CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6010 MEDIUM · 5.4 The Rasta Weed Widgets HD (aka aw.awesomewidgets.rastaweed) application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Awesomewidgets
- CVE-2014-6009 MEDIUM · 5.4 The Zombie Detector (aka com.jimmybolstad.zombiedetector) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Zombie Detector Project
- CVE-2014-6008 MEDIUM · 5.4 The Blitz Bingo (aka com.appMobi.sbbingo.app) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Secondfiction
- CVE-2014-6007 MEDIUM · 5.4 The LikeHero Get Instagram Likes (aka com.fraoula.likehero) application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Likeheroapp
- CVE-2014-6006 MEDIUM · 5.4 The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers…
- CVE-2014-6005 MEDIUM · 5.4 The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Survey.com
- CVE-2014-6004 MEDIUM · 5.4 De Pocket Cam Photo Editor (ook bekend als mobi.pocketcam.editor) applicatie 3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Pocket Cam Photo Editor Project
- CVE-2014-6003 MEDIUM · 5.4 The Belas Frases de Amor (aka com.goodbarber.frasesdeamor) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Belasfrasesdeamor
- CVE-2014-6002 MEDIUM · 5.4 The DTE Energy (aka com.dteenergy.mydte) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Dteenergy
- CVE-2014-6001 MEDIUM · 5.4 De gewara (ook bekend als com.gewara) -applicatie 5.2.3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Gewara
- CVE-2014-6000 MEDIUM · 5.4 The FreshDirect (aka com.freshdirect.android) application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Freshdirect
- CVE-2014-5999 MEDIUM · 5.4 De autonavi (ook bekend als com.telenav.doudouyou.android.autonavi) -applicatie 4.6.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Telenavsoftware
- CVE-2014-5998 MEDIUM · 5.4 De SkyDrive Assistant (ook bekend als com.dhh.sky) -applicatie 2.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Skydrive Assistant Project
- CVE-2014-5997 MEDIUM · 5.4 The Auto Trader (aka za.co.autotrader.android.app) application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Autotrader.co.za
- CVE-2014-5996 MEDIUM · 5.4 De DEKRA Used Car Report (ook bekend als com.dekra.maengelreport) applicatie 3.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Gebrauchtwagenreport
- CVE-2014-5995 MEDIUM · 5.4 De eWUS mobiele (ook bekend als pl.dreryk.ewustest) applicatie 1.4.5 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Ericpol
- CVE-2014-5994 MEDIUM · 5.4 The ding* ezetop. Top-up Any Phone (aka com.ezetop.world) application 1.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Ding
- CVE-2014-5993 MEDIUM · 5.4 The MLB Preplay (aka com.preplay.android.mlb) application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Preplaysports
- CVE-2014-5992 MEDIUM · 5.4 The successsecrets (aka com.alek.successsecrets) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Successsecrets Project
- CVE-2014-5991 MEDIUM · 5.4 De applicatie Skin Conditions and Diseases (ook bekend als com.appsgeyser.wSkinConditions) 2.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Skin Conditions And Diseases Project
- CVE-2014-5984 MEDIUM · 5.4 The Little Dragons (aka com.playcomo.dragongame) application 1.0.256 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Playcomo
- CVE-2014-5983 MEDIUM · 5.4 De Threadflip: Buy, Sell Fashion (ook bekend als com.threadflip.android) -applicatie 1.1.11 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Threadflip
- CVE-2014-5982 MEDIUM · 5.4 The RunKeeper - GPS Track Run Walk (aka com.fitnesskeeper.runkeeper.pro) application 4.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Runkeeper
- CVE-2014-5971 MEDIUM · 5.4 The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Fiksu
- CVE-2014-5809 MEDIUM · 5.4 The Smart Browser (aka smartbrowser.geniuscloud) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Geniuscloud
- CVE-2014-5665 MEDIUM · 5.4 The Mzone Login (aka com.mr384.MzoneLogin) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mr384
- CVE-2014-2942 HIGH · 7.2 Cobham Aviator 700D- en 700E-satellietterminals gebruiken een onjuist algoritme voor PIN-codes, waardoor het voor aanvallers gemakkelijker wordt om een bevoorrechte terminalsessie te verkrijgen door de… Cobham
- CVE-2014-6602 MEDIUM · 6.6 Microsoft Asha OS op de Microsoft Mobile Nokia Asha 501-telefoon 14.0.4 stelt fysiek naaste aanvallers in staat om het vergrendelschermbeveiligingsmechanisme te omzeilen en contactgegevens te… Microsoft
- CVE-2014-5322 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject… Filemaker
- CVE-2014-5321 MEDIUM · 5.8 FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Filemaker
- CVE-2014-5320 MEDIUM · 5.0 The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application. Bump Project
- CVE-2014-5316 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Dotclear vóór 2.6.4 stelt externe aanvallers in staat om willekeurig webscript of HTML via een vervaardigde pagina te injecteren. Dotclear
- CVE-2014-6432 MEDIUM · 5.0 De SnifferDecompress-functie in wiretap/ngsniffer.c in de DOS Sniffer-bestandsparser in Wireshark 1.10.x vóór 1.10.10 en 1.12.x vóór 1.12.1 voorkomt niet dat gegevens worden overschreven tijdens kopieerbewerkingen,… Wireshark
- CVE-2014-6431 MEDIUM · 5.0 Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote… Wireshark
- CVE-2014-6430 MEDIUM · 5.0 De functie SnifferDecompress in wiretap/ngsniffer.c van de DOS Sniffer-bestandparser in Wireshark 1.10.x vóór 1.10.10 en 1.12.x vóór 1.12.1 valideert geen bitmask-gegevens. Hierdoor kunnen externe aanvallers… Wireshark
- CVE-2014-6429 MEDIUM · 5.0 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty… Wireshark
- CVE-2014-6428 MEDIUM · 5.0 The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value,… Wireshark
- CVE-2014-6427 MEDIUM · 5.0 Een off-by-one-fout in de functie is_rtsp_request_or_reply in epan/dissectors/packet-rtsp.c in de RTSP-dissector van Wireshark 1.10.x vóór 1.10.10 en 1.12.x vóór 1.12.1 stelt externe aanvallers in staat… Wireshark
- CVE-2014-6426 MEDIUM · 5.0 De dissect_hip_tlv-functie in epan/dissectors/packet-hip.c in de HIP dissector in Wireshark 1.12.x vóór 1.12.1 verwerkt een NULL tree niet goed, waardoor externe aanvallers een denial of… Wireshark
- CVE-2014-6425 MEDIUM · 5.0 The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.12.1 allow remote attackers to cause a denial… Wireshark
- CVE-2014-6424 MEDIUM · 5.0 The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables,… Wireshark
- CVE-2014-6423 MEDIUM · 5.0 The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial… Wireshark
- CVE-2014-6422 MEDIUM · 5.0 The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service… Wireshark
- CVE-2014-6421 MEDIUM · 5.0 Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (application crash) via a crafted… Wireshark
- CVE-2014-5990 MEDIUM · 5.4 De cookbible (ook bekend als net.bookjam.cookbible) -applicatie 1.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Bookjam
- CVE-2014-5989 MEDIUM · 5.4 The baby days (aka jp.co.cyberagent.babydays) application 1.5.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Babydays
- CVE-2014-5988 MEDIUM · 5.4 De Azkend Gold (ook bekend als com.the10tons.azkend.gold) -applicatie 1.2.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Getjar
- CVE-2014-5987 MEDIUM · 5.4 The My3 - by 3HK (aka com.my3) application @7F0A0001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Three
- CVE-2014-5986 MEDIUM · 5.4 The Educational Puzzles - Letters (aka com.EducationalPuzzlesLetters) application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Puzzles And Matchup Games Project
- CVE-2014-5985 MEDIUM · 5.4 De Android-applicatie Animal Kaiser Zangetsu (ook bekend als com.wAnimalKaiserZangetsu) versie 0.1 verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Topappsbuilder Project