CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5275 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the… Prochatrooms
- CVE-2014-3978 MEDIUM · 6.5 SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name and Last Name fields in a… Tomatocart
- CVE-2014-3830 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote attackers to inject arbitrary web script or HTML via the faqs_id parameter. Tomatocart
- CVE-2012-5697 MEDIUM · 4.6 The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which… Bulbsecurity
- CVE-2012-5696 MEDIUM · 5.0 Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password… Bulbsecurity
- CVE-2012-5695 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators… Bulbsecurity
- CVE-2012-5694 MEDIUM · 6.8 Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo,… Bulbsecurity
- CVE-2014-8329 HIGH · 10.0 Schrack Technik microControl met firmware vóór 1.7.0 (937) slaat gevoelige informatie op onder de web root met onvoldoende toegangscontrole, waardoor externe aanvallers toegangsgegevens voor de… Schrack
- CVE-2014-5449 LOW · 2.1 Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading… Zarafa
- CVE-2014-5448 LOW · 2.1 Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files. Zarafa
- CVE-2014-5447 LOW · 2.1 Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive information by reading the PHP… Zarafa
- CVE-2014-5098 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query… Jamroom
- CVE-2014-5094 MEDIUM · 5.0 Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function. Status2k
- CVE-2014-2081 HIGH · 7.5 Meerdere kwetsbaarheden voor SQL-injectie in de login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua vóór 2013.2.4 en 2014.x vóór 2014.1.1 stellen aanvallers op afstand in staat om… Iii
- CVE-2012-5866 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in include.php in Achievo 1.4.5 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de veldparameter. Achievo
- CVE-2012-5865 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in dispatch.php in Achievo 1.4.5 stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via de activityid-parameter in een statistiekactie. Achievo
- CVE-2012-5701 MEDIUM · 6.8 Meerdere SQL-injectiekwetsbaarheden in dotProject vóór 2.1.7 stellen externe geverifieerde beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de (1) search_string of (2) where… Dotproject
- CVE-2014-6308 MEDIUM · 5.0 Directory traversal-kwetsbaarheid in OSClass vóór 3.4.2 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (puntpunt) in de bestandsparameter in een… Osclass
- CVE-2014-6280 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in OSClass vóór 3.4.2 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) actie… Osclass
- CVE-2012-5244 HIGH · 7.5 Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3)… Bananadance
- CVE-2012-2413 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the… Joomla
- CVE-2014-7626 MEDIUM · 5.4 De Atme (ook bekend als com.bedigital.atme) -applicatie 1.0.10 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Atme
- CVE-2014-7624 MEDIUM · 5.4 De Guess the Pixel Character Quiz (ook bekend als com.aiadp.pixelcQuiz) -applicatie 1.3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Aiadp
- CVE-2014-7622 MEDIUM · 5.4 The Affinity Mobile ATM Locator (aka com.collegemobile.affinity.locator) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Affinitycu
- CVE-2014-7621 MEDIUM · 5.4 The EIN Lookup (aka appinventor.ai_siwanuth.EINLookup) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Ein Lookup Project
- CVE-2014-7620 MEDIUM · 5.4 The Authors On Tour - Live! (aka com.appmakr.app122286) application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Authorsontourlive
- CVE-2014-7618 MEDIUM · 5.4 De Interior Design (ook bekend als com.interior.design.mcreda) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Moderndecoration
- CVE-2014-7617 MEDIUM · 5.4 The www.roads365.com (aka ydx.android) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Roads365
- CVE-2014-7616 MEDIUM · 5.4 The Physics Forums (aka com.tapatalk.physicsforumscom) application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Physicsforums
- CVE-2014-7614 MEDIUM · 5.4 The Warrior Beach Retreat (aka com.wWarriorBeachRetreat) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Warrior Beach Retreat Project
- CVE-2014-7613 MEDIUM · 5.4 The WASPS Official Programmes (aka com.triactivemedia.wasps) application @7F080130 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Pocketmags
- CVE-2014-7612 MEDIUM · 5.4 The e-Kiosk (aka com.ekioskreader.android.pdfviewer) application 1.74 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… E-kiosk
- CVE-2014-7611 MEDIUM · 5.4 The Lost Temple (aka com.crazy.game.good.mengchenglu.templeI) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Lost Temple Project
- CVE-2014-7610 MEDIUM · 5.4 De Kadinlar Kulubu KKMobileApp (ook bekend als com.tapatalk.kadinlarkulubucom) applicatie 3.4.3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Kadinlar Kulubu Kkmobileapp Project
- CVE-2014-7609 MEDIUM · 5.4 The iStunt 2 (aka com.miniclip.istunt2) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Miniclip
- CVE-2014-7608 MEDIUM · 5.4 De Carrier Enterprise HVAC Assist (ook bekend als com.es.CE) -applicatie 4.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Carrierenterprise
- CVE-2014-7607 MEDIUM · 5.4 The Swamiji.tv (aka org.yidl.SwamijiTV) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Swamiji
- CVE-2014-7606 MEDIUM · 5.4 The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Concursive
- CVE-2014-7605 MEDIUM · 5.4 De Actors Key-applicatie (ook bekend als com.conduit.app_f83daeb6861b401bb103c33ea4210029.app) versie 1.6.24.477 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Actorskey
- CVE-2014-7604 MEDIUM · 5.4 The Easy Tips For Glowing Skin (aka com.n.easytipsforglowingskin) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Easy Tips For Glowing Skin Project
- CVE-2014-7603 MEDIUM · 5.4 The Gravey Design (aka com.dreamstep.wGraveyDesign) application 0.58.13357.54919 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Graveydesign
- CVE-2014-7602 MEDIUM · 5.4 The FRONT (aka com.magazinecloner.front) application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Pocketmags
- CVE-2014-7598 MEDIUM · 5.4 The Poker Puzzle (aka com.sharpiq.pokerpuzzle) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Poker Puzzle Project
- CVE-2014-7597 MEDIUM · 5.4 De Fabulas Infantiles (ook bekend als com.mobincube.android.sc_9I1A3) applicatie 3.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Gowkster
- CVE-2014-7596 MEDIUM · 5.4 The Paramore (aka uk.co.pixelkicks.paramore) application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Paramore Project
- CVE-2014-7595 MEDIUM · 5.4 The devada.co.uk (aka com.wdevadacouk) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Devada Project
- CVE-2014-7593 MEDIUM · 5.4 The Mr Whippet - Yorkshire Ice (aka com.appytimes.ice) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Appytimes
- CVE-2014-7592 MEDIUM · 5.4 De FOL (aka com.desire2learn.fol.mobile.app.campuslife.directory) applicatie 3.0.729.1459 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Fanshawec
- CVE-2014-7591 MEDIUM · 5.4 De Demon (ook bekend als com.ireadercity.c24) -applicatie 3.0.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Ireadercity
- CVE-2014-7590 MEDIUM · 5.4 The WebPromoExperts (aka ua.com.webpromoexperts) application 1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Webpromoexperts