CVE-database
126.937 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2740 HIGH · 10.0 Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might… Mozilla Novell Canonical Debian
- CVE-2015-2739 HIGH · 10.0 The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations,… Mozilla Novell Canonical Debian
- CVE-2015-2738 HIGH · 10.0 The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1… Canonical Suse Debian Mozilla
- CVE-2015-2737 HIGH · 10.0 De functie rx:: d3d11:: SetBufferData in de Direct3D 11-implementatie in Mozilla Firefox vóór 39.0, Firefox ESR 31.x vóór 31.8 en 38.x vóór 38.1, en Thunderbird… Mozilla Canonical Oracle Suse
- CVE-2015-2736 HIGH · 9.3 The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations,… Mozilla Oracle Novell Canonical
- CVE-2015-2735 HIGH · 9.3 nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows… Mozilla Novell Canonical Debian
- CVE-2015-2734 HIGH · 10.0 The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before… Suse Mozilla Canonical Debian
- CVE-2015-2733 HIGH · 10.0 Gebruik-na-vrije kwetsbaarheid in de CanonicalizeXPCOMParticipant-functie in Mozilla Firefox vóór 39.0 en Firefox ESR 31.x vóór 31.8 en 38.x vóór 38.1 stelt aanvallers op afstand in… Mozilla Oracle Novell
- CVE-2015-2731 HIGH · 10.0 Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows… Mozilla Oracle
- CVE-2015-2730 MEDIUM · 4.3 Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other… Novell Debian Mozilla Oracle
- CVE-2015-2729 MEDIUM · 5.0 The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator… Mozilla Oracle
- CVE-2015-2728 HIGH · 7.5 De IndexedDatabaseManager-klasse in de IndexedDB-implementatie in Mozilla Firefox vóór 39.0 en Firefox ESR 31.x vóór 31.8 en 38.x vóór 38.1 interpreteert een niet-gespecificeerd IDBDatabase-veld verkeerd… Novell Mozilla Oracle
- CVE-2015-2727 MEDIUM · 6.8 Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a… Mozilla
- CVE-2015-2726 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application… Oracle Mozilla Novell
- CVE-2015-2725 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to… Novell Oracle Mozilla
- CVE-2015-2724 HIGH · 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1… Oracle Mozilla Novell Canonical
- CVE-2015-2722 HIGH · 10.0 Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to… Oracle Mozilla Novell
- CVE-2015-2721 MEDIUM · 4.3 Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before… Novell Canonical Debian Mozilla
- CVE-2015-4129 MEDIUM · 6.5 SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie. Intelliants
- CVE-2015-0544 HIGH · 9.3 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for… Emc
- CVE-2015-0543 MEDIUM · 5.8 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Emc
- CVE-2015-4453 MEDIUM · 5.0 interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value… Open-emr
- CVE-2015-2964 MEDIUM · 5.0 NAMSHI | JOSE 5.0.0 and earlier allows remote attackers to bypass signature verification via crafted tokens in a JSON Web Tokens (JWT) header. Namshi
- CVE-2015-4524 MEDIUM · 6.5 Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before… Emc
- CVE-2015-1966 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in… Ibm
- CVE-2015-0551 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2… Emc
- CVE-2015-4525 HIGH · 9.0 The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users… Emc
- CVE-2015-4196 MEDIUM · 5.0 Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to… Cisco
- CVE-2015-0548 MEDIUM · 4.0 The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum… Emc
- CVE-2015-0547 MEDIUM · 4.0 The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum… Emc
- CVE-2015-4239 MEDIUM · 6.1 Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by sending crafted OSPFv2 packets… Cisco
- CVE-2015-4237 MEDIUM · 4.6 The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows local users to execute arbitrary OS commands via… Cisco
- CVE-2015-4234 HIGH · 7.2 Cisco NX-OS 6.0(2) en 6.2(2) op Nexus-apparaten heeft een onjuiste OS-configuratie, waardoor lokale gebruikers root-toegang kunnen verkrijgen via niet-gespecificeerde invoer aan de Python-interpreter, ook bekend… Cisco
- CVE-2015-4232 MEDIUM · 4.6 Cisco NX-OS 6.2(10) op Nexus- en MDS 9000-apparaten stelt lokale gebruikers in staat om willekeurige OS-commando's uit te voeren door vervaardigde TAR-parameters in te voeren… Cisco
- CVE-2015-4231 LOW · 3.6 The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files… Cisco
- CVE-2015-3728 MEDIUM · 4.8 Met de WiFi-connectiviteitsfunctie in Apple iOS vóór 8.4 kunnen externe Wi-Fi-toegangspunten een automatische koppeling activeren, met een willekeurig beveiligingstype, door te werken met een erkende… Apple
- CVE-2015-3727 MEDIUM · 6.8 WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not… Apple
- CVE-2015-3726 MEDIUM · 4.6 The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted (1) SIM or (2) UIM card. Apple
- CVE-2015-3725 MEDIUM · 4.3 MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service (ID… Apple
- CVE-2015-3724 MEDIUM · 6.8 CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ICC… Apple
- CVE-2015-3723 MEDIUM · 6.8 Met CoreGraphics in Apple iOS vóór 8.4 kunnen aanvallers op afstand willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigd ICC-profiel… Apple
- CVE-2015-3722 MEDIUM · 4.3 Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service (ID… Apple
- CVE-2015-3721 MEDIUM · 4.3 The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout… Apple
- CVE-2015-3720 MEDIUM · 4.3 The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via… Apple
- CVE-2015-3719 MEDIUM · 6.8 TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of… Apple
- CVE-2015-3718 MEDIUM · 6.8 systemstatsd in the System Stats subsystem in Apple OS X before 10.10.4 does not properly interpret data types encountered in interprocess communication, which allows attackers… Apple
- CVE-2015-3717 HIGH · 7.5 Meerdere bufferoverlopen in de printf-functionaliteit in SQLite, zoals gebruikt in Apple iOS vóór 8.4 en OS X vóór 10.10.4, stellen externe aanvallers in staat om… Sqlite Apple
- CVE-2015-3716 MEDIUM · 4.4 Spotlight in Apple OS X vóór 10.10.4 stelt aanvallers in staat om willekeurige opdrachten uit te voeren via een bewerkte naam van een fotobestand in… Apple
- CVE-2015-3715 MEDIUM · 6.8 The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to… Apple
- CVE-2015-3714 MEDIUM · 5.0 Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via… Apple