CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5981 MEDIUM · 5.4 De MoWeather (ook bekend als com.moji.moweather) -applicatie 1.40.05 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Moweather
- CVE-2014-5980 MEDIUM · 5.4 De Genertel (ook bekend als com.genertel) -applicatie 2.6.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Genertel
- CVE-2014-5979 MEDIUM · 5.4 De TV Bengali Open Directory (ook bekend als com.TVBengali) -applicatie 1.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Tvbengali
- CVE-2014-5978 MEDIUM · 5.4 The memetan (aka memetan.android.com.activity) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Ipposan
- CVE-2014-5977 MEDIUM · 5.4 The Mobile Face (aka com.wFacemobile) application 0.74.13432.91159 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mobile Face Project
- CVE-2014-5976 MEDIUM · 5.4 The alibaba (aka com.alibaba.wireless) application 4.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Alibaba
- CVE-2014-5975 MEDIUM · 5.4 The eponyms (aka com.anddeveloper.eponyms) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Grabapp
- CVE-2014-5974 MEDIUM · 5.4 De PSECU Mobile+ (ook bekend als com.Vertifi.Mobile.P231381116) applicatie 2.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Psecu
- CVE-2014-5973 MEDIUM · 5.4 The Aquarium Advice (aka com.socialknowledge.aquariumadvice) application 3.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Socialknowledge
- CVE-2014-5972 MEDIUM · 5.4 De applicatie Loving - Couple Essential (ook bekend als com.xiaoenai.app) 4.0.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Loving.fm
- CVE-2014-3379 MEDIUM · 6.1 Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang… Cisco
- CVE-2014-3378 MEDIUM · 5.0 tacsd in Cisco IOS XR 5.1 en eerder stelt externe aanvallers in staat om een denial of service (procesherlading) te veroorzaken via een verkeerd gevormd… Cisco
- CVE-2014-3377 MEDIUM · 4.0 snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet,… Cisco
- CVE-2014-3376 MEDIUM · 5.0 Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID… Cisco
- CVE-2014-3367 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de vCloud Director-component in Cisco Nexus 1000V InterCloud voor VMware stelt externe aanvallers in staat om willekeurig webscript of HTML… Cisco
- CVE-2014-0992 MEDIUM · 6.8 Stack-based buffer overflow in Advantech WebAccess (voorheen BroadWin WebAccess) 7.2 stelt externe aanvallers in staat om willekeurige code uit te voeren via de wachtwoordparameter. Advantech
- CVE-2014-0991 MEDIUM · 6.8 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter. Advantech
- CVE-2014-0990 MEDIUM · 6.8 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter. Advantech
- CVE-2014-0989 MEDIUM · 6.8 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter. Advantech
- CVE-2014-0988 MEDIUM · 6.8 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter. Advantech
- CVE-2014-0987 MEDIUM · 6.8 Op stapels gebaseerde bufferoverloop in Advantech WebAccess (voorheen BroadWin WebAccess) 7.2 stelt externe aanvallers in staat om willekeurige code uit te voeren via de parameter… Advantech
- CVE-2014-0986 MEDIUM · 6.8 Op stapels gebaseerde bufferoverloop in Advantech WebAccess (voorheen BroadWin WebAccess) 7.2 stelt externe aanvallers in staat om willekeurige code uit te voeren via de GotoCmd-parameter. Advantech
- CVE-2014-0985 MEDIUM · 6.8 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter. Advantech
- CVE-2014-3614 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in PowerDNS Recursor (ook bekend als pdns_recursor) 3.6.x vóór 3.6.1 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken… Powerdns
- CVE-2012-6659 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted… Phorum
- CVE-2012-2588 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in MailEnable Enterprise 6.5 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) From,… Mailenable
- CVE-2014-5970 MEDIUM · 5.4 The BabyBus (aka com.sinyee.babybus.concert.ru) application 3.91 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Babybus
- CVE-2014-5969 MEDIUM · 5.4 De healthylifestyle (ook bekend als com.alek.healthylifestyle) -applicatie 1.2.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Healthylifestyle Project
- CVE-2014-5968 MEDIUM · 5.4 The iGolf - Golf GPS (aka com.igolf) application 20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Igolf
- CVE-2014-5967 MEDIUM · 5.4 The Designs Nail Arts (aka com.decoracionesnailart.flickr) application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Decoracionesnailart
- CVE-2014-5966 MEDIUM · 5.4 De Dreamland Super Theme GO Gold (ook bekend als com.gau.go.launcherex.viptheme.dreamland.gold) applicatie 1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Golauncher
- CVE-2014-5965 MEDIUM · 5.4 The GrooveMusic (aka com.mobincube.android.sc_2HKFF) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Groovemusic Project
- CVE-2014-5964 MEDIUM · 5.4 The MegaBank (aka com.megabank.mobilebank) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Megabank
- CVE-2014-5963 MEDIUM · 5.4 The Halieutics (aka com.corn.Halieutics) application 21.40.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Corntree
- CVE-2014-5962 MEDIUM · 5.4 The Guess The Actor (aka com.gamelikeinc.actors) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Gamelikeapps
- CVE-2014-5961 MEDIUM · 5.4 The russiananime (aka com.rareartifact.russiananime68A5CCFE) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Hdcar
- CVE-2014-5960 MEDIUM · 5.4 The BundesArztsuche (aka de.kbv.bas) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Kbv
- CVE-2014-5959 MEDIUM · 5.4 The tx Smart (aka com.wooriwm.txsmart) application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mytx
- CVE-2014-5958 MEDIUM · 5.4 The ChatBox - Chat Rooms (aka com.droidchatroom.messengerapp) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Chatbox
- CVE-2014-4424 HIGH · 7.5 Een SQL-injectiekwetsbaarheid in Wiki Server in CoreCollaboration op Apple OS X Server vóór versie 2.2.3 en 3.x vóór versie 3.2.1 stelt externe aanvallers in staat… Apple
- CVE-2014-4416 MEDIUM · 6.9 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows… Apple
- CVE-2014-4406 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or… Apple
- CVE-2014-4403 LOW · 2.1 De kernel in Apple OS X vóór 10.9.5 stelt lokale gebruikers in staat om gevoelige adresinformatie te verkrijgen en het ASLR-beveiligingsmechanisme te omzeilen door gebruik… Apple
- CVE-2014-4402 HIGH · 9.3 Een niet-gespecificeerde IOAcceleratorFamily-functie in Apple OS X vóór 10.9.5 mist de juiste grenzen voor het controleren van leesbewerkingen, waardoor aanvallers willekeurige code in een geprivilegieerde… Apple
- CVE-2014-4401 MEDIUM · 6.9 Een niet-gespecificeerde routine in het geïntegreerde grafische stuurprogramma van het Intel Graphics Driver-subsysteem in Apple OS X vóór versie 10.9.5 valideert aanroepen niet correct, waardoor… Apple
- CVE-2014-4400 MEDIUM · 6.9 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows… Apple
- CVE-2014-4399 MEDIUM · 6.9 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows… Apple
- CVE-2014-4398 MEDIUM · 6.9 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows… Apple
- CVE-2014-4397 MEDIUM · 6.9 Een niet-gespecificeerde geïntegreerde grafische driverroutine in het Intel Graphics Driver-subsysteem in Apple OS X vóór 10.9.5 valideert oproepen niet goed, waardoor aanvallers willekeurige code in… Apple
- CVE-2014-4396 MEDIUM · 6.9 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows… Apple