CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-7650 MEDIUM · 5.4 The JJA- Juvenile Justice Act 1986 (aka com.felix.jja) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Ashok88
- CVE-2014-7649 MEDIUM · 5.4 The Classic Car Buyer (aka com.magazinecloner.carbuyer) application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Pocketmags
- CVE-2014-7648 MEDIUM · 5.4 De SMARTalk (aka jp.co.fusioncom.smartalk.android) -applicatie 1.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Ip-phone-smart
- CVE-2014-7647 MEDIUM · 5.4 The BOOKING DISCOUNT (aka com.wmygoodhotelscom) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mygoodhotels
- CVE-2014-7646 MEDIUM · 5.4 The EMT-Paramedic Lite (aka com.wEMTparamedicLite) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Buzztouch
- CVE-2014-7644 MEDIUM · 5.4 The Go MSX MLS (aka com.doapps.android.realestate.RE_16b9c09c4d5b0e174208f35e7c49f9a0) application 2.3.4.MR3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Doapps
- CVE-2014-7643 MEDIUM · 5.4 The C.R. Group (aka com.c.r.group) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Crgroup-lb
- CVE-2014-7642 MEDIUM · 5.4 The Pegasus Airlines (aka com.wPegasusAirlines) application 0.84.13503.96707 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Pegasus Airlines Project
- CVE-2014-7640 MEDIUM · 5.4 The Hotel Room (aka com.wHotelRoom) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Hotel-room
- CVE-2014-7638 MEDIUM · 5.4 The Fabuestereo 88.1 FM (aka com.nobexinc.wls_27892411.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nobexrc
- CVE-2014-7636 MEDIUM · 5.4 The United Hawk Nation (aka com.united12thman) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Unitedhawknation
- CVE-2014-7634 MEDIUM · 5.4 The Adopt O Pet (aka com.wFindAPet) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Adopt O Pet Project
- CVE-2014-7633 MEDIUM · 5.4 The Dino Zoo (aka com.tappocket.dinozoostar) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Tappocket
- CVE-2014-7632 MEDIUM · 5.4 The news revolution - bahrain (aka com.news.revolution.BH) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… News Revolution - Bahrain Project
- CVE-2014-7631 MEDIUM · 5.4 The Villa Antonia (aka com.appbuilder.u7p5019) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Texasweddingmall
- CVE-2014-7630 MEDIUM · 5.4 The Fling Gold (aka com.mbgames.fling.gold) application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Candycaneapps
- CVE-2014-7629 MEDIUM · 5.4 The Yulman Stadium (aka com.dub.app.tulanestadium) application 1.4.25 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Dublabs
- CVE-2014-7628 MEDIUM · 5.4 The Acorn Comms (aka com.acorncomms.app) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Priorswood
- CVE-2014-4906 MEDIUM · 5.4 The Brisbane & Queensland Alert (aka com.queensland.alert) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Playstudio
- CVE-2014-4905 MEDIUM · 5.4 The Clean Internet Browser (aka com.cleantab.browsesecure) application 1.36 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Cleaninternet
- CVE-2014-4904 MEDIUM · 5.4 De Crossmo Calendar (ook bekend als com.crossmo.calendar) -applicatie 1.7.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Crossmo
- CVE-2014-4903 MEDIUM · 5.4 The Kakao Bingo Garden (aka com.mocoga.bingogarden) application 1.0.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Mocoga
- CVE-2014-4901 MEDIUM · 5.4 The Bond Trading (aka com.appmakr.app613309) application 197705 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Tradingandinvesting4u
- CVE-2014-4900 MEDIUM · 5.4 The migme (aka com.projectgoth) application 4.03.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Mig
- CVE-2014-4899 MEDIUM · 5.4 The Indian Cement Review (aka com.magzter.indiancementreview) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Magzter
- CVE-2014-4898 MEDIUM · 5.4 The Harivijay (aka com.upasanhar.marathi.harivijay) application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Upasanhar
- CVE-2014-4897 MEDIUM · 5.4 The Touriosity Travelmag (aka com.magzter.touriositytravelmag) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Magzter
- CVE-2014-4896 MEDIUM · 5.4 The Parque Imperial (aka com.a792139893520606f84b2188a.a23428594a) application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mobileappspartner
- CVE-2014-4895 MEDIUM · 5.4 The Herpin Time Radio (aka com.herpin.time.radio) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Herpin Time Radio Project
- CVE-2014-4894 MEDIUM · 5.4 De MyMetro (ook bekend als com.myrippleapps.mymetro) -applicatie 2.4.7 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Mymetro Project
- CVE-2014-4892 MEDIUM · 5.4 The uControl Smart Home Automation (aka de.ucontrol) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Ucontrol
- CVE-2014-4891 MEDIUM · 5.4 The CT iHub (aka com.concursive.ctihub) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Ctihub
- CVE-2014-4890 MEDIUM · 5.4 The Nano Digest (aka com.magzter.nanodigest) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Magzter
- CVE-2014-4889 MEDIUM · 5.4 De Diabetic Diet Guide (ook bekend als com.wDiabeticDietGuide) applicatie 2.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Diabetic Diet Guide Project
- CVE-2014-4888 MEDIUM · 5.4 De BattleFriends at Sea GOLD (ook bekend als com.tequilamobile.warshipslivegold) -applicatie 1.1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Tequilagames
- CVE-2014-4887 MEDIUM · 5.4 The Joint Radio Blues (aka com.nobexinc.wls_69685189.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nobexrc
- CVE-2014-4885 MEDIUM · 5.4 The CPWORLD Close Protection World (aka com.tapatalk.closeprotectionworldcom) application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Closeprotectionworld
- CVE-2014-4884 MEDIUM · 5.4 The Conrad Hotel (aka com.wConradHotel) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Conrad Hotel Project
- CVE-2014-8366 HIGH · 7.5 SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and password to index.php. Os4ed
- CVE-2014-8365 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2)… Xornic
- CVE-2014-3863 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the filename…
- CVE-2014-8364 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in ss_handler.php in de WordPress Spreadsheet (wpSS) plugin 0.62 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML… Tim Rohrer
- CVE-2014-8363 HIGH · 7.5 SQL-injectiekwetsbaarheid in ss_handler.php in de WordPress Spreadsheet (wpSS) -plug-in 0.62 voor WordPress stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de… Wordpress Spreadsheet Project
- CVE-2014-5169 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to… Date Project
- CVE-2014-5026 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a (1)… Debian Cacti Opensuse
- CVE-2014-5025 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in data_sources.php in Cacti 0.8.8b stelt op afstand geverifieerde gebruikers met consoletoegang in staat om willekeurig webscript of HTML te injecteren… Debian Opensuse Cacti
- CVE-2014-3564 MEDIUM · 6.8 Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial… Gnu Canonical Debian
- CVE-2014-8331 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack… Huawei
- CVE-2014-8330 LOW · 3.5 Een XSS-kwetsbaarheid (cross-site scripting) in EspoCRM stelt externe, geauthenticeerde gebruikers in staat om willekeurige webscripts of HTML te injecteren via het naamveld in een nieuw… Espocrm
- CVE-2014-5276 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via… Pro Chat Rooms