CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0038 HIGH · 9.3 Met Microsoft Internet Explorer 9 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0037 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2015-0036 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0035 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0031 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0030 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0029 HIGH · 9.3 Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0028 HIGH · 9.3 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2015-0027 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0026 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0025 HIGH · 9.3 Met Microsoft Internet Explorer 10 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2015-0023 HIGH · 9.3 Met Microsoft Internet Explorer 10 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2015-0022 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0021 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 10 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0020 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0019 HIGH · 9.3 Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0018 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2015-0017 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0012 MEDIUM · 6.9 Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 valideert de rollen van gebruikers niet goed, waardoor lokale gebruikers beheerdersbevoegdheden voor servers… Microsoft
- CVE-2015-0010 LOW · 1.9 The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows… Microsoft
- CVE-2015-0009 LOW · 3.3 The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7… Microsoft
- CVE-2015-0008 HIGH · 8.3 The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-0003 MEDIUM · 6.9 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2014-6362 MEDIUM · 4.3 Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a… Microsoft
- CVE-2015-1571 MEDIUM · 4.3 De implementatie van het CAPWAP DTLS-protocol in Fortinet FortiOS 5.0 Patch 7 build 4457 gebruikt hetzelfde certificaat en dezelfde privésleutel in de installaties van verschillende… Fortinet
- CVE-2015-1570 MEDIUM · 4.3 The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle… Fortinet
- CVE-2015-1569 MEDIUM · 4.3 Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate. Fortinet
- CVE-2015-1377 MEDIUM · 4.9 The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file. Webmin
- CVE-2015-1169 HIGH · 7.5 Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a… Apereo
- CVE-2015-1042 MEDIUM · 5.8 De functie string_sanitize_url in core/string_api.php in MantisBT 1.2.0a3 tot en met 1.2.18 gebruikt een onjuiste reguliere expressie, waarmee externe aanvallers open redirect- en phishing-aanvallen kunnen… Mantisbt
- CVE-2015-1548 MEDIUM · 5.0 mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers… Acme
- CVE-2015-1031 HIGH · 7.5 Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or… Privoxy
- CVE-2014-8733 LOW · 2.1 Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain… Cloudera
- CVE-2015-1559 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication… Epignosis
- CVE-2015-1432 MEDIUM · 6.8 The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers to conduct CSRF attacks and… Phpbb
- CVE-2015-1431 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in includes/startup.php in phpBB vóór 3.0.13 stelt aanvallers op afstand in staat om willekeurig webscript of HTML te injecteren via vectoren… Phpbb
- CVE-2015-1568 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with… Studio.gd
- CVE-2015-1567 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid op de beheerderspagina in de GD Infinite Scroll-module vóór 7.x-1.4 voor Drupal stelt op afstand geverifieerde gebruikers met de "edit gd… Studio.gd
- CVE-2015-1566 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Dnnsoftware
- CVE-2015-1565 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute… Hitachi Microsoft Novell Redhat
- CVE-2015-1564 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in stijl-ondergronds/zoeken in Plain Black WebGUI 7.10.29 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Plainblack
- CVE-2015-1563 LOW · 2.1 The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages… Xen Fedoraproject
- CVE-2015-1562 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to… Saurus
- CVE-2015-1558 LOW · 3.5 Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote… Digium
- CVE-2014-9675 MEDIUM · 5.0 bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer… Canonical Freetype Debian Fedoraproject
- CVE-2014-9674 HIGH · 7.5 The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to… Canonical Oracle Fedoraproject Redhat
- CVE-2014-9673 MEDIUM · 6.8 Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow)… Canonical Debian Redhat Opensuse
- CVE-2014-9672 MEDIUM · 5.8 Array-indexfout in de parse_fond-functie in base/ftmac.c in FreeType vóór 2.5.4 stelt externe aanvallers in staat om een denial of service (buiten het bereik lezen) te… Oracle Debian Canonical Freetype
- CVE-2014-9671 MEDIUM · 4.3 Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and… Redhat Debian Canonical Oracle
- CVE-2014-9670 MEDIUM · 4.3 Meerdere integer signedness-fouten in de pcf_get_encodings-functie in pcf/pcfread.c in FreeType vóór 2.5.4 stellen externe aanvallers in staat om een denial of service (integer overflow, NULL… Debian Opensuse Fedoraproject Oracle