CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6822 MEDIUM · 5.4 De Nerdico (ook bekend als com.nerdico.danielepais) -applicatie 1.9 Stable voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Nerdico Project
- CVE-2014-6821 MEDIUM · 5.4 De voetbal (aka nl.jborsje.android.voetbal.az) applicatie 4.7.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Voetbal Project
- CVE-2014-6820 MEDIUM · 5.4 The Amebra Ameba (aka jp.honeytrap15.amebra) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Amebra Ameba Project
- CVE-2014-6819 MEDIUM · 5.4 The Lapp Group Catalogue (aka com.prinovis.LappKabel) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Lappgroup
- CVE-2014-6818 MEDIUM · 5.4 De applicatie OHBM 20th Annual Meeting (ook bekend als com.coreapps.android.followme.ohbm2014) 6.0.9.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Core-apps
- CVE-2014-6817 MEDIUM · 5.4 The Cove (aka org.covechurch.app) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Covechurch
- CVE-2014-6816 MEDIUM · 5.4 The WISDOM (aka lvtu99.com.nescmxiaoniuniu) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Lvtu99
- CVE-2014-6815 MEDIUM · 5.4 De applicatie Vouch! (ook bekend als com.voucherry.voucherry) 2.1.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Voucherry
- CVE-2014-6814 MEDIUM · 5.4 The Sentinels Randomizer (aka com.mikehipps.sentinelsrandomizer) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Sentinels Randomizer Project
- CVE-2014-6813 MEDIUM · 5.4 De klassens (aka com.mcreda.klassens.apps) applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Klassens Project
- CVE-2014-6812 MEDIUM · 5.4 De Aloha Guide (ook bekend als com.aloha.guide.english) applicatie 1.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Qmania
- CVE-2014-6810 MEDIUM · 5.4 The RIMS 2014 Annual Conference (aka com.coreapps.android.followme.rims2014) application 6.0.7.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Core-apps
- CVE-2014-6808 MEDIUM · 5.4 De Active 24 (ook bekend als com.zentity.app.active24) -applicatie 1.0.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Active 24 Project
- CVE-2014-6807 MEDIUM · 5.4 The OLA School (aka com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) application 1.2.7.132 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Olaschool
- CVE-2014-6806 MEDIUM · 5.4 The Thanodi - Setswana Translator (aka com.thanodi.thanodi) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Intellegere
- CVE-2014-6805 MEDIUM · 5.4 De weibo (ook bekend als magic.weibo) -applicatie 1.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Weibo Project
- CVE-2013-3632 HIGH · 8.8 Met de Cron-service in rpc.php in OpenMediaVault kunnen op afstand geverifieerde gebruikers cron-taken uitvoeren als willekeurige gebruikers en willekeurige opdrachten uitvoeren via de gebruikersnaamparameter. Openmediavault
- CVE-2013-3092 HIGH · 8.3 De Belkin N300 (F7D7301v1) -router stelt externe aanvallers in staat om authenticatie te omzeilen en privileges te verkrijgen via vectoren met betrekking tot onjuiste validatie… Belkin
- CVE-2013-3089 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in apply.cgi in Belkin N300 (F7D7301v1) -router stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor… Belkin
- CVE-2013-3086 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in util_system.html in Belkin N900-router stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken die… Belkin
- CVE-2013-3083 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Belkin
- CVE-2013-3068 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in apply.cgi in Linksys WRT310Nv2 2.0.0.1 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Cisco
- CVE-2013-3066 HIGH · 7.1 Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request… Linksys
- CVE-2013-3065 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or… Linksys
- CVE-2013-3064 MEDIUM · 6.8 Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Linksys
- CVE-2013-2586 MEDIUM · 4.3 XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk… Apachefriends
- CVE-2013-2100 HIGH · 9.3 The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Gentoo
- CVE-2013-1874 MEDIUM · 4.4 Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current… Call-cc
- CVE-2012-6110 LOW · 2.1 bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify… Bcron Project
- CVE-2012-6107 MEDIUM · 4.3 Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… Apache
- CVE-2012-5621 MEDIUM · 5.0 lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains… Ekiga
- CVE-2012-5619 LOW · 2.1 The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which .… Sleuthkit
- CVE-2014-3824 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r6,… Juniper
- CVE-2014-3823 MEDIUM · 4.3 The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote… Juniper
- CVE-2014-3820 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1… Juniper
- CVE-2014-3811 HIGH · 7.2 Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors. Juniper
- CVE-2014-6804 MEDIUM · 5.4 De Deschutes Public MobileLibrary (ook bekend als com.bredir.boopsie.deschutes) applicatie 4.5.110 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Boopsie
- CVE-2014-6803 MEDIUM · 5.4 The Bank of Moscow EIRTS Rent (aka ru.bm.rbs.android) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Bm
- CVE-2014-6802 MEDIUM · 5.4 The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Subsplash
- CVE-2014-6801 MEDIUM · 5.4 De frank matano (ook bekend als com.frank.matano) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Frank Matano Project
- CVE-2014-6800 MEDIUM · 5.4 The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Parentlink
- CVE-2014-6799 MEDIUM · 5.4 The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Broadcom
- CVE-2014-6798 MEDIUM · 5.4 The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Weeverapps
- CVE-2014-6797 MEDIUM · 5.4 The Abu Ali Anasheeds (aka com.faapps.abuali_anasheeds) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Abu Ali Anasheeds Project
- CVE-2014-6796 MEDIUM · 5.4 The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Localsense
- CVE-2014-6795 MEDIUM · 5.4 The Beekeeping Forum (aka com.tapatalk.supporttapatalkcomxxxxx) application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gcspublishing
- CVE-2014-6794 MEDIUM · 5.4 The AAPLD (aka com.bredir.boopsie.aapld) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Boopsie
- CVE-2014-6793 MEDIUM · 5.4 De Arch Friend (ook bekend als com.xyproto.archfriend) -applicatie 0.4.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Roboticoverlords
- CVE-2014-6792 MEDIUM · 5.4 The Suriname Radio (aka com.wordbox.surinameRadio) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Suriname Radio Project
- CVE-2014-6791 MEDIUM · 5.4 De Angel Reigns (ook bekend als com.conduit.app_dab60e7bd60d4f23a14b3fb7357f9dcd.app) applicatie 1.2.6.185 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Atastefromheaven