CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1704 MEDIUM · 6.8 Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a… Microsoft
- CVE-2015-1703 MEDIUM · 6.8 Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a… Microsoft
- CVE-2015-1702 MEDIUM · 6.9 De Service Control Manager (SCM) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2015-1700 MEDIUM · 6.0 Met Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2 en SharePoint Foundation 2013 SP1 kunnen op afstand geverifieerde gebruikers willekeurige… Microsoft
- CVE-2015-1699 HIGH · 9.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2015-1698 HIGH · 9.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold en R2, en… Microsoft
- CVE-2015-1697 HIGH · 9.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2015-1696 HIGH · 9.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2015-1695 HIGH · 9.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2015-1694 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-1692 MEDIUM · 4.3 Microsoft Internet Explorer 7 through 11 allows user-assisted remote attackers to read the clipboard contents via crafted web script, aka "Internet Explorer Clipboard Information Disclosure… Microsoft
- CVE-2015-1691 HIGH · 9.3 Met Microsoft Internet Explorer 8 en 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2015-1689 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-1688 MEDIUM · 6.8 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Microsoft
- CVE-2015-1686 MEDIUM · 4.3 The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other products,… Microsoft
- CVE-2015-1685 MEDIUM · 4.3 Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass." Microsoft
- CVE-2015-1684 MEDIUM · 4.3 VBScript.dll in de Microsoft VBScript 5.6 tot en met 5.8 engine, zoals gebruikt in Internet Explorer 8 tot en met 11 en andere producten, stelt… Microsoft
- CVE-2015-1683 HIGH · 9.3 Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Microsoft
- CVE-2015-1682 HIGH · 9.3 Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1,… Microsoft
- CVE-2015-1681 LOW · 1.9 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2015-1680 LOW · 2.1 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-1679 LOW · 2.1 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-1678 LOW · 2.1 De kernel-modus stuurprogramma's in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-1677 LOW · 2.1 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-1676 LOW · 2.1 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-1675 HIGH · 9.3 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Microsoft
- CVE-2015-1674 MEDIUM · 4.6 The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an… Microsoft
- CVE-2015-1673 HIGH · 9.3 De Windows Forms (ook bekend als WinForms) -bibliotheken in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1 en 4.5.2 stellen door… Microsoft
- CVE-2015-1672 MEDIUM · 5.0 Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1 en 4.5.2 stelt externe aanvallers in staat om een denial of service (recursie en prestatievermindering)… Microsoft
- CVE-2015-1670 MEDIUM · 4.3 The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive… Microsoft
- CVE-2015-1658 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-9160 HIGH · 10.0 Meerdere op heap gebaseerde bufferoverlopen in Adobe Reader en Acrobat 10.x vóór 10.1.14 en 11.x vóór 11.0.11 op Windows en OS X stellen aanvallers in… Adobe Apple Microsoft
- CVE-2015-3981 MEDIUM · 5.0 SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037. Sap
- CVE-2015-3980 HIGH · 7.5 SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security… Sap
- CVE-2015-3979 HIGH · 7.5 Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534. Sap
- CVE-2015-3978 LOW · 2.1 SAP Sybase Unwired Platform Online Data Proxy stelt lokale gebruikers in staat om gebruikersnamen en wachtwoorden te verkrijgen via de DataVault, ook bekend als SAP… Sap
- CVE-2015-3646 MEDIUM · 4.0 OpenStack Identity (Keystone) vóór 2014.1.5 en 2014.2.x vóór 2014.2.4 logt de backend_argument configuratieoptie-inhoud, waarmee op afstand geverifieerde gebruikers wachtwoorden en andere gevoelige backend-informatie kunnen verkrijgen… Openstack Oracle
- CVE-2015-3622 MEDIUM · 4.3 The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted… Opensuse Fedoraproject Gnu
- CVE-2015-3620 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10… Fortinet
- CVE-2015-3451 MEDIUM · 5.0 The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks… Xml-libxml Project Canonical Debian Fedoraproject
- CVE-2015-2845 HIGH · 10.0 The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO. Goautodial
- CVE-2015-2844 HIGH · 10.0 The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATH_INFO. Goautodial
- CVE-2015-2843 HIGH · 7.5 Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass… Goautodial
- CVE-2015-2842 HIGH · 10.0 Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute… Goautodial
- CVE-2015-2829 HIGH · 7.8 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a… Citrix
- CVE-2015-2668 MEDIUM · 5.0 ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file. Clamav Canonical
- CVE-2015-2234 MEDIUM · 6.9 Raceconditie in Lenovo System Update (voorheen ThinkVantage System Update) vóór 5.06.0034 gebruikt wereldschrijfbare machtigingen voor de map met updatebestanden, waarmee lokale gebruikers privileges kunnen krijgen… Lenovo
- CVE-2015-2233 HIGH · 8.3 Lenovo-systeemupdate (voorheen ThinkVantage-systeemupdate) vóór 5.06.0034 valideert CA-ketens niet correct tijdens handtekeningvalidatie, waardoor man-in-the-middle-aanvallers willekeurige bestanden kunnen uploaden en uitvoeren via een vervaardigd certificaat. Lenovo
- CVE-2015-2222 MEDIUM · 5.0 ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file. Canonical Clamav
- CVE-2015-2221 MEDIUM · 5.0 ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file. Clamav Canonical