CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6921 MEDIUM · 5.4 De Buckhorn Grill (ook bekend als com.orderingapps.buckhorn) applicatie 2.8 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Orderingapps
- CVE-2014-6920 MEDIUM · 5.4 The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Canal44
- CVE-2014-6919 MEDIUM · 5.4 De Metalcasting Newsstand (ook bekend als air.com.yudu.ReaderAIR3017071) applicatie 3.12.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Afsinc
- CVE-2014-6918 MEDIUM · 5.4 The Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Bikersunderground
- CVE-2014-6917 MEDIUM · 5.4 The www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Kftc
- CVE-2014-6916 MEDIUM · 5.4 De mama.cn (ook bekend als cn.ziipin.mama.ui) -applicatie 1.02 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Mama
- CVE-2014-6914 MEDIUM · 5.4 The Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Houcine El Jasmi Project
- CVE-2014-6913 MEDIUM · 5.4 De toepassing Dive The World (ook bekend als com.paperton.wl.divetheworld) 1.53 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Paperton
- CVE-2014-6912 MEDIUM · 5.4 De 59e jaarlijkse conferentie van de IRA (ook bekend als com.coreapps.android.followme.ira_14) applicatie 6.0.7.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen… Core-apps
- CVE-2014-6911 MEDIUM · 5.4 The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Diziturky
- CVE-2014-6910 MEDIUM · 5.4 The MemorizeIt! (aka com.kshinenterprises.kshinent.memorizeit) application 1.7.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Memorizeit
- CVE-2014-6909 MEDIUM · 5.4 The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Enyetech
- CVE-2014-6908 MEDIUM · 5.4 The Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Immigrer
- CVE-2014-6907 MEDIUM · 5.4 The Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Trafficgate
- CVE-2014-6906 MEDIUM · 5.4 The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Loli Chocolate Cake Project
- CVE-2014-5410 HIGH · 7.1 The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows… Rockwellautomation
- CVE-2014-0754 HIGH · 10.0 Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401… Schneider-electric
- CVE-2014-6299 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remote attackers to hijack the authentication of users for requests that… Mm Forum Project
- CVE-2014-6298 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in de extensie mm_forum vóór 1.9.3 voor TYPO3 stelt externe aanvallers in staat om willekeurige code uit te… Mm Forum Project
- CVE-2014-6297 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de mm_forum-extensie vóór 1.9.3 voor TYPO3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Mm Forum Project
- CVE-2014-6296 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via… Wec Map Project
- CVE-2014-6295 HIGH · 7.5 SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Wec Map Project
- CVE-2014-6294 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the External links click statistics (outstats) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script… External Links Click Statistics Project
- CVE-2014-6293 HIGH · 7.5 SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited… Kennziffer
- CVE-2014-6292 MEDIUM · 6.4 The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors. In2code
- CVE-2014-6291 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Alphabetic Sitemap (alpha_sitemap) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML… Alphabetic Sitemap Project
- CVE-2014-6290 HIGH · 7.5 Met de News (tt_news) -extensie vóór 3.5.2 voor TYPO3 kunnen aanvallers op afstand een niet-gespecificeerde impact hebben via vectoren met betrekking tot een "onveilig unserialize"… News Project
- CVE-2014-6289 HIGH · 7.5 Met de Ajax dispatcher voor Extbase in de Yet Another Gallery (yag) extensie voor 3.0.1 en Tools for Extbase development (pt_extbase) extensie voor 1.5.1 kunnen… Daniel Lienert Michael Knoll
- CVE-2014-6288 HIGH · 7.5 The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors. Alex Kellner
- CVE-2014-3947 HIGH · 7.5 Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading… Alex Kellner
- CVE-2014-7217 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web… Phpmyadmin
- CVE-2014-6905 MEDIUM · 5.4 De H2O Human Harmony Organization (ook bekend als com.netpia.ha.theh2o) -applicatie 1.6.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… H2o Human Harmony Organization Project
- CVE-2014-6903 MEDIUM · 5.4 De Gulf Power Mobile Bill Pay (ook bekend als com.tionetworks.gulf) applicatie 1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Tionetworks
- CVE-2014-6902 MEDIUM · 5.4 The Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Anjuke
- CVE-2014-6901 MEDIUM · 5.4 The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nobexrc
- CVE-2014-6900 MEDIUM · 5.4 The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Core-apps
- CVE-2014-6899 MEDIUM · 5.4 The Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Jazeeraairways
- CVE-2014-6898 MEDIUM · 5.4 The Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Boopsie
- CVE-2014-6897 MEDIUM · 5.4 The Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Tamrielma
- CVE-2014-6896 MEDIUM · 5.4 The Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Yikyakapp
- CVE-2014-6895 MEDIUM · 5.4 The Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Nexters
- CVE-2014-6894 MEDIUM · 5.4 The Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Lucktastic
- CVE-2014-6079 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Local Management Interface in IBM Security Access Manager for Web 7.x vóór 7.0.0-ISS-WGA-IF0009 en 8.x vóór 8.0.0.0-ISS-WGA-FP0005, en Security… Ibm
- CVE-2014-4823 HIGH · 10.0 The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before… Ibm
- CVE-2014-4809 HIGH · 7.1 The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers… Ibm
- CVE-2014-7188 HIGH · 8.3 The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause… Xen
- CVE-2014-7158 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to hijack the authentication of administrators for requests that change… Exinda
- CVE-2014-7157 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter… Exinda
- CVE-2014-7156 LOW · 3.3 De functie x86_emulate in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x tot en met 4.4.x controleert de machtigingen voor de supervisormodus niet op instructies die softwareonderbrekingen genereren, waardoor… Xen
- CVE-2014-7155 MEDIUM · 5.8 The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a… Xen Debian Fedoraproject Opensuse