CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-0994 MEDIUM · 6.8 Heap-gebaseerde bufferoverloop in de ReadDIB-functie in de Vcl.Graphics.TPicture.Bitmap-implementatie in de Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 en C++ Builder XE6 20.0.15596.9843 stelt… Embarcadero
- CVE-2014-0168 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via… Jolokia
- CVE-2014-0140 MEDIUM · 4.0 Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to access sensitive controllers and actions via a direct HTTP or HTTPS… Redhat
- CVE-2014-0074 HIGH · 7.5 Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty (1) username… Apache
- CVE-2013-6496 MEDIUM · 5.0 Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluster, (3) storage, (4) portal_skins/custom,… Redhat
- CVE-2014-2644 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Hp
- CVE-2013-2645 HIGH · 9.3 Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_120405 allow remote attackers to hijack the authentication of administrators for requests… Tp-link
- CVE-2014-7861 HIGH · 9.3 De IOHIDSecurePromptClient-functie in Apple OS X valideert de pointerwaarden niet goed, waardoor externe aanvallers willekeurige code kunnen uitvoeren of een denial of service (systeemcrash) kunnen… Apple
- CVE-2014-3400 MEDIUM · 4.0 Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CSCuq40344. Cisco
- CVE-2014-3398 MEDIUM · 5.0 De SSL VPN-implementatie in Cisco Adaptive Security Appliance (ASA) -software stelt externe aanvallers in staat om potentieel gevoelige softwareversie-informatie te verkrijgen door de uitgebreide responsgegevens… Cisco
- CVE-2014-3396 HIGH · 7.5 Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon… Cisco
- CVE-2014-2645 MEDIUM · 4.3 HP Systems Insight Manager (SIM) vóór 7.4 stelt aanvallers op afstand in staat om clickjacking-aanvallen uit te voeren via onbekende vectoren. Hp
- CVE-2014-2643 MEDIUM · 6.5 Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown vectors. Hp
- CVE-2014-7278 MEDIUM · 5.0 De inlogpagina van de ZyXEL SBG-3300 Security Gateway met firmware 1.00(AADY.4)C0 en ouder stelt externe aanvallers in staat een denial-of-service-aanval (permanente uitval van de webinterface)… Zyxel
- CVE-2014-7277 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier allows remote attackers to inject arbitrary… Zyxel
- CVE-2014-6933 MEDIUM · 5.4 The Toraware Takojyou (aka ltd.pte.wavea.torawaretakojyou) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Wavea
- CVE-2014-6932 MEDIUM · 5.4 The All Navalny (aka com.all.navalny) application 1.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… All Navalny Project
- CVE-2014-6931 MEDIUM · 5.4 The Treves Dance Center (aka com.myapphone.android.myapptrvesdancecenter) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Myapp
- CVE-2014-6930 MEDIUM · 5.4 The Abram Radio Groove! (aka com.nobexinc.wls_79226887.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nobexrc
- CVE-2014-6929 MEDIUM · 5.4 The AIHce 2014 (aka com.coreapps.android.followme.aihce2014) application 6.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Core-apps
- CVE-2014-6928 MEDIUM · 5.4 De Rastreador de Celulares (ook bekend als com.mobincube.android.sc_9KTH8) applicatie 5.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Rastreadordecelulares
- CVE-2014-6927 MEDIUM · 5.4 The Myanmar Housing : mmHome (aka com.mmhome3) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Myanmars
- CVE-2014-6926 MEDIUM · 5.4 De Allt om Brollop (ook bekend als com.paperton.wl.alltombrollop) applicatie 1.53 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Paperton
- CVE-2014-6925 MEDIUM · 5.4 The Steyr Forum (aka com.tapatalk.steyrclubcomvb) application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gcspublishing
- CVE-2014-6924 MEDIUM · 5.4 The Metro News (aka com.netpia.ha.metro) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Metroseoul
- CVE-2014-6923 MEDIUM · 5.4 The Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Mobitrips
- CVE-2014-6922 MEDIUM · 5.4 De KFAI Community Radio (ook bekend als com.skyblue.pra.kfai) applicatie 2.0.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Listener-interactive
- CVE-2014-6921 MEDIUM · 5.4 De Buckhorn Grill (ook bekend als com.orderingapps.buckhorn) applicatie 2.8 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Orderingapps
- CVE-2014-6920 MEDIUM · 5.4 The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Canal44
- CVE-2014-6919 MEDIUM · 5.4 De Metalcasting Newsstand (ook bekend als air.com.yudu.ReaderAIR3017071) applicatie 3.12.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Afsinc
- CVE-2014-6918 MEDIUM · 5.4 The Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Bikersunderground
- CVE-2014-6917 MEDIUM · 5.4 The www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Kftc
- CVE-2014-6916 MEDIUM · 5.4 De mama.cn (ook bekend als cn.ziipin.mama.ui) -applicatie 1.02 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Mama
- CVE-2014-6914 MEDIUM · 5.4 The Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Houcine El Jasmi Project
- CVE-2014-6913 MEDIUM · 5.4 De toepassing Dive The World (ook bekend als com.paperton.wl.divetheworld) 1.53 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Paperton
- CVE-2014-6912 MEDIUM · 5.4 De 59e jaarlijkse conferentie van de IRA (ook bekend als com.coreapps.android.followme.ira_14) applicatie 6.0.7.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen… Core-apps
- CVE-2014-6911 MEDIUM · 5.4 The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Diziturky
- CVE-2014-6910 MEDIUM · 5.4 The MemorizeIt! (aka com.kshinenterprises.kshinent.memorizeit) application 1.7.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Memorizeit
- CVE-2014-6909 MEDIUM · 5.4 The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Enyetech
- CVE-2014-6908 MEDIUM · 5.4 The Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Immigrer
- CVE-2014-6907 MEDIUM · 5.4 The Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Trafficgate
- CVE-2014-6906 MEDIUM · 5.4 The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Loli Chocolate Cake Project
- CVE-2014-5410 HIGH · 7.1 The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows… Rockwellautomation
- CVE-2014-0754 HIGH · 10.0 Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401… Schneider-electric
- CVE-2014-6299 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remote attackers to hijack the authentication of users for requests that… Mm Forum Project
- CVE-2014-6298 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in de extensie mm_forum vóór 1.9.3 voor TYPO3 stelt externe aanvallers in staat om willekeurige code uit te… Mm Forum Project
- CVE-2014-6297 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de mm_forum-extensie vóór 1.9.3 voor TYPO3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Mm Forum Project
- CVE-2014-6296 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via… Wec Map Project
- CVE-2014-6295 HIGH · 7.5 SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Wec Map Project
- CVE-2014-6294 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the External links click statistics (outstats) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script… External Links Click Statistics Project