CVE-database
125.722 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6991 MEDIUM · 5.4 The LiveAuctions.tv (aka air.LiveAndroidMaxx) application 2.005 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Liveauctions
- CVE-2014-6990 MEDIUM · 5.4 The Albasit artes y danza (aka com.adianteventures.adianteapps.albasit_artes_y_danza) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Albasit Artes Y Danza Project
- CVE-2014-6989 MEDIUM · 5.4 De Germanwings (ook bekend als com.germanwings.android) applicatie 2.1.13 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Germanwings
- CVE-2014-6988 MEDIUM · 5.4 De applicatie Quotes in Images (ook bekend als pt.lumberapps.imagensfrases) 3.7.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Lumberapps
- CVE-2014-6987 MEDIUM · 5.4 De Mass Gaming TV (aka net.massgamers) applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Mass Gaming Tv Project
- CVE-2014-6986 MEDIUM · 5.4 The Pregnancy Tips (aka com.rareartifact.tipsforpregnant71C80129) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Fotoschilenas
- CVE-2014-6985 MEDIUM · 5.4 The Georgia Packing (aka com.tapatalk.georgiapackingorg) application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gcspublishing
- CVE-2014-6984 MEDIUM · 5.4 The Shots (aka com.shots.android) application 1.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Shots
- CVE-2014-6983 MEDIUM · 5.4 The NBE (aka com.nbe.app) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Nbe
- CVE-2014-6982 MEDIUM · 5.4 The Arabic Troll Football (aka com.hamoosh.ArabicTrollFootball) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Arabic Troll Football Project
- CVE-2014-6981 MEDIUM · 5.4 The Taiwan Business Bank (aka com.mitake.TBB) application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Tbb
- CVE-2014-6980 MEDIUM · 5.4 The LINE PLAY (aka jp.naver.lineplay.android) application 2.3.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Naver
- CVE-2014-6979 MEDIUM · 5.4 The MiWay Insurance Ltd (aka com.MiWay.MD) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Miway
- CVE-2014-6978 MEDIUM · 5.4 The Karim Rahal Essoulami (aka com.karim.rahal.essoulami.lcxogeyuizteegxvnq) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Grouperahal
- CVE-2014-6977 MEDIUM · 5.4 The eLearn (aka com.desire2learn.campuslife.chattanoogastate.edu.directory) application 1.0.649.1194 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Chattanoogastate
- CVE-2014-6976 MEDIUM · 5.4 De Aeroexpress (ook bekend als ru.lynx.aero) -applicatie 2.6.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Aeroexpress
- CVE-2014-6975 MEDIUM · 5.4 De Twin Lin (ook bekend als com.twinlin.twmo) applicatie 5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Twin Lin Project
- CVE-2014-6974 MEDIUM · 5.4 De MifaShow Hairstyles (ook bekend als com.mifashow) -applicatie 3.7 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Mifashow
- CVE-2014-6973 MEDIUM · 5.4 The Care4Kids (aka com.codetherapy.care4kids) application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Akronchildrens
- CVE-2014-6972 MEDIUM · 5.4 The Kazakhstan Radio (aka com.wordbox.kazakhstanRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Kazakhstan Radio Project
- CVE-2014-6971 MEDIUM · 5.4 The Easy Video Downloader (aka com.simon.padillar.EasyVideo) application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Easy Video Downloader Project
- CVE-2014-6970 MEDIUM · 5.4 The North American Ismaili Games (aka hr.apps.n166983741) application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Graphicstylus
- CVE-2014-6969 MEDIUM · 5.4 The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Blynk
- CVE-2014-6968 MEDIUM · 5.4 The Grandma's Grotto (aka com.mobileappsuite.grandmasgrotto) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mobileappsuite
- CVE-2014-6967 MEDIUM · 5.4 The Albion College (aka com.vivomobile.albioncollege) application 2.1.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Vivonet
- CVE-2014-6966 MEDIUM · 5.4 The West Bend School District (aka net.parentlink.westbend) application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Parentlink
- CVE-2014-6965 MEDIUM · 5.4 De FAZ.NET (ook bekend als net.faz.FAZ) -applicatie 1.0.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Faz
- CVE-2014-6964 MEDIUM · 5.4 The Hanyang University Admissions (aka kr.ac.hanyang.planner) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Hyonga
- CVE-2014-6963 MEDIUM · 5.4 De feiron (aka es.sw.feironmobile.app) applicatie 1.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Feiron
- CVE-2014-6962 MEDIUM · 5.4 De Elk Grove PublicStuff (ook bekend als com.wassabi.elkgrove) applicatie 3.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Publicstuff
- CVE-2014-6961 MEDIUM · 5.4 The SudaniNet (aka com.sudaninet.wtwqiqbegq_btwlda) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Sudaninet
- CVE-2014-6960 MEDIUM · 5.4 De Multitrac (ook bekend als com.multitrac) -applicatie 1.04 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Sourcelink
- CVE-2014-6959 MEDIUM · 5.4 De QinCard (ook bekend als com.haowan.qincard) -applicatie 2.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Haowanlab
- CVE-2014-6958 MEDIUM · 5.4 The ISMRM-ESMRMB 2014 (aka com.coreapps.android.followme.ismrm_esmrmb14) application 6.0.8.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Core-apps
- CVE-2014-6957 MEDIUM · 5.4 The scottcolibmn (aka com.bredir.boopsie.scottlib) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Boopsie
- CVE-2014-6956 MEDIUM · 5.4 The Hydrogen Water (aka com.appzone628) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Misterpark
- CVE-2014-6955 MEDIUM · 5.4 The Le Grand Bleu (aka com.appzone468) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Misterpark
- CVE-2014-6954 MEDIUM · 5.4 The Deer Hunting Calls + Guide (aka com.anawaz.deerhuntingcalls.free) application 4.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to…
- CVE-2014-6953 MEDIUM · 5.4 The AFTERLIFE WITH ARCHIE (aka com.afterlifewitharchie.afterlifewitharchie) application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Afterlifewitharchie
- CVE-2014-4881 MEDIUM · 5.4 The PartyTrack library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Partytrack Library Project
- CVE-2014-3680 MEDIUM · 4.0 Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of… Jenkins Redhat
- CVE-2014-3679 MEDIUM · 5.0 The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages. Jenkins-ci
- CVE-2014-3667 MEDIUM · 4.0 Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain… Redhat Jenkins
- CVE-2014-3666 HIGH · 7.5 Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel. Redhat Jenkins
- CVE-2014-3663 MEDIUM · 6.0 Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs… Jenkins Redhat
- CVE-2014-3662 MEDIUM · 5.0 Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts. Jenkins Redhat
- CVE-2014-3661 MEDIUM · 5.0 Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake. Redhat Jenkins
- CVE-2014-8296 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Modal Frame API-module 6.x-1.x vóór 6.x-1.9 voor Drupal stelt externe aanvallers in staat om willekeurig webscript of HTML te… Drupal
- CVE-2014-7237 MEDIUM · 6.8 lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via… Twiki Microsoft
- CVE-2014-3704 HIGH · 7.5 The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to… Drupal Debian