CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6941 MEDIUM · 5.4 The NOS Alive (aka pt.optimus.optimusalive2011) application 5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Nos
- CVE-2014-6940 MEDIUM · 5.4 The Absolute Lending Solutions (aka com.soln.S008F6C05EC0B63264B429F6D76286562) application 1.0073.b0073 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Mibizapps
- CVE-2014-6939 MEDIUM · 5.4 De GRATIS applicatie Sketch W Friends -Tablets (ook bekend als air.com.xlabz.SketchWFriendsFree) 5.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Xlabz
- CVE-2014-6938 MEDIUM · 5.4 De Android-applicatie Apostilas musicais (ook bekend als com.apostilas) versie 1.0 verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen nabootsen en gevoelige informatie kunnen verkrijgen… Webizz
- CVE-2014-6937 MEDIUM · 5.4 De China CITIC Bank Credit Card (ook bekend als com.citiccard.mobilebank) applicatie 3.3.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en… Ecitic
- CVE-2014-6936 MEDIUM · 5.4 De IDS 2013 (ook bekend als de.mobileeventguide.ids2013) applicatie 1.21 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Mobileeventguide
- CVE-2014-6935 MEDIUM · 5.4 The ColorMania - Color Quiz Game (aka com.ColormaniaColoringGames) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Rgsmartapps
- CVE-2014-6934 MEDIUM · 5.4 De Android-applicatie Physics Chemistry Biology Quiz (ook bekend als com.pdevsmcqs.pcbmcqseries) verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Physics Chemistry Biology Quiz Project
- CVE-2014-6904 MEDIUM · 5.4 De veilige browser - De applicatie Webfilter (ook bekend als com.cloudacl) 1.2.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Cloudacl
- CVE-2014-6891 MEDIUM · 5.4 De Vodafone Avantaj Cepte (ook bekend als com.vodafone.avantajcepte.main) applicatie 1.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Vodafone
- CVE-2014-6887 MEDIUM · 5.4 The EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Express
- CVE-2014-7201 HIGH · 7.5 Meerdere SQL-injectiekwetsbaarheden in de zoekfunctie in pi1/class.tx_dmmjobcontrol_pi1.php in de JobControl (dmmjobcontrol) extensie 2.14.0 en eerder voor TYPO3 stellen externe aanvallers in staat om willekeurige SQL-opdrachten… Kevin Renskers
- CVE-2014-7200 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in pi1/class.tx_dmmjobcontrol_pi1.php in de JobControl (dmmjobcontrol) extensie 2.14.0 en eerder voor TYPO3 stelt externe aanvallers in staat om willekeurig webscript of… Kevin Renskers
- CVE-2014-7139 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.16 for WordPress allow remote attackers to inject arbitrary… Cfdbplugin
- CVE-2014-6315 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de Web-Dorado Photo Gallery-plug-in 1.1.30 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML… Photo Gallery Plugin Project
- CVE-2014-6243 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Ewww Image Optimizer Plugin Project
- CVE-2014-4737 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to setup/index.php. Textpattern
- CVE-2014-4313 HIGH · 7.5 SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field. Epicor
- CVE-2014-4312 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the (1) Notes… Epicor
- CVE-2014-3678 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Jenkins-ci
- CVE-2014-4874 MEDIUM · 4.0 Met BMC Track-It! 11.3.0.355 kunnen op afstand geverifieerde gebruikers willekeurige bestanden lezen door naar de pagina TrackItWeb/Attachment te gaan. Bmc
- CVE-2014-4873 MEDIUM · 6.5 SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data. Bmc
- CVE-2014-4872 HIGH · 7.5 BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive… Bmc
- CVE-2014-4867 MEDIUM · 6.8 Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running… Cryoserver
- CVE-2014-4761 MEDIUM · 4.0 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows… Ibm
- CVE-2014-3581 MEDIUM · 5.0 The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service… Apache Canonical Redhat Oracle
- CVE-2014-3402 MEDIUM · 5.0 The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly… Cisco
- CVE-2014-3394 MEDIUM · 5.0 The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8),… Cisco
- CVE-2014-3393 MEDIUM · 4.3 The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.14), 9.0 before… Cisco
- CVE-2014-3392 HIGH · 8.3 The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1… Cisco
- CVE-2014-3391 MEDIUM · 6.8 Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a… Cisco
- CVE-2014-3390 MEDIUM · 6.8 De beleidsimplementatie van het Virtual Network Management Center (VNMC) in Cisco ASA Software 8.7 vóór 8.7(1.14), 9.2 vóór 9.2(2.8) en 9.3 vóór 9.3(1.1) stelt lokale… Cisco
- CVE-2014-3389 HIGH · 9.0 De VPN-implementatie in Cisco ASA Software 7.2 vóór 7.2(5.15), 8.2 vóór 8.2(5.51), 8.3 vóór 8.3(2.42), 8.4 vóór 8.4(7.23), 8.6 vóór 8.6(1.15), 9.0 vóór 9.0(4.24), 9.1… Cisco
- CVE-2014-3388 HIGH · 7.8 De DNS-inspectie-engine in Cisco ASA Software 9.0 vóór 9.0(4.13), 9.1 vóór 9.1(5.7) en 9.2 vóór 9.2(2) stelt externe aanvallers in staat om een denial of… Cisco
- CVE-2014-3387 HIGH · 7.8 The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before… Cisco
- CVE-2014-3386 HIGH · 7.8 The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1… Cisco
- CVE-2014-3385 HIGH · 7.8 Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 before 8.5(1.19),… Cisco
- CVE-2014-3384 HIGH · 7.8 De IKEv2-implementatie in Cisco ASA Software 8.4 vóór 8.4(7.15), 8.6 vóór 8.6(1.14), 9.0 vóór 9.0(4.8) en 9.1 vóór 9.1(5.1) stelt externe aanvallers in staat om… Cisco
- CVE-2014-3383 HIGH · 7.8 The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload)… Cisco
- CVE-2014-3382 HIGH · 7.8 The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before… Cisco
- CVE-2014-7226 HIGH · 7.5 The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with… Rejetto
- CVE-2014-7047 MEDIUM · 5.4 De Ocean Avenue Mobile Pro (ook bekend als com.oceanavenue.mobile) applicatie 2.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Oceanavenue
- CVE-2014-7046 MEDIUM · 5.4 The George Wassouf (aka com.devkhr32.georgewassouf) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… George Wassouf Project
- CVE-2014-6439 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Elasticsearch
- CVE-2014-5351 LOW · 2.1 De functie kadm5_randkey_principal_3 in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (ook bekend als krb5) vóór 1.13 stuurt oude sleutels als reactie op een -randkey… Mit
- CVE-2014-5298 MEDIUM · 5.0 FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted file upload… X2engine
- CVE-2014-5297 HIGH · 7.5 The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 through 4.1.7 allows remote attackers to conduct PHP object injection and Server-Side Request Forgery (SSRF) attacks via… X2engine
- CVE-2014-5270 LOW · 2.1 Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically… Gnupg Debian
- CVE-2014-4661 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in HP Records Manager vóór 7.3.5 en 8.x vóór 8.1 Met patch 3 kunnen externe aanvallers willekeurig webscript of HTML injecteren… Hp
- CVE-2014-3405 MEDIUM · 4.8 Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks (aka RPL) on both the Autonomic Control Plane (ACP) and external Autonomic… Cisco