CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2012-6658 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in SpiceWorks 5.3.75941 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) syslocatie, (2)… Spiceworks
- CVE-2012-2956 MEDIUM · 6.5 SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to api_v2.json. NOTE: this entry was… Spiceworks
- CVE-2014-5235 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de frontend in Open-Xchange (OX) AppSuite vóór 7.4.2-rev33 en 7.6.x vóór 7.6.0-rev16 stelt aanvallers op afstand in staat om willekeurig… Open-xchange
- CVE-2014-5234 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script… Open-xchange
- CVE-2012-2583 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the… Mini Mail Dashboard Widget Project
- CVE-2012-1507 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) newHspStatus parameter to… Orangehrm
- CVE-2012-1506 MEDIUM · 6.5 SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated users to execute arbitrary SQL commands via the hspSummaryId… Orangehrm
- CVE-2012-1417 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in het lokale telefoonboek en Blacklist-formulier in Yealink VOIP-TELEFOONS stellen externe geverifieerde gebruikers in staat om willekeurig webscript of HTML… Yealink
- CVE-2012-1032 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via… Siteseeker Episerver
- CVE-2014-5918 MEDIUM · 5.4 The Secret Circle - talk freely (aka com.easyxapp.secret) application 2.2.00.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Secretcircle
- CVE-2014-5917 MEDIUM · 5.4 De Slideshow 365 (ook bekend als com.Slideshow) -applicatie 3.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Grassapper
- CVE-2014-5916 MEDIUM · 5.4 De Minha Oi (ook bekend als br.com.mobicare.minhaoi) -applicatie 1.15.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Oi
- CVE-2014-5915 MEDIUM · 5.4 The Tigo Copa Mundial FIFA 2014 (aka com.fwc2014.millicom.and) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Tigo
- CVE-2014-5914 MEDIUM · 5.4 The Finansbank Cep Subesi (aka com.finansbank.mobile.cepsube) application 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Finansbank
- CVE-2014-5913 MEDIUM · 5.4 The Allies in War (aka com.gamelion.aiw) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Game-lion
- CVE-2014-5912 MEDIUM · 5.4 The InNote (aka com.intsig.notes) application 1.0.3.20131119 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Intsig
- CVE-2014-5911 MEDIUM · 5.4 The Free App Icons & Icon Packs (aka com.jellytap.cooliconfinder) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Jellytap
- CVE-2014-5910 MEDIUM · 5.4 The Dog Whistle (aka com.dogwhistle.dogtrainingandroidapp) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Dog Whistle Project
- CVE-2014-5909 MEDIUM · 5.4 De watcha (ook bekend als com.frograms.watcha) -applicatie 2.0.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Watcha
- CVE-2014-5908 MEDIUM · 5.4 The Kmart (aka com.kmart.android) application @7F0C00EF for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Kmart
- CVE-2014-5907 MEDIUM · 5.4 The Pet Salon (aka com.libiitech.petsalon) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Libiitech
- CVE-2014-5906 MEDIUM · 5.4 The Lil Wayne Slots: FREE SLOTS (aka com.lilwayneslots.slots.android) application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Youngmoney
- CVE-2014-4622 HIGH · 7.1 EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups,… Emc
- CVE-2014-4621 HIGH · 8.5 EMC Documentum Content Server vóór 6.7 SP2 P17, 7.0 tot en met P15 en 7.1 vóór P08 controleert de autorisatie niet goed op subtypen van… Emc
- CVE-2014-0568 HIGH · 10.0 The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a… Adobe Microsoft
- CVE-2014-0567 HIGH · 10.0 Op heap gebaseerde bufferoverloop in Adobe Reader en Acrobat 10.x vóór 10.1.12 en 11.x vóór 11.0.09 op Windows en OS X stelt aanvallers in staat… Adobe Apple Microsoft
- CVE-2014-0566 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0565 HIGH · 10.0 Adobe Reader en Acrobat 10.x vóór 10.1.12 en 11.x vóór 11.0.09 op Windows en OS X staan aanvallers toe om willekeurige code uit te voeren… Adobe Apple Microsoft
- CVE-2014-0563 HIGH · 7.8 Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to cause a denial of service (memory… Adobe Apple Microsoft
- CVE-2014-0562 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attackers to inject arbitrary… Adobe Apple Microsoft
- CVE-2014-0561 HIGH · 10.0 Op heap gebaseerde bufferoverloop in Adobe Reader en Acrobat 10.x vóór 10.1.12 en 11.x vóór 11.0.09 op Windows en OS X stelt aanvallers in staat… Adobe Apple Microsoft
- CVE-2014-0560 HIGH · 10.0 Use-after-free kwetsbaarheid in Adobe Reader en Acrobat 10.x vóór 10.1.12 en 11.x vóór 11.0.09 op Windows en OS X stelt aanvallers in staat om willekeurige… Adobe Apple Microsoft
- CVE-2014-6392 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script… Facebook
- CVE-2014-5905 MEDIUM · 5.4 The Grocery List - Tomatoes (aka com.meucarrinho) application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Meucarrinho
- CVE-2014-5904 MEDIUM · 5.4 The MiniInTheBox Online Shopping (aka com.miniinthebox.android) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Miniinthebox
- CVE-2014-5903 MEDIUM · 5.4 The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Mobileiron
- CVE-2014-5902 MEDIUM · 5.4 The UA Cinemas - Mobile ticketing (aka com.mtel.uacinemaapps) application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Uacinemas
- CVE-2014-5901 MEDIUM · 5.4 The Beauty Bible - App for Girls (ook bekend als com.my.beauty.bible) applicatie 5 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen… Webelinx
- CVE-2014-5900 MEDIUM · 5.4 The myHomework Student Planner (aka com.myhomeowork) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Myhomeworkapp
- CVE-2014-5899 MEDIUM · 5.4 De Nespresso (aka com.nespresso.activities) applicatie 2.4.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Nespresso
- CVE-2014-5898 MEDIUM · 5.4 The Heavy Duty Truck Driver Simulator 3D (aka com.oas.heavy.duty.truck.driver.simulator3d) application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Heavy Duty Truck Driver Simulator 3d Project
- CVE-2014-5897 MEDIUM · 5.4 The Parallel Mafia MMORPG (aka com.perblue.pm.client) application @7F070000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Parallelmafia
- CVE-2014-5896 MEDIUM · 5.4 The GlobalTalk- free phone calls (aka com.seawolftech.globaltalk) application 2.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Seawolftech
- CVE-2014-5895 MEDIUM · 5.4 The ShopYourWay (aka com.sears.shopyourway) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Shopyourway
- CVE-2014-5894 MEDIUM · 5.4 De AireTalk: Text, Call, & More! (ook bekend als com.pingshow.amper) applicatie 2.0.73 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en… Pingshow
- CVE-2014-5893 MEDIUM · 5.4 The froyo (aka com.shinsegae.mobile.froyo) application 5.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Shinsegaemall
- CVE-2014-5892 MEDIUM · 5.4 The greenbill (aka com.show.greenbill_G) application 2.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Olleh
- CVE-2014-5891 MEDIUM · 5.4 The SnipSnap Coupon App (aka com.snipsnap.snipsnapapp) application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Snipsnap
- CVE-2014-5890 MEDIUM · 5.4 De KBO sports2i 2014 (ook bekend als com.sports2i) applicatie 5.1.00 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Sports2i
- CVE-2014-5889 MEDIUM · 5.4 The Android Forums (aka com.tapatalk.androidforumscom) application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Androidforums