CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1593 MEDIUM · 5.0 The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which… Linux
- CVE-2015-1421 HIGH · 10.0 Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption… Linux Canonical Debian
- CVE-2015-1420 LOW · 1.9 Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read… Debian Linux
- CVE-2015-0274 HIGH · 7.2 De XFS-implementatie in de Linux-kernel vóór 3.15 gebruikt ten onrechte een oude groottewaarde tijdens vervanging van externe attributen, waardoor lokale gebruikers een denial of service… Linux
- CVE-2014-8173 HIGH · 7.2 The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry… Linux
- CVE-2014-8172 MEDIUM · 4.9 The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users… Linux
- CVE-2014-8159 MEDIUM · 6.9 De InfiniBand (IB) -implementatie in het Linux-kernelpakket vóór 2.6.32-504.12.2 op Red Hat Enterprise Linux (RHEL) 6 beperkt het gebruik van gebruikerswerkwoorden voor de registratie van… Linux Canonical Debian
- CVE-2014-7822 HIGH · 7.2 The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single… Linux
- CVE-2015-2304 MEDIUM · 6.4 Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an… Libarchive Canonical Opensuse
- CVE-2015-2107 MEDIUM · 6.8 HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges. Hp Sap
- CVE-2015-0982 HIGH · 7.5 Bufferoverloop in een niet-gespecificeerde DLL in Schneider Electric Pelco DS-NV's vóór 7.8.90 stelt externe aanvallers in staat om willekeurige code uit te voeren via niet-gespecificeerde… Schneider-electric
- CVE-2015-0981 HIGH · 7.5 The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database… Scadaengine
- CVE-2015-0980 HIGH · 9.0 Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code… Scadaengine
- CVE-2015-0979 HIGH · 9.0 Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a… Scadaengine
- CVE-2015-0978 MEDIUM · 6.9 Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a… Elipse
- CVE-2015-0660 HIGH · 7.2 Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root… Cisco
- CVE-2014-9207 MEDIUM · 6.9 Untrusted search path vulnerability in CmnView.exe in CIMON CmnView 2.14.0.1 and 3.x before UltimateAccess 3.02 allows local users to gain privileges via a Trojan horse… Cimon
- CVE-2014-9206 MEDIUM · 6.9 Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local… Schneider-electric
- CVE-2014-7885 HIGH · 10.0 Meerdere niet-gespecificeerde kwetsbaarheden in HP ArcSight Enterprise Security Manager (ESM) vóór 6.8c hebben onbekende impact en externe aanvalsvectoren. Microfocus
- CVE-2014-7884 HIGH · 9.0 Meerdere niet-gespecificeerde kwetsbaarheden in HP ArcSight Logger vóór 6.0P1 hebben onbekende impact en op afstand geverifieerde aanvalsvectoren. Hp
- CVE-2014-5409 MEDIUM · 6.4 The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs),… Ge
- CVE-2015-0342 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows… Adobe Linux Apple Microsoft
- CVE-2015-0341 HIGH · 10.0 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 13.0.0.277 en 14.x tot en met 17.x vóór 17.0.0.134 op Windows en OS X en vóór 11.2.202.451 op… Adobe Linux Apple Microsoft
- CVE-2015-0340 MEDIUM · 5.0 Adobe Flash Player vóór 13.0.0.277 en 14.x tot en met 17.x vóór 17.0.0.134 op Windows en OS X en vóór 11.2.202.451 op Linux stelt externe… Adobe Linux Apple Microsoft
- CVE-2015-0339 HIGH · 10.0 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2015-0338 HIGH · 10.0 Integer-overloop in Adobe Flash Player vóór 13.0.0.277 en 14.x tot en met 17.x vóór 17.0.0.134 op Windows en OS X en vóór 11.2.202.451 op Linux… Adobe Linux Apple Microsoft
- CVE-2015-0337 MEDIUM · 5.0 Adobe Flash Player vóór 13.0.0.277 en 14.x tot en met 17.x vóór 17.0.0.134 op Windows en OS X en vóór 11.2.202.451 op Linux stelt aanvallers… Adobe Linux Apple Microsoft
- CVE-2015-0336 HIGH · 9.3 Adobe Flash Player vóór 13.0.0.277 en 14.x tot en met 17.x vóór 17.0.0.134 op Windows en OS X en vóór 11.2.202.451 op Linux stelt aanvallers… Adobe Apple Microsoft Linux
- CVE-2015-0335 HIGH · 10.0 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute… Adobe Apple Microsoft Linux
- CVE-2015-0334 HIGH · 9.3 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute… Adobe Apple Microsoft Linux
- CVE-2015-0333 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.277 en 14.x tot en met 17.x vóór 17.0.0.134 op Windows en OS X en vóór 11.2.202.451 op Linux stelt aanvallers… Adobe Apple Microsoft Linux
- CVE-2015-0332 HIGH · 10.0 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute… Adobe Apple Microsoft Linux
- CVE-2015-2091 MEDIUM · 5.0 The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof… Apache
- CVE-2015-1782 MEDIUM · 6.8 The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length… Debian Libssh2 Fedoraproject
- CVE-2015-2264 MEDIUM · 6.9 Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via… Telerik
- CVE-2015-0654 HIGH · 7.1 Een raceconditie in de TLS-implementatie in MainApp in de beheerinterface van Cisco Intrusion Prevention System (IPS)-software vóór versie 7.3(3)E4 stelt externe aanvallers in staat een… Cisco
- CVE-2015-0653 HIGH · 10.0 De beheerinterface in Cisco TelePresence Video Communication Server (VCS) en Cisco Expressway vóór X7.2.4, X8 vóór X8.1.2 en X8.2 vóór X8.2.2 en Cisco TelePresence Conductor… Cisco
- CVE-2015-0652 HIGH · 7.8 De implementatie van het Session Description Protocol (SDP) in Cisco TelePresence Video Communication Server (VCS) en Cisco Expressway vóór X8.2 en Cisco TelePresence Conductor vóór… Cisco
- CVE-2015-0177 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted… Ibm
- CVE-2015-0139 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in IBM WebSphere Portal 8.0.0 tot en met 8.0.0.1 CF15 en 8.5.0 voordat CF05 gebruikers op afstand toestaat om willekeurig webscript… Ibm
- CVE-2015-0133 MEDIUM · 5.0 IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privileges via an XML external… Ibm
- CVE-2015-0129 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary… Ibm
- CVE-2015-0123 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows… Ibm
- CVE-2015-0122 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows… Ibm
- CVE-2014-6214 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of… Ibm
- CVE-2014-6144 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2… Ibm
- CVE-2015-2275 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter… Wotlab
- CVE-2015-2237 HIGH · 7.5 Multiple SQL injection vulnerabilities in Betster (aka PHP Betoffice) 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showprofile.php… Betster Project
- CVE-2015-2285 HIGH · 7.2 The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary commands and… Ubuntu
- CVE-2015-2241 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de inhoudsfunctie in admin/helpers.py in Django vóór 1.7.6 en 1.8 vóór 1.8b2 stelt externe aanvallers in staat om willekeurig webscript… Djangoproject