CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2239 MEDIUM · 4.3 Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions,… Google
- CVE-2015-2238 HIGH · 7.5 Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome before 41.0.2272.76, allow attackers to cause a denial of service or possibly… Canonical Google
- CVE-2015-1232 HIGH · 7.5 Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly… Google
- CVE-2015-1231 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in Google Chrome vóór 41.0.2272.76 stellen aanvallers in staat om een denial of service te veroorzaken of mogelijk andere impact te hebben… Google Redhat Canonical
- CVE-2015-1230 HIGH · 7.5 The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote… Google Canonical Redhat
- CVE-2015-1229 MEDIUM · 5.0 net/http/proxy_client_socket.cc in Google Chrome vóór 41.0.2272.76 niet correct omgaat met een 407 (ook bekend als Proxy Authentication Required) HTTP-statuscode vergezeld van een Set-Cookie-header, waarmee externe… Canonical Google Redhat
- CVE-2015-1228 HIGH · 7.5 The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize… Canonical Google Redhat
- CVE-2015-1227 HIGH · 7.5 De functie DragImage::create in platform/DragImage.cpp in Blink, zoals gebruikt in Google Chrome vóór 41.0.2272.76, initialiseert geen geheugen voor het tekenen van afbeeldingen, waardoor externe aanvallers… Google
- CVE-2015-1226 MEDIUM · 5.0 The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers… Google
- CVE-2015-1225 MEDIUM · 5.0 PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Google
- CVE-2015-1224 MEDIUM · 5.0 The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions,… Google
- CVE-2015-1223 HIGH · 7.5 Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial… Google
- CVE-2015-1222 HIGH · 7.5 Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly… Google
- CVE-2015-1221 HIGH · 7.5 Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other… Google
- CVE-2015-1220 MEDIUM · 6.8 Use-after-free kwetsbaarheid in de GIFImageReader:: parseData-functie in platform/image-decoders/gif/GIFImageReader.cpp in Blink, zoals gebruikt in Google Chrome vóór 41.0.2272.76, stelt externe aanvallers in staat om een denial… Redhat Canonical Google
- CVE-2015-1219 HIGH · 7.5 Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of… Google Redhat Canonical
- CVE-2015-1218 HIGH · 7.5 Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service… Google Redhat Canonical
- CVE-2015-1217 HIGH · 7.5 The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows… Google Redhat Canonical
- CVE-2015-1216 HIGH · 7.5 Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to… Google Canonical Redhat
- CVE-2015-1215 HIGH · 7.5 The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified… Canonical Redhat Google
- CVE-2015-1214 HIGH · 7.5 Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to… Redhat Canonical Google
- CVE-2015-1213 HIGH · 7.5 The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial… Google
- CVE-2014-9689 MEDIUM · 5.0 content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech… Google
- CVE-2011-5319 MEDIUM · 5.0 content/renderer/device_sensors/device_motion_event_pump.cc in Google Chrome vóór 41.0.2272.76 beperkt de toegang tot versnellingsmeterdata met hoge snelheid niet goed, waardoor het voor externe aanvallers gemakkelijker wordt om toetsaanslagen… Google
- CVE-2015-2192 MEDIUM · 5.0 Integer overflow in de dissect_osd2_cdb_continuation functie in epan/dissectors/packet-scsi-osd.c in de SCSI OSD dissector in Wireshark 1.12.x vóór 1.12.4 stelt externe aanvallers in staat om een… Wireshark Opensuse
- CVE-2015-2191 MEDIUM · 5.0 Integer-overloop in de dissect_tnef-functie in epan/dissectors/packet-tnef.c in de TNEF-dissector in Wireshark 1.10.x vóór 1.10.13 en 1.12.x vóór 1.12.4 stelt externe aanvallers in staat om een… Debian Mageia Wireshark Opensuse
- CVE-2015-2190 MEDIUM · 5.0 epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause… Opensuse Wireshark Oracle
- CVE-2015-2189 MEDIUM · 5.0 Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers… Wireshark Oracle Opensuse Debian
- CVE-2015-2188 MEDIUM · 5.0 epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers… Wireshark Mageia Opensuse Debian
- CVE-2015-2187 MEDIUM · 5.0 The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote… Opensuse Wireshark
- CVE-2015-0228 MEDIUM · 5.0 The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service… Apache Canonical Apple Opensuse
- CVE-2015-2177 HIGH · 7.5 Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) TCP port 102 or… Siemens
- CVE-2015-1599 LOW · 2.1 The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error. Siemens
- CVE-2015-1598 LOW · 2.1 The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device… Siemens
- CVE-2015-1597 MEDIUM · 6.8 The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-the-middle attackers to execute arbitrary code by modifying… Siemens
- CVE-2015-1596 MEDIUM · 5.8 The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Siemens
- CVE-2015-1595 MEDIUM · 4.3 The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers… Siemens
- CVE-2015-1594 MEDIUM · 6.9 Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before… Siemens
- CVE-2015-0895 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the… Tips And Tricks Hq
- CVE-2015-0894 MEDIUM · 6.0 SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands… Tips And Tricks Hq
- CVE-2014-9369 HIGH · 7.8 Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service (device restart) via crafted packets. Siemens
- CVE-2015-1170 HIGH · 7.2 The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels… Nvidia
- CVE-2014-8892 HIGH · 7.8 Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before… Ibm
- CVE-2014-8891 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in de Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 vóór SR16-FP9, 6 vóór SR16-FP3, 6R1 vóór SR8-FP3, 7 vóór… Ibm
- CVE-2015-1637 MEDIUM · 4.3 Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,… Microsoft
- CVE-2015-1483 HIGH · 7.5 Symantec NetBackup OpsCenter 7.6.0.2 tot en met 7.6.1 op Linux en UNIX stelt externe aanvallers in staat om willekeurige JavaScript-code uit te voeren via niet-gespecificeerde… Symantec Linux
- CVE-2015-0661 MEDIUM · 4.0 The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon reload) via a malformed SNMP packet,… Cisco
- CVE-2015-0659 MEDIUM · 5.0 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking (AN) message, aka Bug… Cisco
- CVE-2015-0657 MEDIUM · 5.0 Cisco IOS XR stelt externe aanvallers in staat om een denial of service (RSVP-procesherlading) te veroorzaken via een verkeerd gevormd RSVP-pakket, ook bekend als Bug… Cisco
- CVE-2015-0607 MEDIUM · 4.3 De Authentication Proxy-functie in Cisco IOS verwerkt ongeldige AAA-retourcodes van RADIUS- en TACACS+ -servers niet correct, waardoor externe aanvallers authenticatie in opportunistische omstandigheden kunnen omzeilen… Cisco