CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1263 MEDIUM · 4.3 The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to… Google Debian
- CVE-2015-1262 HIGH · 7.5 platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial… Google Debian
- CVE-2015-1261 MEDIUM · 5.0 android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which… Debian Google
- CVE-2015-1260 HIGH · 7.5 Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly… Debian Google
- CVE-2015-1259 HIGH · 7.5 PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly… Debian Google
- CVE-2015-1258 HIGH · 7.5 Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative… Debian Google
- CVE-2015-1257 HIGH · 7.5 platform/graphics/filters/FEColorMatrix.cpp in de SVG-implementatie in Blink, zoals gebruikt in Google Chrome vóór 43.0.2357.65, verwerkt niet voldoende waarden in een feColorMatrix-filter, waardoor externe aanvallers een denial… Debian Google
- CVE-2015-1256 HIGH · 7.5 Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or… Debian Google
- CVE-2015-1255 MEDIUM · 6.8 Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption)… Google Debian
- CVE-2015-1254 MEDIUM · 5.0 core/dom/Document.cpp in Blink, zoals gebruikt in Google Chrome vóór 43.0.2357.65, maakt de overerving van het kenmerk designMode mogelijk, waarmee externe aanvallers het Same Origin-beleid kunnen… Debian Google
- CVE-2015-1253 HIGH · 7.5 core/html/parser/HTMLConstructionSite.cpp in de DOM-implementatie in Blink, zoals gebruikt in Google Chrome vóór 43.0.2357.65, stelt externe aanvallers in staat om het Same Origin Policy te omzeilen… Debian Google
- CVE-2015-1252 HIGH · 7.5 common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial… Google Debian
- CVE-2015-1251 MEDIUM · 6.8 Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted… Google Debian
- CVE-2015-0189 MEDIUM · 4.0 The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated administrators to cause a denial of service… Ibm
- CVE-2014-8924 MEDIUM · 6.4 De server in IBM License Metric Tool 7.2.2 vóór IF15 en 7.5 vóór IF24 en Tivoli Asset Discovery for Distributed 7.2.2 vóór IF15 en 7.5… Ibm
- CVE-2014-4776 LOW · 2.1 IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to… Ibm
- CVE-2014-6211 LOW · 2.1 The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do… Ibm
- CVE-2015-1920 HIGH · 10.0 IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code… Ibm
- CVE-2015-0740 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Cisco Unified Intelligence Center 10.6(1) stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te kapen, ook… Cisco
- CVE-2015-3988 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to… Openstack Oracle
- CVE-2015-3885 MEDIUM · 4.3 Integer-overloop in de ljpeg_start-functie in dcraw 7.00 en eerder stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een bewerkte… Dcraw Project Fedoraproject
- CVE-2015-3409 HIGH · 7.2 Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as… Module-signature Project Canonical
- CVE-2015-3408 HIGH · 10.0 Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from… Module-signature Project Canonical
- CVE-2015-3407 MEDIUM · 5.0 Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files. Canonical Module-signature Project
- CVE-2015-1846 HIGH · 7.8 unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrArch or (2) ListArch… Unzoo
- CVE-2015-1845 HIGH · 10.0 Buffer overflow in the EntrReadArch function in unzoo might allow remote attackers to execute arbitrary code via unspecified vectors. Unzoo
- CVE-2015-0267 LOW · 3.6 Met het Red Hat-module-setup.sh-script voor kexec-tools, zoals gedistribueerd in de kexec-tools vóór 2.0.7-19-pakketten in Red Hat Enterprise Linux, kunnen lokale gebruikers naar willekeurige bestanden schrijven… Redhat
- CVE-2015-0739 MEDIUM · 4.0 The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management… Cisco
- CVE-2015-3631 LOW · 3.6 Docker Engine vóór 1.6.1 stelt lokale gebruikers in staat om willekeurige Linux-beveiligingsmodules (LSM) en docker_t-beleidsregels in te stellen via een image waarmee volumes bestanden in… Docker
- CVE-2015-3630 HIGH · 7.2 Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host,… Docker
- CVE-2015-3629 HIGH · 7.8 Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system… Docker Opensuse
- CVE-2015-3627 HIGH · 7.2 Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges… Docker
- CVE-2015-3455 LOW · 2.6 Squid 3.2.x vóór 3.2.14, 3.3.x vóór 3.3.14, 3.4.x vóór 3.4.13 en 3.5.x vóór 3.5.4, wanneer geconfigureerd met client-first SSL-bump, valideren de domein- of hostnaamvelden van… Oracle Squid-cache Fedoraproject
- CVE-2015-2704 MEDIUM · 5.0 realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Realmd Project
- CVE-2015-2667 HIGH · 7.2 Niet-vertrouwde zoekpadkwetsbaarheid in GNS3 1.2.3 stelt lokale gebruikers in staat om privileges te verkrijgen via een Trojaans paard uuid.dll in een niet-gespecificeerde map. Gns3
- CVE-2015-2346 MEDIUM · 4.0 XML externe entiteit (XXE) kwetsbaarheid in Huawei SEQ Analyst vóór V200R002C03LG0001CP0022 stelt externe geverifieerde gebruikers in staat om willekeurige bestanden te lezen via de req-parameter. Huawei
- CVE-2015-1868 HIGH · 7.8 The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x… Powerdns Fedoraproject
- CVE-2015-0278 HIGH · 10.0 libuv voor 0.10.34 laat de groepsprivileges niet goed vallen, waardoor contextafhankelijke aanvallers privileges kunnen krijgen via niet-gespecificeerde vectoren. Fedoraproject Libuv Project Nodejs
- CVE-2014-8384 HIGH · 9.4 De InFocus IN3128HD-projector met firmware 0.26 beperkt de toegang tot cgi-bin/webctrl.cgi.elf niet, waardoor externe aanvallers de DHCP-server en IP-configuratie van het apparaat kunnen wijzigen, het… Infocus
- CVE-2014-8383 HIGH · 10.0 De InFocus IN3128HD-projector met firmware 0.26 stelt externe aanvallers in staat om de authenticatie te omzeilen via een rechtstreeks verzoek aan main.html. Infocus
- CVE-2015-0738 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web… Cisco
- CVE-2015-0735 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug… Cisco
- CVE-2014-9204 MEDIUM · 6.9 Stack-gebaseerde bufferoverloop in OPCTest.exe in Rockwell Automation RSLinx Classic vóór 3.73.00 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd… Rockwellautomation
- CVE-2015-0730 MEDIUM · 5.0 De SMB-module in Cisco Wide Area Application Services (waas) 6.0(1) stelt externe aanvallers in staat om een denial of service (herladen van de module) te… Cisco
- CVE-2015-0729 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) stelt externe aanvallers in staat om willekeurig webscript of HTML te… Cisco
- CVE-2015-0726 MEDIUM · 6.8 The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows… Cisco
- CVE-2015-0723 MEDIUM · 6.1 The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service… Cisco
- CVE-2015-0717 MEDIUM · 6.9 Cisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546. Cisco
- CVE-2015-0736 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728. Cisco
- CVE-2015-0731 MEDIUM · 6.1 The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug… Cisco