CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6873 MEDIUM · 5.4 De AMGC (ook bekend als com.amec.uae) -applicatie 6.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Amecuae
- CVE-2014-6872 MEDIUM · 5.4 The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Ttnetmuzik
- CVE-2014-6871 MEDIUM · 5.4 The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Hogs Fly Crazy Project
- CVE-2014-6870 MEDIUM · 5.4 The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Bgenergy
- CVE-2014-6869 MEDIUM · 5.4 The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Barcode Scanner Project
- CVE-2014-6868 MEDIUM · 5.4 The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Synology
- CVE-2014-6867 MEDIUM · 5.4 The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Sortir-en-alsace
- CVE-2014-6866 MEDIUM · 5.4 The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Homeadvisor
- CVE-2014-6865 MEDIUM · 5.4 The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Jamalbates
- CVE-2014-6864 MEDIUM · 5.4 The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Socialknowledge
- CVE-2014-6863 MEDIUM · 5.4 The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Digitalfruit
- CVE-2014-6862 MEDIUM · 5.4 The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Gencat
- CVE-2014-6861 MEDIUM · 5.4 De Terrarienbilder.com Forum (ook bekend als com.tapatalk.terrarienbildercomvb) applicatie 3.8.20 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Terrarienbilder
- CVE-2014-6860 MEDIUM · 5.4 The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Trialtracker
- CVE-2014-6859 MEDIUM · 5.4 The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Daum
- CVE-2014-6858 MEDIUM · 5.4 The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mostafa Shemeas Project
- CVE-2014-6857 MEDIUM · 5.4 The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Arabia2000
- CVE-2014-6856 MEDIUM · 5.4 The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Myvet2pet
- CVE-2014-4793 MEDIUM · 6.5 IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which… Ibm
- CVE-2014-4765 MEDIUM · 5.0 IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk,… Ibm
- CVE-2014-3097 MEDIUM · 4.3 Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect… Ibm
- CVE-2014-3060 HIGH · 10.0 Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed… Ibm
- CVE-2014-3059 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in de beheerconsole op het IBM WebSphere DataPower XC10-apparaat 2.5 stelt externe aanvallers in staat om beheerdersrechten te verkrijgen door gebruik te maken… Ibm
- CVE-2014-2642 MEDIUM · 4.3 HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Hp
- CVE-2014-2641 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via… Hp
- CVE-2014-2640 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Hp
- CVE-2012-0811 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter… Postfix
- CVE-2011-4624 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or… Codeasily
- CVE-2003-1598 HIGH · 7.5 SQL-injectiekwetsbaarheid in log.header.php in WordPress 0.7 en eerder stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de berichtenvariabele. Wordpress
- CVE-2014-6855 MEDIUM · 5.4 The Long (aka com.imop.longjiang.android) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Imop
- CVE-2014-6854 MEDIUM · 5.4 De EyeXam (ook bekend als com.globaleyeventures.eyexam) -applicatie 1.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Eyexam
- CVE-2014-6853 MEDIUM · 5.4 De Foxit MobilePDF - PDF Reader (ook bekend als com.foxit.mobile.pdf.lite) applicatie 2.2.0.0616 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Foxitsoftware
- CVE-2014-6852 MEDIUM · 5.4 De officiële LedLine.gr-applicatie (ook bekend als com.automon.ledline.gr) 1.4.0.9 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Automon
- CVE-2014-6851 MEDIUM · 5.4 The New Beginnings CFC (aka com.goodbarber.nbcfc) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nbcfc
- CVE-2014-3395 MEDIUM · 5.0 Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. Cisco
- CVE-2014-6850 MEDIUM · 5.4 The SED Account (aka com.starkville.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Starkvilleelectric
- CVE-2014-6848 MEDIUM · 5.4 The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Synology
- CVE-2014-6847 MEDIUM · 5.4 The Horoscopes and Dreams (aka com.horoscopesanddreams) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Horoscopesanddreams
- CVE-2014-6846 MEDIUM · 5.4 The Four Seasons Beverly Hills (aka com.intelitycorp.FourSeasons.android.ice) application @7F050007 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Intelitycorp
- CVE-2014-6845 MEDIUM · 5.4 The MediaFire (aka com.mediafire.android) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Mediafire
- CVE-2014-6844 MEDIUM · 5.4 The ABC Song (aka com.tabtale.abcsingalong) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Tabtale
- CVE-2014-6843 MEDIUM · 5.4 The Sweatshop (aka com.orderingapps.sweatshop) application 2.96 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Orderingapps
- CVE-2014-6842 MEDIUM · 5.4 De Daily Advertiser Print (ook bekend als com.lafayettedailyadv.android.prod) -applicatie 6.7 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Gannett
- CVE-2014-6841 MEDIUM · 5.4 The RTI INDIA (aka com.vbulletin.build_890) application 3.8.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Rtiindia
- CVE-2014-6840 MEDIUM · 5.4 The My Wedding Planner (aka app.wedding) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Weddingselections
- CVE-2014-6839 MEDIUM · 5.4 De Android-applicatie Alma Corinthiana (ook bekend als com.alma.corinthiana) versie 1.0 verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Webizz
- CVE-2014-6838 MEDIUM · 5.4 The Groupama toujours la (aka com.groupama.toujoursla) application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Twitter
- CVE-2014-6837 MEDIUM · 5.4 De Hillside (ook bekend als com.hillside.hermanus) -applicatie 1.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Hillside Project
- CVE-2014-7190 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) kwetsbaarheden in Openfiler 2.99.1 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken die (1)… Openfiler
- CVE-2014-6619 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1)… Restaurantmis