CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-4063 LOW · 3.5 Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML… Newstatpress Project
- CVE-2015-4062 MEDIUM · 6.5 SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the where1… Newstatpress Project
- CVE-2015-3922 MEDIUM · 5.8 Open omleidingskwetsbaarheid in mode.php in Coppermine Photo Gallery vóór 1.5.36 stelt externe aanvallers in staat om gebruikers om te leiden naar willekeurige websites en phishing-aanvallen… Coppermine-gallery
- CVE-2015-3921 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in contact.php in Coppermine Photo Gallery vóór 1.5.36 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te… Coppermine-gallery
- CVE-2015-3339 MEDIUM · 6.2 Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program… Linux Debian
- CVE-2015-3332 MEDIUM · 4.9 A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local… Debian Linux
- CVE-2015-3331 HIGH · 9.3 The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent… Linux Debian Canonical
- CVE-2015-2922 LOW · 3.3 The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers… Linux Fedoraproject Oracle Redhat
- CVE-2015-2830 LOW · 1.9 arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass… Debian Linux Canonical
- CVE-2015-2666 MEDIUM · 6.9 Stack-gebaseerde bufferoverloop in de get_matching_model_microcode-functie in arch/x86/kernel/cpu/microcode/intel_early.c in de Linux-kernel vóór 4.0 stelt contextafhankelijke aanvallers in staat om privileges te verkrijgen door een vervaardigde microcode-header… Linux Fedoraproject
- CVE-2014-9715 MEDIUM · 4.9 include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users… Linux
- CVE-2014-9710 MEDIUM · 6.9 The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows… Linux
- CVE-2015-3906 MEDIUM · 5.0 The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of termination, which… Wireshark
- CVE-2015-3903 MEDIUM · 4.3 bibliotheken/Config.class.php in phpMyAdmin 4.0.x vóór 4.0.10.10, 4.2.x vóór 4.2.13.3, 4.3.x vóór 4.3.13.1 en 4.4.x vóór 4.4.6.1 schakelt X.509-certificaatverificatie uit voor GitHub API-aanroepen via SSL, waarmee… Phpmyadmin
- CVE-2015-3902 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in het installatieproces in phpMyAdmin 4.0.x vóór 4.0.10.10, 4.2.x vóór 4.2.13.3, 4.3.x vóór 4.3.13.1 en 4.4.x vóór 4.4.6.1 stellen… Phpmyadmin
- CVE-2015-3815 MEDIUM · 5.0 De detect_version-functie in wiretap/logcat.c in de Android Logcat-bestandsparser in Wireshark 1.12.x vóór 1.12.5 controleert niet de lengte van de payload, waardoor externe aanvallers een denial… Wireshark
- CVE-2015-3814 MEDIUM · 5.0 The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a… Oracle Wireshark
- CVE-2015-3813 MEDIUM · 5.0 The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of… Wireshark
- CVE-2015-3812 HIGH · 7.8 Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers… Oracle Wireshark
- CVE-2015-3811 MEDIUM · 5.0 epan/dissectors/packet-wcp.c in de WCP dissector in Wireshark 1.10.x vóór 1.10.14 en 1.12.x vóór 1.12.5 verwijst ten onrechte naar eerder verwerkte bytes, waardoor externe aanvallers een… Oracle Wireshark
- CVE-2015-3810 HIGH · 7.8 epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU… Wireshark
- CVE-2015-3809 HIGH · 7.8 The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers… Wireshark
- CVE-2015-3808 HIGH · 7.8 The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to… Wireshark
- CVE-2015-0986 HIGH · 7.5 Meerdere stackgebaseerde bufferoverlopen in Moxa VPort ActiveX SDK Plus vóór 2.8 stellen externe aanvallers in staat om assemblagecode-lijnen in te voegen via vectoren met een… Moxa
- CVE-2015-4092 HIGH · 7.5 Bufferoverloop in het XComms-proces in SAP Afaria 7.00.6620.2 SP5 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken of mogelijk willekeurige… Sap
- CVE-2015-4091 HIGH · 7.5 XML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified… Sap
- CVE-2015-1013 MEDIUM · 6.5 OSIsoft PI AF 2.6 en 2.7 en PI SQL voor AF 2.1.2.19 zorgen er niet voor dat de PI SQL (AF) Trusted Users-groep het Everyone-account… Osisoft
- CVE-2015-1008 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in Emerson AMS Device Manager vóór 13 stelt op afstand geverifieerde gebruikers in staat om privileges te verkrijgen via onjuiste invoer. Emerson
- CVE-2015-0962 MEDIUM · 4.3 Barracuda Web Filter 7.x en 8.x vóór 8.1.0.005, wanneer SSL-inspectie is ingeschakeld, gebruikt hetzelfde certificaat van de root Certification Authority voor de installaties van verschillende… Barracuda
- CVE-2015-0961 MEDIUM · 4.3 Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof… Barracuda
- CVE-2014-8147 HIGH · 7.5 De functie resolveImplicitLevels in common/ubidi.c in de Unicode Bidirectional Algorithm-implementatie in ICU4C in International Components for Unicode (ICU) vóór 55.1 gebruikt een geheel gegevenstype dat… Apple Icu-project
- CVE-2014-8146 HIGH · 7.5 De functie resolveImplicitLevels in common/ubidi.c in de Unicode Bidirectional Algorithm-implementatie in ICU4C in International Components for Unicode (ICU) vóór 55.1 volgt niet goed geïsoleerde stukken… Apple Icu-project
- CVE-2015-2946 MEDIUM · 6.8 Stack-based buffer overflow in the Open CAD Format Council SXF common library before 3.30 allows remote attackers to execute arbitrary code via a crafted CAD… Ocf
- CVE-2015-2694 MEDIUM · 5.8 The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated,… Mit
- CVE-2015-0935 HIGH · 7.5 Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to unspecified PHP scripts. Bomgar
- CVE-2015-0540 MEDIUM · 6.5 SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to… Emc
- CVE-2015-2945 HIGH · 7.5 mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary… H-fj
- CVE-2015-2123 HIGH · 9.0 Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users to gain privileges by leveraging Expand access. Hp
- CVE-2015-2121 HIGH · 7.8 HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL… Hp
- CVE-2015-2118 MEDIUM · 4.0 Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote… Hp
- CVE-2015-2110 HIGH · 10.0 Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors. Hp
- CVE-2015-2122 HIGH · 7.8 The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to… Hp
- CVE-2015-2120 HIGH · 8.7 Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors,… Hp
- CVE-2015-0180 MEDIUM · 5.5 Met de Connector Migration Tool in IBM InfoSphere Information Server 8.1 tot en met 11.3 kunnen op afstand geverifieerde gebruikers de beoogde beperkingen op het… Ibm
- CVE-2015-0171 MEDIUM · 5.5 Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to… Ibm
- CVE-2015-0170 LOW · 2.1 IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data. Ibm
- CVE-2015-0169 MEDIUM · 4.0 IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors. Ibm
- CVE-2015-0168 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject… Ibm
- CVE-2015-0161 MEDIUM · 6.5 SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary… Ibm
- CVE-2015-0160 HIGH · 9.0 IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges… Ibm