CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-1874 MEDIUM · 4.4 Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current… Call-cc
- CVE-2012-6110 LOW · 2.1 bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify… Bcron Project
- CVE-2012-6107 MEDIUM · 4.3 Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… Apache
- CVE-2012-5621 MEDIUM · 5.0 lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains… Ekiga
- CVE-2012-5619 LOW · 2.1 The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which .… Sleuthkit
- CVE-2014-3824 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r6,… Juniper
- CVE-2014-3823 MEDIUM · 4.3 The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote… Juniper
- CVE-2014-3820 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1… Juniper
- CVE-2014-3811 HIGH · 7.2 Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors. Juniper
- CVE-2014-6804 MEDIUM · 5.4 De Deschutes Public MobileLibrary (ook bekend als com.bredir.boopsie.deschutes) applicatie 4.5.110 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Boopsie
- CVE-2014-6803 MEDIUM · 5.4 The Bank of Moscow EIRTS Rent (aka ru.bm.rbs.android) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Bm
- CVE-2014-6802 MEDIUM · 5.4 The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Subsplash
- CVE-2014-6801 MEDIUM · 5.4 De frank matano (ook bekend als com.frank.matano) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Frank Matano Project
- CVE-2014-6800 MEDIUM · 5.4 The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Parentlink
- CVE-2014-6799 MEDIUM · 5.4 The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Broadcom
- CVE-2014-6798 MEDIUM · 5.4 The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Weeverapps
- CVE-2014-6797 MEDIUM · 5.4 The Abu Ali Anasheeds (aka com.faapps.abuali_anasheeds) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Abu Ali Anasheeds Project
- CVE-2014-6796 MEDIUM · 5.4 The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Localsense
- CVE-2014-6795 MEDIUM · 5.4 The Beekeeping Forum (aka com.tapatalk.supporttapatalkcomxxxxx) application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gcspublishing
- CVE-2014-6794 MEDIUM · 5.4 The AAPLD (aka com.bredir.boopsie.aapld) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Boopsie
- CVE-2014-6793 MEDIUM · 5.4 De Arch Friend (ook bekend als com.xyproto.archfriend) -applicatie 0.4.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Roboticoverlords
- CVE-2014-6792 MEDIUM · 5.4 The Suriname Radio (aka com.wordbox.surinameRadio) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Suriname Radio Project
- CVE-2014-6791 MEDIUM · 5.4 De Angel Reigns (ook bekend als com.conduit.app_dab60e7bd60d4f23a14b3fb7357f9dcd.app) applicatie 1.2.6.185 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Atastefromheaven
- CVE-2014-6790 MEDIUM · 5.4 De INVEX-applicatie (ook bekend als com.mobilatolye.keyinternet) 1.0.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via… Keyinternet
- CVE-2014-6789 MEDIUM · 5.4 De Anaheim Library 2Go! (ook bekend als com.bredir.boopsie.anaheim) -applicatie 4.5.110 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Boopsie
- CVE-2014-6788 MEDIUM · 5.4 De Oman News (ook bekend als com.oman.news.rmtzlnbuooordciw) applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Oman News Project
- CVE-2014-6787 MEDIUM · 5.4 The Counter Intuition (aka com.counter.intuition) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Counterintuition
- CVE-2014-6786 MEDIUM · 5.4 De applicatie Math for Kids - Subtraction (ook bekend als it.tinytap.attsa.deepsub) 1.2.10 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Tinytap
- CVE-2014-6785 MEDIUM · 5.4 De Renny McLean Ministries (ook bekend als com.subsplash.thechurchapp.s_GJQX72) applicatie 2.8.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Subsplash
- CVE-2014-6784 MEDIUM · 5.4 The Fermononrespiri Mobile (aka com.tapatalk.rmonlineitforums) application 3.8.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Fermononrespiri
- CVE-2014-6783 MEDIUM · 5.4 The Campus Link - Campus TV HKUSU (aka com.campus.tv.hkusu) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Campustv
- CVE-2014-6782 MEDIUM · 5.4 The Abraham Tours (aka com.mytoursapp.android.app432) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Abrahamtours
- CVE-2014-6781 MEDIUM · 5.4 De Aloha Stadium - Hawaii (ook bekend als com.stadium.aloha) applicatie 1.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Mobilizedsolutions
- CVE-2014-6780 MEDIUM · 5.4 The MeiTalk (aka com.playjia.meitalk) application @7F060012 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Meitalk
- CVE-2014-6779 MEDIUM · 5.4 De Cart-app (ook bekend als com.virtecha.mobilewallet) applicatie 1.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Cart-app
- CVE-2014-6778 MEDIUM · 5.4 The Goat Forum (aka com.gcspublishing.goatspot) application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gcspublishing
- CVE-2014-6777 MEDIUM · 5.4 The blueeleph (aka eg.film.blueeleph) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Blueeleph Project
- CVE-2014-6776 MEDIUM · 5.4 The United Advantage NW Federal Cr (aka com.myappengine.uanwfcu) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Uanw
- CVE-2014-6775 MEDIUM · 5.4 De Light for Pets (ook bekend als com.helenwoodward.light4pets) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Animalcenter
- CVE-2014-6774 MEDIUM · 5.4 De USEK (aka com.university.usek) -applicatie 1.0.8 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Neorcha
- CVE-2014-6773 MEDIUM · 5.4 De CIH Quiz-game (ook bekend als com.bowenehs.cihquizgameapp) applicatie 1.3 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Bowenehs
- CVE-2014-6772 MEDIUM · 5.4 The United Educational CU (aka com.metova.cuae.uecu) application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Unitedecu
- CVE-2014-7187 HIGH · 10.0 Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array… Gnu
- CVE-2014-7186 HIGH · 10.0 The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application… Gnu
- CVE-2014-3535 HIGH · 7.8 include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial… Linux
- CVE-2014-2639 MEDIUM · 4.6 Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors. Hp
- CVE-2014-0205 MEDIUM · 6.9 De futex_wait-functie in kernel/futex.c in de Linux-kernel vóór 2.6.37 handhaaft niet correct een bepaalde referentietelling tijdens requeue-bewerkingen, waardoor lokale gebruikers een denial of service (use-after-free… Linux
- CVE-2014-7145 HIGH · 7.8 The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and… Redhat Linux Canonical
- CVE-2014-6418 HIGH · 7.1 net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial… Linux Canonical
- CVE-2014-6417 HIGH · 7.8 net/ceph/auth_x.c in Ceph, zoals gebruikt in de Linux-kernel vóór 3.16.3, houdt niet goed rekening met de mogelijkheid van kmalloc-falen, waardoor externe aanvallers een denial of… Linux