CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1095 HIGH · 7.2 IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate attackers to execute arbitrary code or… Apple
- CVE-2015-1094 LOW · 1.9 IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app. Apple
- CVE-2015-1093 MEDIUM · 6.8 Met FontParser in Apple iOS vóór 8.3 en Apple OS X vóór 10.10.3 kunnen aanvallers op afstand willekeurige code uitvoeren of een denial of service… Apple
- CVE-2015-1092 MEDIUM · 5.0 NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration… Apple
- CVE-2015-1091 MEDIUM · 4.3 The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during processing of redirects… Apple
- CVE-2015-1090 MEDIUM · 5.0 CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state information in response to a Safari history-clearing action, which allows… Apple
- CVE-2015-1089 MEDIUM · 5.0 CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies during processing of redirects in HTTP responses, which… Apple
- CVE-2015-1088 MEDIUM · 6.8 CFURL in Apple iOS vóór 8.3 en Apple OS X vóór 10.10.3 valideert URL's niet goed, waardoor aanvallers op afstand willekeurige code kunnen uitvoeren via… Apple
- CVE-2015-1087 LOW · 2.1 Directory traversal vulnerability in Backup in Apple iOS before 8.3 allows attackers to read arbitrary files via a crafted relative path. Apple
- CVE-2015-1086 MEDIUM · 6.9 The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows attackers to… Apple
- CVE-2015-1085 LOW · 1.9 AppleKeyStore in Apple iOS vóór 8.3 beperkt een bepaalde toegangscode-bevestigingsinterface niet goed, waardoor het voor aanvallers gemakkelijker wordt om de juiste wachtwoordgissingen te verifiëren via… Apple
- CVE-2013-7436 MEDIUM · 4.3 noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture… Kanaka
- CVE-2015-3030 MEDIUM · 4.0 The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors. Mcafee
- CVE-2015-3029 MEDIUM · 4.0 The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information… Mcafee
- CVE-2015-3028 MEDIUM · 5.5 McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters. Mcafee
- CVE-2015-2782 HIGH · 7.5 Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted… Debian Fedoraproject Arj Software
- CVE-2015-1317 HIGH · 7.5 Use-after-free kwetsbaarheid in Oxide vóór 1.5.6 en 1.6.x vóór 1.6.1 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken of mogelijk… Canonical Oxide Project
- CVE-2015-0557 MEDIUM · 5.8 Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to… Arj Software Fedoraproject
- CVE-2015-0556 MEDIUM · 5.8 Open-source ARJ-archiver 3.10.22 stelt externe aanvallers in staat om directory-traversal-aanvallen uit te voeren via een symlink-aanval in een ARJ-archief. Arj Software Fedoraproject
- CVE-2015-0251 MEDIUM · 4.0 The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1… Apache Opensuse Redhat Oracle
- CVE-2015-0248 MEDIUM · 5.0 The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service… Apache Opensuse Apple Redhat
- CVE-2015-0202 HIGH · 7.8 The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT… Apache Opensuse
- CVE-2015-2823 MEDIUM · 6.8 Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2,… Siemens
- CVE-2015-2822 MEDIUM · 4.3 Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow… Siemens
- CVE-2015-1799 MEDIUM · 4.3 The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid… Ntp
- CVE-2015-1798 LOW · 1.8 The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field… Ntp
- CVE-2015-1473 MEDIUM · 6.4 The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management… Canonical Gnu
- CVE-2015-1472 HIGH · 7.5 The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation,… Canonical Gnu
- CVE-2015-0799 MEDIUM · 4.3 The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by… Canonical Opensuse Mozilla
- CVE-2015-0798 MEDIUM · 5.0 The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier… Oracle Mozilla Google
- CVE-2015-2828 HIGH · 9.0 CA Spectrum 9.2.x en 9.3.x vóór 9.3 H02 valideert geserialiseerde Java-objecten niet correct, waardoor op afstand geverifieerde gebruikers beheerdersrechten kunnen verkrijgen via vervaardigde objectgegevens. Broadcom
- CVE-2015-2827 LOW · 3.5 Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated users to inject arbitrary web script or HTML via… Broadcom
- CVE-2015-1773 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted… Apache
- CVE-2015-0905 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in bBlog allows remote attackers to hijack the authentication of arbitrary users. Bblog Project
- CVE-2015-0876 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary… Saurus
- CVE-2015-0690 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in het HTML-helpsysteem op Cisco Wireless LAN Controller (WLC) -apparaten vóór 8.0 stelt externe aanvallers in staat om willekeurig webscript of… Cisco
- CVE-2015-2824 HIGH · 7.5 Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1)… Simple Ads Manager Project
- CVE-2015-2167 MEDIUM · 5.8 Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users… Ericsson
- CVE-2015-2166 MEDIUM · 5.0 Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary… Ericsson
- CVE-2015-2165 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4.x, 5.x, and 6.x allow remote attackers to… Ericsson
- CVE-2015-1843 MEDIUM · 4.3 Het Red Hat Docker-pakket vóór versie 1.5.0-28 schakelt bij gebruik van de optie --add-registry terug naar HTTP wanneer de HTTPS-verbinding met het register mislukt. Dit… Redhat
- CVE-2015-1602 LOW · 2.1 Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for… Siemens
- CVE-2015-1601 MEDIUM · 6.8 Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via… Siemens
- CVE-2015-0877 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in app/lib/mlf.pl in C-BOARD Moyuku vóór 1.03b3 stelt aanvallers op afstand in staat om willekeurige code uit te… C-board Moyuku Project
- CVE-2015-1893 MEDIUM · 6.8 Het IBM WebSphere DataPower XC10-apparaat 2.1 vóór 2.1.0.3 stelt externe aanvallers in staat om de sessies van willekeurige gebruikers te kapen en bijgevolg gevoelige informatie… Ibm
- CVE-2015-1890 LOW · 3.5 /usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this… Ibm
- CVE-2015-0179 HIGH · 7.2 Notes System Diagnostic (NSD) in IBM Domino 8.5.x voor 8.5.3 FP6 IF6 en 9.x voor 9.0.1 FP3 IF1 stelt lokale gebruikers in staat om het… Ibm
- CVE-2015-0134 HIGH · 10.0 Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7,… Ibm
- CVE-2015-0119 HIGH · 7.5 FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port. Ibm
- CVE-2015-0117 HIGH · 10.0 De LDAP-server in IBM Domino 8.5.x vóór 8.5.3 FP6 IF6 en 9.x vóór 9.0.1 FP3 IF1 stelt externe aanvallers in staat om willekeurige code uit… Ibm