CVE-database
127.363 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1840 MEDIUM · 5.0 jquery_ujs.js in jquery-rails voor 3.1.3 en 4.x voor 4.0.4 en rails.js in jquery-ujs voor 1.0.4, zoals gebruikt met Ruby on Rails 3.x en 4.x, kunnen… Fedoraproject Rubyonrails Opensuse
- CVE-2015-2848 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Honeywell Tuxedo Touch vóór 5.2.19.0_VA stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te kapen voor… Honeywell
- CVE-2015-2847 MEDIUM · 5.0 Honeywell Tuxedo Touch vóór 5.2.19.0_VA vertrouwt op client-side authenticatie met JavaScript, waarmee externe aanvallers de beoogde toegangsbeperkingen kunnen omzeilen door USERACCT-verzoeken uit de client-servergegevensstroom te… Honeywell
- CVE-2015-4945 MEDIUM · 5.0 Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information… Ibm
- CVE-2015-2975 MEDIUM · 5.0 Onderzoek Artisan Lite vóór 1.18 garandeert niet dat een gebruiker zich heeft geauthenticeerd, waardoor aanvallers op afstand niet-gespecificeerde acties kunnen uitvoeren via onbekende vectoren. Research-artisan
- CVE-2015-2976 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted… Research-artisan
- CVE-2015-2973 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the… Welcart
- CVE-2015-0681 HIGH · 7.1 The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS,… Cisco
- CVE-2015-4262 HIGH · 10.0 De functie voor het wijzigen van wachtwoorden in Cisco Unified MeetingPlace Web Conferencing vóór 8.5(5) MR3 en 8.6 vóór 8.6(2) controleert de sessie-ID niet en… Cisco
- CVE-2015-4235 HIGH · 9.0 Cisco Application Policy Infrastructure Controller (APIC) -apparaten met software voor 1.0(3o) en 1.1 voor 1.1(1j) en Nexus 9000 ACI-apparaten met software voor 11.0(4o) en 11.1… Cisco
- CVE-2015-4527 HIGH · 7.8 Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files… Emc
- CVE-2015-4285 MEDIUM · 5.0 The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening… Cisco
- CVE-2015-5605 MEDIUM · 5.0 De reguliere-expressie-implementatie in Google V8, zoals gebruikt in Google Chrome vóór 44.0.2403.89, misbruikt interrupts, waardoor externe aanvallers een denial of service (applicatiecrash) kunnen veroorzaken via… Google Opensuse
- CVE-2015-1289 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google Opensuse Redhat Debian
- CVE-2015-1288 MEDIUM · 6.8 The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to… Google Debian Redhat Opensuse
- CVE-2015-1287 MEDIUM · 4.3 Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is… Opensuse Google Redhat Debian
- CVE-2015-1286 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML… Debian Opensuse Redhat Google
- CVE-2015-1285 MEDIUM · 5.0 De XSSAuditor::canonicalize-functie in core/html/parser/XSSAuditor.cpp in de XSS-auditor in Blink, zoals gebruikt in Google Chrome vóór 44.0.2403.89, kiest niet correct een afkappunt, waardoor het voor externe… Redhat Debian Opensuse Google
- CVE-2015-1284 HIGH · 7.5 The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page's maximum number of frames,… Google Opensuse Redhat
- CVE-2015-1283 MEDIUM · 6.8 Meerdere integer overflows in de XML_GetBuffer-functie in Expat tot 2.1.0, zoals gebruikt in Google Chrome vóór 44.0.2403.89 en andere producten, stellen externe aanvallers in staat… Google Libexpat Project Python Debian
- CVE-2015-1282 MEDIUM · 6.8 Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly… Google Opensuse Redhat Debian
- CVE-2015-1281 MEDIUM · 4.3 core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to… Opensuse Debian Google Redhat
- CVE-2015-1280 HIGH · 7.5 SkPictureShader.cpp in Skia, zoals gebruikt in Google Chrome vóór 44.0.2403.89, stelt externe aanvallers in staat om een denial of service (geheugenbeschadiging) te veroorzaken of mogelijk… Google Redhat Debian Opensuse
- CVE-2015-1279 HIGH · 7.5 Integer overflow in de CJBig2_Image::expand functie in fxcodec/jbig2/JBig2_Image.cpp in PDFium, zoals gebruikt in Google Chrome vóór 44.0.2403.89, stelt externe aanvallers in staat om een denial… Redhat Debian Opensuse Google
- CVE-2015-1278 MEDIUM · 4.3 content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows… Debian Redhat Google Opensuse
- CVE-2015-1277 HIGH · 7.5 Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other… Google Debian Redhat Opensuse
- CVE-2015-1276 CRITICAL · 9.8 Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have… Google Debian Redhat Opensuse
- CVE-2015-1275 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a… Opensuse Google
- CVE-2015-1274 MEDIUM · 6.8 Google Chrome vóór versie 44.0.2403.89 zorgt er niet voor dat de lijst met automatisch te openen bestanden alle gevaarlijke bestandstypen uitsluit. Dit maakt het voor… Debian Opensuse Redhat Google
- CVE-2015-1273 MEDIUM · 6.8 Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial… Opensuse Redhat Google Debian
- CVE-2015-1272 HIGH · 7.5 Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified… Debian Redhat Opensuse Google
- CVE-2015-1271 MEDIUM · 6.8 PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service… Opensuse Google Debian Redhat
- CVE-2015-1270 MEDIUM · 6.8 The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings,… Google Redhat Opensuse Debian
- CVE-2015-4284 MEDIUM · 5.0 The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service (BGP… Cisco
- CVE-2015-4281 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs… Cisco
- CVE-2014-0611 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before Support Pack 4 and 2014 before Support Pack 2 allow remote attackers to… Novell
- CVE-2015-5464 LOW · 1.3 The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging (1) crypto-user or (2) crypto-officer access to an HSM… Gemalto
- CVE-2015-4652 MEDIUM · 4.3 epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial… Debian Wireshark
- CVE-2015-4651 MEDIUM · 5.0 The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing… Wireshark Debian Oracle
- CVE-2015-5611 HIGH · 8.3 Unspecified vulnerability in Uconnect before 15.26.1, as used in certain Fiat Chrysler Automobiles (FCA) from 2013 to 2015 models, allows remote attackers in the same… Fca
- CVE-2015-4554 HIGH · 7.5 Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2, 6.0.x before 6.0.3, 6.5.x before 6.5.3, and 7.0.x… Tibco
- CVE-2015-2134 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via… Hp
- CVE-2015-1906 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through… Ibm
- CVE-2015-1905 MEDIUM · 4.0 The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0… Ibm
- CVE-2015-5610 MEDIUM · 4.0 The RSM (aka RSMWinService) service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier… Solarwinds
- CVE-2015-2869 MEDIUM · 5.0 The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via (1)… Ghisler
- CVE-2015-4283 HIGH · 7.8 Cisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via… Cisco
- CVE-2015-5124 HIGH · 10.0 Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180,… Adobe Apple Microsoft Opensuse
- CVE-2015-4279 HIGH · 7.2 The Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI… Cisco
- CVE-2015-3185 MEDIUM · 4.3 The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an… Canonical Apache Apple