CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6293 HIGH · 7.5 SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited… Kennziffer
- CVE-2014-6292 MEDIUM · 6.4 The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors. In2code
- CVE-2014-6291 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Alphabetic Sitemap (alpha_sitemap) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML… Alphabetic Sitemap Project
- CVE-2014-6290 HIGH · 7.5 Met de News (tt_news) -extensie vóór 3.5.2 voor TYPO3 kunnen aanvallers op afstand een niet-gespecificeerde impact hebben via vectoren met betrekking tot een "onveilig unserialize"… News Project
- CVE-2014-6289 HIGH · 7.5 Met de Ajax dispatcher voor Extbase in de Yet Another Gallery (yag) extensie voor 3.0.1 en Tools for Extbase development (pt_extbase) extensie voor 1.5.1 kunnen… Daniel Lienert Michael Knoll
- CVE-2014-6288 HIGH · 7.5 The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors. Alex Kellner
- CVE-2014-3947 HIGH · 7.5 Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading… Alex Kellner
- CVE-2014-7217 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web… Phpmyadmin
- CVE-2014-6905 MEDIUM · 5.4 De H2O Human Harmony Organization (ook bekend als com.netpia.ha.theh2o) -applicatie 1.6.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… H2o Human Harmony Organization Project
- CVE-2014-6903 MEDIUM · 5.4 De Gulf Power Mobile Bill Pay (ook bekend als com.tionetworks.gulf) applicatie 1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Tionetworks
- CVE-2014-6902 MEDIUM · 5.4 The Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Anjuke
- CVE-2014-6901 MEDIUM · 5.4 The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nobexrc
- CVE-2014-6900 MEDIUM · 5.4 The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Core-apps
- CVE-2014-6899 MEDIUM · 5.4 The Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Jazeeraairways
- CVE-2014-6898 MEDIUM · 5.4 The Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Boopsie
- CVE-2014-6897 MEDIUM · 5.4 The Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Tamrielma
- CVE-2014-6896 MEDIUM · 5.4 The Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Yikyakapp
- CVE-2014-6895 MEDIUM · 5.4 The Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Nexters
- CVE-2014-6894 MEDIUM · 5.4 The Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Lucktastic
- CVE-2014-6079 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Local Management Interface in IBM Security Access Manager for Web 7.x vóór 7.0.0-ISS-WGA-IF0009 en 8.x vóór 8.0.0.0-ISS-WGA-FP0005, en Security… Ibm
- CVE-2014-4823 HIGH · 10.0 The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before… Ibm
- CVE-2014-4809 HIGH · 7.1 The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers… Ibm
- CVE-2014-7188 HIGH · 8.3 The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause… Xen
- CVE-2014-7158 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to hijack the authentication of administrators for requests that change… Exinda
- CVE-2014-7157 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter… Exinda
- CVE-2014-7156 LOW · 3.3 De functie x86_emulate in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x tot en met 4.4.x controleert de machtigingen voor de supervisormodus niet op instructies die softwareonderbrekingen genereren, waardoor… Xen
- CVE-2014-7155 MEDIUM · 5.8 The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a… Xen Debian Fedoraproject Opensuse
- CVE-2014-7154 MEDIUM · 6.1 Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain… Fedoraproject Debian Xen Opensuse
- CVE-2014-7144 MEDIUM · 4.3 OpenStack keystonemiddleware (voorheen python-keystoneclient) 0.x vóór 0.11.0 en 1.x vóór 1.2.0 schakelt certificeringsverificatie uit wanneer de optie "onveilig" is ingesteld in een paste-configuratiebestand (paste.ini), ongeacht… Openstack
- CVE-2014-6414 MEDIUM · 4.0 OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors. Openstack Canonical
- CVE-2014-6242 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary… Tips And Tricks Hq
- CVE-2014-3621 MEDIUM · 4.0 The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a… Openstack Canonical Redhat
- CVE-2014-6893 MEDIUM · 5.4 De applicatie Pushpins Grocery Coupons (ook bekend als com.pushpinsapp.pushpins) 1.56 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Pushpinsapp
- CVE-2014-6892 MEDIUM · 5.4 The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Kalahari
- CVE-2014-6890 MEDIUM · 5.4 De applicatie CouponCabin - Coupons & Deals (ook bekend als com.couponcabin) 3.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en…
- CVE-2014-6889 MEDIUM · 5.4 The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Gunbroker
- CVE-2014-6888 MEDIUM · 5.4 The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Pennytalk
- CVE-2014-6886 MEDIUM · 5.4 The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Wephoneapp
- CVE-2014-6885 MEDIUM · 5.4 The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Usbank
- CVE-2014-6884 MEDIUM · 5.4 The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Ford
- CVE-2014-6883 MEDIUM · 5.4 The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Cnn
- CVE-2014-6882 MEDIUM · 5.4 The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Western
- CVE-2014-6881 MEDIUM · 5.4 The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Pnc
- CVE-2014-6880 MEDIUM · 5.4 The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Tradehero
- CVE-2014-6879 MEDIUM · 5.4 De Equifax Mobile (ook bekend als com.equifax) applicatie 1.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Equifax
- CVE-2014-6878 MEDIUM · 5.4 The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Rbfcu
- CVE-2014-6877 MEDIUM · 5.4 The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Santanderbank
- CVE-2014-6876 MEDIUM · 5.4 The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Serve
- CVE-2014-6875 MEDIUM · 5.4 The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Woodforest
- CVE-2014-6874 MEDIUM · 5.4 The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Concursive