CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6416 HIGH · 7.8 Bufferoverloop in net/ceph/auth_x.c in Ceph, zoals gebruikt in de Linux-kernel vóór 3.16.3, stelt externe aanvallers in staat om een denial of service (geheugenbeschadiging en paniek)… Linux Canonical
- CVE-2014-6410 MEDIUM · 4.7 The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to… Linux
- CVE-2014-3631 HIGH · 7.2 The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users… Linux
- CVE-2014-3186 MEDIUM · 6.9 Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on… Linux Canonical
- CVE-2014-3185 MEDIUM · 6.9 Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers… Linux
- CVE-2014-3184 MEDIUM · 4.7 The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds… Linux
- CVE-2014-3183 MEDIUM · 6.9 Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service… Linux
- CVE-2014-3182 MEDIUM · 6.9 Array-indexfout in de logi_dj_raw_event-functie in drivers/HID/HID-logitech-dj.c in de Linux-kernel vóór 3.16.2 stelt fysiek nabije aanvallers in staat om willekeurige code uit te voeren of een… Linux
- CVE-2014-3181 MEDIUM · 6.9 Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate… Linux
- CVE-2012-6657 MEDIUM · 4.9 The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which… Linux Novell
- CVE-2014-6771 MEDIUM · 5.4 The United Heritage Mobile (aka Fi_Mobile.UHCU) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Uhcu
- CVE-2014-6770 MEDIUM · 5.4 De applicatie Aerospace Jobs (ook bekend als com.app_aerospacejobs.layout) 1.399 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Apppasta
- CVE-2014-6769 MEDIUM · 5.4 De Meteo Belgique (ook bekend als com.mobilesoft.belgiumweather) applicatie 3.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Mobilesoft
- CVE-2014-6768 MEDIUM · 5.4 The Anywhere Anytime Yoga Workout (aka com.bayart.yoga) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Anywhere Anytime Yoga Workout Project
- CVE-2014-6767 MEDIUM · 5.4 The Juggle! FREE (aka com.jakyl.juggleforfree) application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Denki
- CVE-2014-6766 MEDIUM · 5.4 The Afro-Beat (aka com.zero.themelock.tambourine) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Afro-beat Project
- CVE-2014-6765 MEDIUM · 5.4 The No Fuss Home Loans (aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7) application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Mibizapps
- CVE-2014-6764 MEDIUM · 5.4 The Assyrian (aka com.b2.assyrian.activity) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Assyrianapp
- CVE-2014-6763 MEDIUM · 5.4 The Codename Birdgame (aka com.devsecondfictioncom.devsecondfictioncom.birdadhoc) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Secondfiction
- CVE-2014-6762 MEDIUM · 5.4 The bongomovie (aka com.mbwasi.bongomovie) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Bongomovie Project
- CVE-2014-6761 MEDIUM · 5.4 De applicatie Aprende a Meditar (ook bekend als com.rareartifact.aprendeameditar544CB0A2) 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Pimpstore
- CVE-2014-6760 MEDIUM · 5.4 The Harem Thief Dating (aka com.haremthief.haremthief) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Haremthief
- CVE-2014-6759 MEDIUM · 5.4 De Downton Abbey Fan Portal (ook bekend als com.downton.abbey.fan.portal) applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Downton Abbey Fan Portal Project
- CVE-2014-6758 MEDIUM · 5.4 The Qin Story (aka com.kongzhong.tjmammoth.android.cqqslengp) application 1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mgsasia
- CVE-2014-6757 MEDIUM · 5.4 The Koran - AlqoranVideos (aka com.alqoran.videos.example) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Allqoranvideos
- CVE-2014-6756 MEDIUM · 5.4 De Reddit AWW (aka org.biais.redditawww) -applicatie 1.2.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via… Biais
- CVE-2014-6755 MEDIUM · 5.4 The SDN Forum (TapaTalk) (aka com.tapatalk.forumshiftdeletenet) application 3.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Shiftdelete
- CVE-2014-6754 MEDIUM · 5.4 The Vector Outage Manager (aka nz.co.vector.outagemanager) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Vector
- CVE-2014-6753 MEDIUM · 5.4 The sunnat e rasool (aka com.imsoft.sunnat_e_rasool) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Halanew
- CVE-2014-6752 MEDIUM · 5.4 De Mindless Behavior Fan Base (ook bekend als com.mindless.behavior.fan.base) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Mindless Behavior Fan Base Project
- CVE-2014-6751 MEDIUM · 5.4 De Grasshopper Beta (ook bekend als com.grasshopper.dialer) applicatie 2.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Grasshopper
- CVE-2014-6750 MEDIUM · 5.4 De applicatie $ 0.99 Kindle Books (ook bekend als com.kindle.books.for99) 6.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige…
- CVE-2014-6749 MEDIUM · 5.4 The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Ananursespace
- CVE-2014-6748 MEDIUM · 5.4 The GEMAIRE's HVAC Assist (aka com.es.Gemaire) application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Gemaire
- CVE-2014-6277 HIGH · 10.0 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code… Gnu
- CVE-2014-5459 LOW · 3.6 The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a… Php Oracle Opensuse
- CVE-2014-3062 HIGH · 9.3 Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors. Ibm
- CVE-2014-6747 MEDIUM · 5.4 De SeeOn-applicatie (ook bekend als com.seeon) versie 4.0.7 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen nabootsen en gevoelige informatie kunnen verkrijgen… Seeon
- CVE-2014-6746 MEDIUM · 5.4 De Infiniti Roadside Assistance (ook bekend als com.ccas.rsa.common.infiniti) -applicatie 1.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Infinitiusa
- CVE-2014-6745 MEDIUM · 5.4 The Family Location (aka com.sosocome.family) application 3.4 2014-5-20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Sosocome
- CVE-2014-6744 MEDIUM · 5.4 The Al-Ahsa News (aka com.alahsa.news) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Al-ahsa News Project
- CVE-2014-6743 MEDIUM · 5.4 The Hearsay: A Social Party Game (aka air.com.lip.per) application 1.7.000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Lipbrau
- CVE-2014-6742 MEDIUM · 5.4 The All around Cyprus (aka com.cyprus.newspapers) application 2.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… All Around Cyprus Project
- CVE-2014-6741 MEDIUM · 5.4 De John MacArthur (ook bekend als com.john.macarthur) -applicatie 1.0.26 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Tribunenews365
- CVE-2014-6740 MEDIUM · 5.4 The XD Forum (aka com.tapatalk.xdforumcomforum) application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Xdforum
- CVE-2014-6739 MEDIUM · 5.4 De applicatie Well-Being Connect Mobile (ook bekend als com.healthways.wellbeinggo) 2.9 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Healthways
- CVE-2014-6738 MEDIUM · 5.4 The Maccabi Tel Aviv (aka com.monkeytech.maccabi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Joungouapps
- CVE-2014-6737 MEDIUM · 5.4 De Ultimate Target-Armored Sniper (ook bekend als air.wood.liame.ultimatetarget) -applicatie 1.0.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Ultimate Target-armored Sniper Project
- CVE-2014-6736 MEDIUM · 5.4 De EPL Hat Trick (ook bekend als com.hat.trick.goal) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… 9jacompass
- CVE-2014-6735 MEDIUM · 5.4 The imagine Next bmobile (aka com.conduit.app_51c3c19581af465092327dd25591b224.app) application 1.7.10.243 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Bmobile