-8233 LOW · 2.6 Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission… Mayo Project
- CVE-2015-8232 MEDIUM · 4.3 De UC-profielmodule 6.x-1.x vóór 6.x-1.3 voor Drupal controleert de toegang tot profielen in bepaalde omstandigheden niet goed, waardoor externe aanvallers mogelijk gevoelige informatie uit het… Uc Profile Project
- CVE-2015-8222 MEDIUM · 4.6 Het unitbestand lxd-unix.socket systemd in het Ubuntu lxd-pakket vóór 0.20-0ubuntu4.1 gebruikt wereldleesbare machtigingen voor /var/lib/lxd/unix.socket, waarmee lokale gebruikers privileges kunnen verkrijgen via niet-gespecificeerde vectoren. Canonical
- CVE-2015-8221 HIGH · 10.0 Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which… Google
- CVE-2015-8220 HIGH · 7.5 Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary… Solarwinds
- CVE-2015-7998 MEDIUM · 5.0 The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build… Citrix
- CVE-2015-7997 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de Nitro API in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór 10.1 Build 133.9, 10.5 vóór… Citrix
- CVE-2015-7996 MEDIUM · 5.0 Met de Nitro API in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway vóór 10.1 Build 133.9, 10.5 vóór Build 58.11 en 10.5.e vóór… Citrix
- CVE-2015-7995 MEDIUM · 5.0 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial… Apple Xmlsoft
- CVE-2015-7812 MEDIUM · 4.9 The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible… Xen
- CVE-2015-7805 HIGH · 9.3 Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file. Opensuse Mega-nerd
- CVE-2015-5602 HIGH · 7.2 sudoedit in Sudo vóór 1.8.15 stelt lokale gebruikers in staat om privileges te verkrijgen via een symlink-aanval op een bestand waarvan het volledige pad is… Sudo Project
- CVE-2015-5311 MEDIUM · 5.0 PowerDNS (ook bekend als pdns) Authoritative Server 3.4.4 vóór 3.4.7 stelt externe aanvallers in staat om een denial of service (beweringsfout en servercrash) te veroorzaken… Powerdns
- CVE-2015-5301 MEDIUM · 5.5 providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated… Ipsilon Project
- CVE-2015-5276 MEDIUM · 5.0 The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes… Gnu
- CVE-2015-5217 MEDIUM · 4.0 providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner,… Ipsilon Project
- CVE-2015-0272 MEDIUM · 5.0 Met Gnome NetworkManager kunnen externe aanvallers een denial of service (verstoring van IPv6-verkeer) veroorzaken via een vervaardigde MTU-waarde in een IPv6-routeradvertentie (RA) -bericht, een andere… Gnome Suse Canonical Oracle
- CVE-2015-8219 HIGH · 7.5 The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause… Ffmpeg
- CVE-2015-8218 MEDIUM · 6.8 De functie decode_uncompressed in libavcodec/faxcompr.c in FFmpeg vóór 2.8.2 valideert geen ongecomprimeerde runs, waardoor externe aanvallers een denial of service (toegang tot buiten de grenzen… Ffmpeg
- CVE-2015-8217 HIGH · 7.5 The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of… Ffmpeg
- CVE-2015-8216 HIGH · 7.5 The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service… Ffmpeg
- CVE-2015-8215 MEDIUM · 5.0 net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to… Linux
- CVE-2015-2924 LOW · 3.3 The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a… Networkmanager Project
- CVE-2015-7897 HIGH · 7.5 De mediascanfunctionaliteit in de gezichtsherkenningsbibliotheek in android.media.process van de Samsung Galaxy S6 Edge vóór versie G925VVRU4B0G9 stelt externe aanvallers in staat om privileges te verkrijgen… Samsung
- CVE-2015-7816 HIGH · 7.5 De functie DisplayTopKeywords in plugins/Referrers/Controller.php in Piwik vóór versie 2.15.0 stelt externe aanvallers in staat om PHP-objectinjectieaanvallen uit te voeren, Server-Side Request Forgery (SSRF)-aanvallen uit… Matomo
- CVE-2015-7815 HIGH · 7.5 Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter. Matomo
- CVE-2015-7712 MEDIUM · 6.5 Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlier allow remote authenticated users with the AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via… Atutor
- CVE-2014-9752 MEDIUM · 6.5 Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file… Atutor
- CVE-2015-8104 CRITICAL · 10.0 Het KVM-subsysteem in de Linux-kernel via 4.2.6 en Xen 4.3.x tot 4.6.x, stelt gastgebruikers van het besturingssysteem in staat om een denial of service (host… Xen Oracle Linux Debian
- CVE-2015-7872 LOW · 2.1 De key_gc_unused_keys-functie in security/keys/gc.c in de Linux-kernel via 4.2.6 stelt lokale gebruikers in staat om een denial of service (OEPS) te veroorzaken via vervaardigde keyctl-opdrachten. Linux
- CVE-2015-7312 MEDIUM · 4.4 Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause… Linux Canonical Debian
- CVE-2015-5307 MEDIUM · 4.9 The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host… Linux Xen Oracle Debian
- CVE-2015-5257 MEDIUM · 4.9 drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have… Linux
- CVE-2015-2925 MEDIUM · 6.9 The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users… Linux Debian Canonical
- CVE-2015-7830 MEDIUM · 4.3 The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers… Oracle Wireshark
- CVE-2015-3977 HIGH · 7.7 Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause… Schneider-electric