CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-7752 HIGH · 7.8 The SSH server in Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R8, 13.2X51… Juniper
- CVE-2015-7751 MEDIUM · 6.9 Juniper Junos OS vóór 12.1X44-D50, 12.1X46 vóór 12.1X46-D35, 12.1X47 vóór 12.1X47-D25, 12.3 vóór 12.3R9, 12.3X48 vóór 12.3X48-D15, 13.2 vóór 13.2R7, 13.2X51 vóór 13.2X51-D35, 13.3 vóór… Juniper
- CVE-2015-7750 MEDIUM · 5.0 The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall products with ScreenOS before 6.3.0r13-dnd1, 6.3.0r14 through 6.3.0r18 before 6.3.0r18-dnc1, and 6.3.0r19 allows remote… Juniper
- CVE-2015-7749 HIGH · 7.8 The PFE daemon in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service via an unspecified… Juniper
- CVE-2015-7748 MEDIUM · 5.0 Juniper-chassis met Trio (Trinity) chipset lijnkaarten en Junos OS 13.3 voor 13.3R8, 14.1 voor 14.1R6, 14.2 voor 14.2R5 en 15.1 voor 15.1R2 stellen externe aanvallers… Juniper
- CVE-2015-7833 MEDIUM · 4.9 The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a… Novell Redhat
- CVE-2015-7799 MEDIUM · 4.9 The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to… Linux
- CVE-2015-7613 MEDIUM · 6.9 Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that… Linux
- CVE-2015-6937 MEDIUM · 4.9 The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system… Linux Canonical Debian
- CVE-2015-6252 LOW · 2.1 The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD… Linux
- CVE-2015-5707 MEDIUM · 4.6 Integer-overloop in de sg_start_req-functie in drivers/scsi/sg.c in de Linux-kernel 2.6.x tot 4.x vóór 4.1 stelt lokale gebruikers in staat om een denial of service te… Linux Canonical Debian Suse
- CVE-2015-5283 MEDIUM · 4.7 The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a… Linux
- CVE-2015-5156 MEDIUM · 6.1 The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS… Linux
- CVE-2015-0275 MEDIUM · 4.9 The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate… Linux Oracle
- CVE-2015-7034 MEDIUM · 6.8 The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of… Apple
- CVE-2015-7033 MEDIUM · 6.8 The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to… Apple
- CVE-2015-7032 MEDIUM · 4.3 The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to… Apple
- CVE-2015-6482 MEDIUM · 5.0 Runtime Toolkit vóór 2.4.7.48 in 3S-Smart CODESYS vóór 2.3.9.48 stelt externe aanvallers in staat om een denial of service (NULL pointer dereference en applicatiecrash) te… 3s-software
- CVE-2015-6477 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA 16 and earlier allow remote attackers to inject… Nordex
- CVE-2015-5661 MEDIUM · 4.3 The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a crafted application. Airdroid
- CVE-2015-6846 MEDIUM · 6.8 EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain access by examining how a program's code… Emc
- CVE-2015-6845 HIGH · 7.5 EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access… Emc
- CVE-2015-6844 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Reviewer in EMC SourceOne Email Supervisor vóór 7.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Emc
- CVE-2015-6843 MEDIUM · 5.0 Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access… Emc
- CVE-2015-7648 HIGH · 10.0 Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code… Adobe Linux Apple Microsoft
- CVE-2015-7647 HIGH · 10.0 Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code… Adobe Linux Apple Microsoft
- CVE-2015-7642 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Apple Microsoft Google
- CVE-2015-7641 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Apple Microsoft Linux
- CVE-2015-7640 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Linux Apple Microsoft
- CVE-2015-7639 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Apple Microsoft Google
- CVE-2015-7638 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Linux Apple Microsoft
- CVE-2015-7637 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Linux Google Apple
- CVE-2015-7636 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Linux Apple Microsoft
- CVE-2015-7635 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before… Adobe Apple Microsoft Linux
- CVE-2015-7184 MEDIUM · 6.8 The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are… Mozilla
- CVE-2015-5662 MEDIUM · 6.4 Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive. Avast
- CVE-2015-5444 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 before 2.3.5 allow remote attackers to inject arbitrary web… Hp
- CVE-2015-7856 HIGH · 10.0 OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of… Opennms
- CVE-2015-7683 MEDIUM · 4.0 Absolute padtraversale kwetsbaarheid in Font.php in de Font-plug-in vóór 7.5.1 voor WordPress stelt externe beheerders in staat om willekeurige bestanden te lezen via een volledige… Font Project
- CVE-2015-7682 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the… Genetechsolutions
- CVE-2015-7377 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML… Genetechsolutions
- CVE-2015-5742 LOW · 2.1 VeeamVixProxy in Veeam Backup & Replication (B&R) vóór 8.0 update 3 slaat lokale beheerdersreferenties op in logbestanden met wereldwijd leesbare machtigingen, waarmee lokale gebruikers gevoelige… Veeam
- CVE-2015-1814 HIGH · 7.5 The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving… Jenkins Redhat
- CVE-2015-1813 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Jenkins vóór 1.606 en LTS vóór 1.596.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Jenkins Redhat
- CVE-2015-1812 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Jenkins vóór 1.606 en LTS vóór 1.596.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Jenkins Redhat
- CVE-2015-1810 MEDIUM · 4.6 De HudsonPrivateSecurityRealm-klasse in Jenkins vóór 1.600 en LTS vóór 1.596.1 beperkt de toegang tot gereserveerde namen niet bij gebruik van de instelling "Jenkins 'eigen gebruikersdatabase",… Jenkins Redhat
- CVE-2015-1808 LOW · 3.5 Jenkins vóór versie 1.600 en LTS vóór versie 1.596.1 stellen externe geauthenticeerde gebruikers in staat een denial-of-serviceaanval (onjuiste installatie van plug-ins en tools) uit te… Jenkins Redhat
- CVE-2015-1807 LOW · 3.5 Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions to read arbitrary files via a symlink,… Jenkins Redhat
- CVE-2015-1806 MEDIUM · 6.5 The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and… Jenkins Redhat
- CVE-2014-6451 HIGH · 7.8 J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service (system reboot) via unspecified vectors. Juniper