CVE-database
128.027 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-5199 HIGH · 7.2 Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable. Canonical Libvdpau Project
- CVE-2015-5198 HIGH · 7.2 libvdpau voor 1.1.1, bij gebruik in een setuid- of setgid-toepassing, stelt lokale gebruikers in staat om privileges te verkrijgen via niet-gespecificeerde vectoren, gerelateerd aan de… Libvdpau Project Canonical
- CVE-2015-3247 MEDIUM · 6.9 Raceconditie in de worker_update_monitors_config-functie in SPICE 0.12.4 stelt een op afstand geverifieerde gastgebruiker in staat om een denial of service (op heap gebaseerde geheugenbeschadiging en… Spice Project Redhat
- CVE-2015-3241 MEDIUM · 6.8 OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users… Openstack
- CVE-2015-1841 LOW · 3.7 The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting a VM in the… Redhat
- CVE-2015-5625 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter. Opendocman
- CVE-2015-5624 MEDIUM · 6.8 Buffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control allows remote attackers to execute arbitrary code via a crafted HTML… Freebit
- CVE-2015-2989 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in index.php in LEMON-S PHP Twit BBS stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Lemon-s Php
- CVE-2015-6826 HIGH · 7.5 De functie ff_rv34_decode_init_thread_copy in libavcodec/rv34.c in FFmpeg vóór 2.7.2 initialiseert bepaalde structuurelementen niet, waardoor aanvallers op afstand een denial of service (ongeldige pointer-toegang) kunnen veroorzaken… Canonical Ffmpeg
- CVE-2015-6825 HIGH · 7.5 The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service (invalid pointer… Ffmpeg
- CVE-2015-6824 HIGH · 7.5 The sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of… Ffmpeg Canonical
- CVE-2015-6823 HIGH · 7.5 The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service… Ffmpeg
- CVE-2015-6822 HIGH · 7.5 De destroy_buffers-functie in libavcodec/sanm.c in FFmpeg voor 2.7.2 handhaaft de hoogte- en breedtewaarden in de videocontext niet correct, waardoor externe aanvallers een denial of service… Ffmpeg
- CVE-2015-6821 HIGH · 7.5 De functie ff_mpv_common_init in libavcodec/mpegvideo.c in FFmpeg vóór versie 2.7.2 beheert de coderingscontext niet correct, waardoor externe aanvallers een denial-of-service-aanval (ongeldige pointertoegang) kunnen uitvoeren of… Ffmpeg
- CVE-2015-6820 HIGH · 7.5 The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication… Ffmpeg Canonical
- CVE-2015-6819 HIGH · 7.5 Meerdere integer underflows in de functie ff_mjpeg_decode_frame in libavcodec/mjpegdec.c in FFmpeg vóór 2.7.2 stellen externe aanvallers in staat om een denial of service (toegang buiten… Ffmpeg
- CVE-2015-6818 HIGH · 7.5 The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which… Ffmpeg Canonical
- CVE-2015-2986 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rakuto
- CVE-2015-2985 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in guide-park.com BBS X102 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Guide-park
- CVE-2015-6276 MEDIUM · 5.0 Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers… Cisco
- CVE-2015-5986 HIGH · 7.1 openpgpkey_61.c in ISC BIND 9.9.7 voor 9.9.7-P3 en 9.10.x voor 9.10.2-P4 stelt externe aanvallers in staat om een denial of service te veroorzaken (assertion failure… Isc Apple
- CVE-2015-5722 HIGH · 7.8 buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 staat externe aanvallers toe om een denial of service te veroorzaken (assertion… Isc Apple
- CVE-2015-2991 MEDIUM · 6.8 Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data. Nscripter Project
- CVE-2015-2990 MEDIUM · 4.0 Directory traversal-kwetsbaarheid in zhtml.cgi in NEOJAPAN-desknet NEO 2.0R1.0 tot 2.5R1.4 stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te lezen via een vervaardigde… Neojapan
- CVE-2015-6812 HIGH · 7.8 Invision Power Services IPS Community Suite (ook bekend als Invision Power Board, IPB of Power Board) vóór 4.0.12.1 stelt externe aanvallers in staat om een… Invisioncommunity
- CVE-2015-6811 HIGH · 7.5 SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via… Cyberoam
- CVE-2015-6810 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in Invision Power Services IPS Community Suite (ook bekend als Invision Power Board, IPB of Power Board) 4.x vóór 4.0.12.1 stelt… Invisionpower
- CVE-2015-6809 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cfg[projectName] parameter to… Bedita
- CVE-2015-6808 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Spotlight module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script… Getlevelten
- CVE-2015-6807 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer… Mass Contact Project
- CVE-2015-5688 MEDIUM · 5.0 Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash)… Geddyjs
- CVE-2015-5612 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in oktober CMS build 271 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Octobercms
- CVE-2014-9605 HIGH · 9.4 WebUpgrade in Netsweeper vóór 3.1.10, 4.0.x vóór 4.0.9 en 4.1.x vóór 4.1.2 stelt externe aanvallers in staat om authenticatie te omzeilen en een systeemback-up tarball… Netsweeper
- CVE-2015-6259 HIGH · 9.4 The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows… Cisco
- CVE-2015-4544 HIGH · 9.0 EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to… Emc
- CVE-2015-4538 HIGH · 7.5 Met de XML-parser in EMC Atmos vóór 2.2.3.426 en 2.3.x vóór 2.3.1.0 kunnen op afstand geverifieerde gebruikers willekeurige bestanden lezen of een denial of service… Emc
- CVE-2015-6583 MEDIUM · 4.3 Google Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after navigation away from the installation site, which might make… Google
- CVE-2015-6582 MEDIUM · 6.8 De decompose-functie in platform/transforms/TransformationMatrix.cpp in Blink, zoals gebruikt in Google Chrome vóór 45.0.2454.85, verifieert niet dat een matrixinversie is geslaagd, waardoor externe aanvallers een denial… Google
- CVE-2015-6581 HIGH · 7.5 Dubbele gratis kwetsbaarheid in de functie opj_j2k_copy_default_tcp_and_create_tcd in j2k.c in OpenJPEG vóór r3002, zoals gebruikt in PDFium in Google Chrome vóór 45.0.2454.85, stelt externe aanvallers… Google
- CVE-2015-6580 HIGH · 7.5 Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly… Google
- CVE-2015-1301 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google
- CVE-2015-1300 MEDIUM · 5.0 The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API… Google
- CVE-2015-1299 HIGH · 7.5 Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or… Google
- CVE-2015-1298 MEDIUM · 4.3 The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site,… Google
- CVE-2015-1297 HIGH · 7.5 The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote… Google
- CVE-2015-1296 MEDIUM · 5.0 De UnescapeURLWithAdjustmentsImpl-implementatie in net/base/escape.cc in Google Chrome vóór 45.0.2454.85 voorkomt niet dat Unicode-vergrendelingstekens in de omnibox worden weergegeven, wat het voor externe aanvallers gemakkelijker maakt… Google
- CVE-2015-1295 HIGH · 7.5 Meerdere use-after-free kwetsbaarheden in de PrintWebViewHelper-klasse in componenten/afdrukken/renderer/print_web_view_helper.cc in Google Chrome vóór 45.0.2454.85 stellen door de gebruiker ondersteunde externe aanvallers in staat om een denial… Google
- CVE-2015-1294 HIGH · 7.5 Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of… Google
- CVE-2015-1293 HIGH · 7.5 The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Google
- CVE-2015-1292 MEDIUM · 5.0 The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing… Google