CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6734 MEDIUM · 5.4 The Wine Making (aka com.gcspublishing.winemakingtalk) application 3.7.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Gcspublishing
- CVE-2014-7152 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML… Mailchimp
- CVE-2014-6446 HIGH · 7.5 The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute… Infusionsoft Gravity Forms Project
- CVE-2014-6445 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 t/m 1.3.10 voor WordPress stellen externe aanvallers in staat om willekeurig… Contactus
- CVE-2014-4958 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Telerik UI voor ASP.NET AJAX RadEditor-controle 2014.1.403.35, 2009.3.1208.20 en andere versies stelt externe aanvallers in staat om willekeurig webscript of… Telerik
- CVE-2014-6733 MEDIUM · 5.4 The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… T-mobile
- CVE-2014-6732 MEDIUM · 5.4 De Westpac Mobile Banking (ook bekend als org.westpac.bank) applicatie 5.21 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Westpac
- CVE-2014-6731 MEDIUM · 5.4 The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Alfabank
- CVE-2014-6730 MEDIUM · 5.4 The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Melodigram
- CVE-2014-6729 MEDIUM · 5.4 The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Grillingwithrich
- CVE-2014-6728 MEDIUM · 5.4 The ThinkPal (aka com.mythinkpalapp) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Mythinkpal
- CVE-2014-6727 MEDIUM · 5.4 The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Automon
- CVE-2014-6726 MEDIUM · 5.4 DE 30A (ook bekend als com.app30a) applicatie 5.26.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… 30a
- CVE-2014-6725 MEDIUM · 5.4 De SchoolXM (ook bekend als apprentice.schoolxm) -applicatie 1.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Apprenticeuitgevers
- CVE-2014-6724 MEDIUM · 5.4 The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Soapmakingforum
- CVE-2014-6723 MEDIUM · 5.4 The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Comicsplusapp
- CVE-2014-6722 MEDIUM · 5.4 The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Clearfishing
- CVE-2014-6721 MEDIUM · 5.4 The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Pharmaguideline
- CVE-2014-6720 MEDIUM · 5.4 The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Clearfishing
- CVE-2014-6719 MEDIUM · 5.4 The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Rapidmedia
- CVE-2014-5324 MEDIUM · 6.5 Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging… Najeebmedia
- CVE-2014-5319 MEDIUM · 6.4 Directory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for Android allows remote attackers to write to files via unspecified vectors. S-link
- CVE-2014-5318 MEDIUM · 5.8 The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. Jig
- CVE-2014-5315 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary… Adobe
- CVE-2014-1568 HIGH · 7.5 Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x… Google Apple Microsoft Mozilla
- CVE-2014-3361 HIGH · 7.1 De ALG-module in Cisco IOS 15.0 tot en met 15.4 implementeert SIP over nat niet correct, waardoor externe aanvallers een denial of service (herladen van… Cisco
- CVE-2014-3360 HIGH · 7.8 Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before… Cisco
- CVE-2014-3359 HIGH · 7.8 Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and… Cisco
- CVE-2014-3358 HIGH · 7.8 Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before… Cisco
- CVE-2014-3357 HIGH · 7.8 Cisco IOS 15.0, 15.1, 15.2 en 15.4 en IOS XE 3.3.xSE vóór 3.3.2SE, 3.3.xXO vóór 3.3.1XO, 3.5.xE vóór 3.5.2E en 3.11.xS vóór 3.11.1S stellen externe… Cisco
- CVE-2014-3356 HIGH · 7.8 De metadatastroomfunctie in Cisco IOS 15.1 tot en met 15.3 en IOS XE 3.3.xXO vóór 3.3.1XO, 3.6.xS en 3.7.xS vóór 3.7.6S, en 3.8.xS, 3.9.xS en… Cisco
- CVE-2014-3355 HIGH · 7.8 The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and… Cisco
- CVE-2014-3354 HIGH · 7.8 Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and… Cisco
- CVE-2014-6718 MEDIUM · 5.4 The My Mobile Day (aka com.mymobileday) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Mymobileday1
- CVE-2014-6717 MEDIUM · 5.4 The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Itriagehealth
- CVE-2014-6716 MEDIUM · 5.4 De fastin (aka moda.azyae.fastin.net) applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Fastin Project
- CVE-2014-6715 MEDIUM · 5.4 De SlotMachine (ook bekend als com.popoinnovation.SlotMachine) -applicatie 1.03 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Popoinnovation
- CVE-2014-6714 MEDIUM · 5.4 De WebMD (ook bekend als com.webmd.android) -applicatie 3.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Webmd
- CVE-2014-6713 MEDIUM · 5.4 The MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to…
- CVE-2014-6712 MEDIUM · 5.4 The Airlines International (aka org.iata.IAMagazine) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Iata
- CVE-2014-6711 MEDIUM · 5.4 The ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Nobexrc
- CVE-2014-6710 MEDIUM · 5.4 The Chifro Kids Coloring Game (aka com.chifro.kids_coloring_game) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Chifro
- CVE-2014-6709 MEDIUM · 5.4 De TechRadar News (ook bekend als com.techradar.news) -applicatie 1.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Techradar News Project
- CVE-2014-6708 MEDIUM · 5.4 The Sporting Club Uphoria (aka com.sportinginnovations.skc) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Sportinginnovations
- CVE-2014-6707 MEDIUM · 5.4 The 7Sage LSAT Prep - Proctor (aka com.sevensage.lsat) application 2.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… 7sage
- CVE-2014-6706 MEDIUM · 5.4 The Embry-Riddle (aka com.dub.app.erau) application 1.4.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Erau
- CVE-2014-6705 MEDIUM · 5.4 De Maher Zain (ook bekend als com.vanagas.app.maher_zain) applicatie 1.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Maher Zain Project
- CVE-2014-6704 MEDIUM · 5.4 The Utah Jazz (aka com.sportinginnovations.jazz) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Sportinginnovations
- CVE-2014-6703 MEDIUM · 5.4 De phonearabs4 (ook bekend als com.phonearabs4.myapps) -applicatie 1.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Phonearabs4 Project
- CVE-2014-6702 MEDIUM · 5.4 The StarSat International (aka com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app) application 1.41.54.9222 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Starsat