CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-7154 MEDIUM · 6.1 Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain… Fedoraproject Debian Xen Opensuse
- CVE-2014-7144 MEDIUM · 4.3 OpenStack keystonemiddleware (voorheen python-keystoneclient) 0.x vóór 0.11.0 en 1.x vóór 1.2.0 schakelt certificeringsverificatie uit wanneer de optie "onveilig" is ingesteld in een paste-configuratiebestand (paste.ini), ongeacht… Openstack
- CVE-2014-6414 MEDIUM · 4.0 OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors. Openstack Canonical
- CVE-2014-6242 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary… Tips And Tricks Hq
- CVE-2014-3621 MEDIUM · 4.0 The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a… Openstack Canonical Redhat
- CVE-2014-6893 MEDIUM · 5.4 De applicatie Pushpins Grocery Coupons (ook bekend als com.pushpinsapp.pushpins) 1.56 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Pushpinsapp
- CVE-2014-6892 MEDIUM · 5.4 The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Kalahari
- CVE-2014-6890 MEDIUM · 5.4 De applicatie CouponCabin - Coupons & Deals (ook bekend als com.couponcabin) 3.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en…
- CVE-2014-6889 MEDIUM · 5.4 The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Gunbroker
- CVE-2014-6888 MEDIUM · 5.4 The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Pennytalk
- CVE-2014-6886 MEDIUM · 5.4 The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Wephoneapp
- CVE-2014-6885 MEDIUM · 5.4 The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Usbank
- CVE-2014-6884 MEDIUM · 5.4 The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Ford
- CVE-2014-6883 MEDIUM · 5.4 The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Cnn
- CVE-2014-6882 MEDIUM · 5.4 The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Western
- CVE-2014-6881 MEDIUM · 5.4 The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Pnc
- CVE-2014-6880 MEDIUM · 5.4 The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Tradehero
- CVE-2014-6879 MEDIUM · 5.4 De Equifax Mobile (ook bekend als com.equifax) applicatie 1.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Equifax
- CVE-2014-6878 MEDIUM · 5.4 The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Rbfcu
- CVE-2014-6877 MEDIUM · 5.4 The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Santanderbank
- CVE-2014-6876 MEDIUM · 5.4 The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Serve
- CVE-2014-6875 MEDIUM · 5.4 The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Woodforest
- CVE-2014-6874 MEDIUM · 5.4 The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Concursive
- CVE-2014-6873 MEDIUM · 5.4 De AMGC (ook bekend als com.amec.uae) -applicatie 6.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Amecuae
- CVE-2014-6872 MEDIUM · 5.4 The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Ttnetmuzik
- CVE-2014-6871 MEDIUM · 5.4 The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Hogs Fly Crazy Project
- CVE-2014-6870 MEDIUM · 5.4 The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Bgenergy
- CVE-2014-6869 MEDIUM · 5.4 The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Barcode Scanner Project
- CVE-2014-6868 MEDIUM · 5.4 The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Synology
- CVE-2014-6867 MEDIUM · 5.4 The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Sortir-en-alsace
- CVE-2014-6866 MEDIUM · 5.4 The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Homeadvisor
- CVE-2014-6865 MEDIUM · 5.4 The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Jamalbates
- CVE-2014-6864 MEDIUM · 5.4 The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Socialknowledge
- CVE-2014-6863 MEDIUM · 5.4 The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Digitalfruit
- CVE-2014-6862 MEDIUM · 5.4 The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Gencat
- CVE-2014-6861 MEDIUM · 5.4 De Terrarienbilder.com Forum (ook bekend als com.tapatalk.terrarienbildercomvb) applicatie 3.8.20 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Terrarienbilder
- CVE-2014-6860 MEDIUM · 5.4 The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Trialtracker
- CVE-2014-6859 MEDIUM · 5.4 The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Daum
- CVE-2014-6858 MEDIUM · 5.4 The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mostafa Shemeas Project
- CVE-2014-6857 MEDIUM · 5.4 The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Arabia2000
- CVE-2014-6856 MEDIUM · 5.4 The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Myvet2pet
- CVE-2014-4793 MEDIUM · 6.5 IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which… Ibm
- CVE-2014-4765 MEDIUM · 5.0 IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk,… Ibm
- CVE-2014-3097 MEDIUM · 4.3 Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect… Ibm
- CVE-2014-3060 HIGH · 10.0 Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed… Ibm
- CVE-2014-3059 HIGH · 10.0 Niet-gespecificeerde kwetsbaarheid in de beheerconsole op het IBM WebSphere DataPower XC10-apparaat 2.5 stelt externe aanvallers in staat om beheerdersrechten te verkrijgen door gebruik te maken… Ibm
- CVE-2014-2642 MEDIUM · 4.3 HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Hp
- CVE-2014-2641 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via… Hp
- CVE-2014-2640 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Hp
- CVE-2012-0811 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter… Postfix