CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3677 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Shim kan aanvallers in staat stellen willekeurige code uit te voeren via een vervaardigde Mok-lijst, wat geheugenbeschadiging veroorzaakt. Redhat
- CVE-2014-3676 HIGH · 7.5 Een bufferoverloop in Shim, gebaseerd op de heap, stelt externe aanvallers in staat om willekeurige code uit te voeren via een speciaal geconstrueerd IPv6-adres, gerelateerd… Redhat
- CVE-2014-3675 MEDIUM · 5.0 Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet. Redhat
- CVE-2013-7407 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Drupal
- CVE-2014-4450 LOW · 1.9 The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it… Apple
- CVE-2014-4449 MEDIUM · 6.8 iCloud Data Access in Apple iOS vóór 8.1 verifieert geen X.509-certificaten van TLS-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Apple
- CVE-2014-4448 LOW · 1.9 House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to… Apple
- CVE-2014-3111 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in FOG 0,27 tot en met 0,32 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te… Fogproject
- CVE-2014-2531 MEDIUM · 6.5 SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 build 577 allows remote authenticated users… Interworx
- CVE-2014-8380 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Splunk 6.1.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de HTTP-verwijzingskop in een "404… Splunk
- CVE-2014-8379 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web… Marketo Ma Project
- CVE-2014-8378 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de TableField-module 7.x-2.x vóór 7.x-2.3 stelt op afstand geverifieerde gebruikers met de machtiging "inhoudstypen beheren" of "taxonomie beheren" in staat… Tablefield Project
- CVE-2014-8377 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a… Webasyst
- CVE-2014-8376 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in het subpaneel voor contextbeheer in de Site Banner-module vóór 7.x-4.1 voor Drupal stelt op afstand geverifieerde gebruikers met de "Administer… Site Banner Project
- CVE-2014-7280 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de webinterface vóór 2.3.4 Build #85 voor Tenable Nessus 5.x stelt webservers op afstand in staat om willekeurig webscript of… Tenable
- CVE-2014-5006 HIGH · 7.5 Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot)… Zohocorp
- CVE-2014-5005 HIGH · 7.5 Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot)… Zohocorp
- CVE-2014-4577 MEDIUM · 5.0 Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to… Websupporter
- CVE-2014-4517 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in getNetworkSites.php in de CBI Referral Manager plugin 1.2.1 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript… Cbi Referral Manager Project
- CVE-2014-4514 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in includes/api_tenpay/inc.tenpay_notify.php in de Alipay-plug-in 3.6.0 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te… Alipay Project
- CVE-2014-8375 MEDIUM · 6.5 SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selected_group… Gb-plugins
- CVE-2014-7140 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in de beheerinterface in Citrix NetScaler Application Delivery Controller (ADC) en NetScaler Gateway 10.x vóór 10.1-129.11 en 10.5 vóór 10.5-50.10 stelt externe aanvallers… Citrix
- CVE-2013-7406 HIGH · 7.5 SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Mrbs Project
- CVE-2012-5702 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in dotProject vóór 2.1.7 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) callback-parameter… Dotproject
- CVE-2012-5243 MEDIUM · 5.0 functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request. Bananadance
- CVE-2012-5242 MEDIUM · 6.8 Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot… Bananadance
- CVE-2014-7804 MEDIUM · 5.4 The Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Apptreestudios
- CVE-2014-7803 MEDIUM · 5.4 The Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Onesolutionapps
- CVE-2014-7802 MEDIUM · 5.4 The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2) application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Appa-apps
- CVE-2014-7800 MEDIUM · 5.4 De Daily Green (ook bekend als it.opentt.blog.dailygreen) -applicatie 2014.07 dlygrn voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Daily Green Project
- CVE-2014-7799 MEDIUM · 5.4 The Squishy birds (aka com.tatmob.squishybirds) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Squishy Birds Project
- CVE-2014-7798 MEDIUM · 5.4 De Coca-Cola FM Brasil (ook bekend als com.enyetech.radio.coca_cola.fm_br) applicatie 2.0.41709 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Enyetech
- CVE-2014-7797 MEDIUM · 5.4 The Thai food (aka com.foods.thaifood) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gotobestofprice
- CVE-2014-7796 MEDIUM · 5.4 The House365 Radio (aka com.nobexinc.wls_27853803.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Nobexrc
- CVE-2014-7795 MEDIUM · 5.4 De Harpers Bazaar Art-applicatie (ook bekend als com.itp.harpersart) @ 7F080181 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Itp
- CVE-2014-7794 MEDIUM · 5.4 The Knights of the Void (aka me.narr8.android.serial.knights_of_the_void) application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Narr8
- CVE-2014-7793 MEDIUM · 5.4 De CB - Calciatori Brutti (ook bekend als com.calciatori.brutti) applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Cb - Calciatori Brutti Project
- CVE-2014-7791 MEDIUM · 5.4 The Backyard Wrestling (aka com.wBackyardWrestling) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Appsgeyser
- CVE-2014-7789 MEDIUM · 5.4 De Zillion Muslims (ook bekend als com.zillionmuslims.src) -applicatie 1.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Zillionmuslims
- CVE-2014-7788 MEDIUM · 5.4 The Best Free Giveaways (aka com.wIphone5GiveAways) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Best Free Giveaways Project
- CVE-2014-7787 MEDIUM · 5.4 De iShuttle (ook bekend als com.synapse.ishuttle_user) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Synapse
- CVE-2014-7786 MEDIUM · 5.4 De Engelse Football Magazine (ook bekend als com.magzter.englishfootball) applicatie 3.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Magzter
- CVE-2014-7785 MEDIUM · 5.4 The AAAA Discount Bail (aka com.onesolutionapps.aaaadiscountbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Onesolutionapps
- CVE-2014-7784 MEDIUM · 5.4 The Schon! Magazine (aka com.magzter.schonmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Magzter
- CVE-2014-7783 MEDIUM · 5.4 The Bill G. Bennett (aka com.billgbennett) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Billgbennett
- CVE-2014-7782 MEDIUM · 5.4 The Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Macedonia Hacienda Hotel Project
- CVE-2014-7781 MEDIUM · 5.4 De Marijuana Handbook Lite - Weed (ook bekend als com.fallacystudios.marijuanahandbooklite) applicatie 3.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Fallacystudios
- CVE-2014-7780 MEDIUM · 5.4 The Pakistan Cricket News (aka com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app) application 1.21.38.6504 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Ienvisage
- CVE-2014-7779 MEDIUM · 5.4 The Kuran'in Bilimsel Mucizeleri (aka com.wKurannBilimselMucizeleri) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers…
- CVE-2014-7778 MEDIUM · 5.4 The Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Magzter