CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6233 HIGH · 7.5 SQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Flat Manager Project
- CVE-2014-6232 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in de LDAP-extensie (eu_ldap) vóór 2.8.18 voor TYPO3 stelt op afstand geverifieerde gebruikers in staat om gevoelige informatie te verkrijgen via onbekende vectoren. Ldap Project
- CVE-2014-6231 HIGH · 7.5 Unspecified vulnerability in the CWT Frontend Edit (cwt_feedit) extension before 1.2.5 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors. Cwt Frontend Edit Project
- CVE-2014-6070 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web script or HTML via the hostname in (1)… Adiscon
- CVE-2014-5519 HIGH · 7.5 The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to… Phpwiki Project
- CVE-2014-2223 HIGH · 7.5 Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to execute arbitrary code by uploading a ZIP file… Plogger
- CVE-2012-4240 MEDIUM · 6.5 SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter. Group-office
- CVE-2012-0984 MEDIUM · 4.3 Meerdere XSS-kwetsbaarheden (cross-site scripting) in XOOPS vóór 2.5.5 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) to_userid-parameter naar… Xoops
- CVE-2011-4887 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Violations Table in de management GUI in de MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0… Imperva
- CVE-2014-5878 MEDIUM · 5.4 De ium (aka net.ium.mobile.android) applicatie 3.3.4 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… I-um
- CVE-2014-5877 MEDIUM · 5.4 The TV Guide (aka net.micene.minigroup.palimpsests.lite) application 5.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Mini Group
- CVE-2014-5876 MEDIUM · 5.4 The WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Westerndigital
- CVE-2014-5875 MEDIUM · 5.4 De Sylphone (ook bekend als com.sylpheo.prospectosyl) -applicatie 5.3.8 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Sylpheo
- CVE-2014-5874 MEDIUM · 5.4 The SplashID (aka com.splashidandroid) application 7.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Splashid
- CVE-2014-5873 MEDIUM · 5.4 The Sears (aka com.sears.android) application 6.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Sears
- CVE-2014-5872 MEDIUM · 5.4 The SafeNetMobile Pass (aka securecomputing.devices.android.controller) application 8.3.7.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Safenet-inc
- CVE-2014-5871 MEDIUM · 5.4 The Piwik Mobile 2 (aka org.piwik.mobile2) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Piwik
- CVE-2014-5870 MEDIUM · 5.4 The Kmart (aka com.kmart.android) application 6.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Kmart
- CVE-2014-5869 MEDIUM · 5.4 The CNNMoney Portfolio (aka com.cnn.cnnmoney) application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Cnn
- CVE-2014-5868 MEDIUM · 5.4 The Cisco Technical Support (aka com.cisco.swtg_android) application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Cisco
- CVE-2014-5867 MEDIUM · 5.4 The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Sparkpay
- CVE-2014-5866 MEDIUM · 5.4 De CA dmv (ook bekend als gov.ca.dmv) applicatie 2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Dmv.ca.gov
- CVE-2014-5865 MEDIUM · 5.4 The Ask.com (aka com.ask.android) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Ask
- CVE-2014-5864 MEDIUM · 5.4 De Swish-betalingen (ook bekend als se.bankgirot.swish) applicatie 2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Getswish
- CVE-2014-5863 MEDIUM · 5.4 De mpang.gp (ook bekend als air.com.cjenm.mpang.gp) -applicatie 4.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Netmarble
- CVE-2014-2624 HIGH · 10.0 Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264. Hp
- CVE-2014-4865 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in gui/password-wadmin.apl in CacheGuard OS 5.7.7 stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te kapen. Cacheguard
- CVE-2014-0351 MEDIUM · 5.4 The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on FortiGate devices does not prevent use of anonymous ciphersuites, which makes… Fortinet
- CVE-2014-6074 MEDIUM · 4.0 IBM UrbanCode Deploy 6.1.0.2 before IF1 staat op afstand geverifieerde gebruikers toe om geheime sleutels te lezen via een directe aanvraag naar een UI-pagina. Ibm
- CVE-2014-5862 MEDIUM · 5.4 The ecalendar2 (aka cn.etouch.ecalendar2) application 4.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Zhwnl
- CVE-2014-5861 MEDIUM · 5.4 The BoyAhoy - Gay Chat (aka com.boyahoy.android) application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Skout
- CVE-2014-5860 MEDIUM · 5.4 The Slide Show Creator (aka com.amem) application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Aximediasoft
- CVE-2014-5859 MEDIUM · 5.4 The Star Girl: Colors of Spring (aka com.animoca.google.starGirlSpring) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Animoca
- CVE-2014-5858 MEDIUM · 5.4 The Candy Blast (aka com.appgame7.candyblast) application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Candy Blast Project
- CVE-2014-5857 MEDIUM · 5.4 The White & Yellow Pages (aka com.avantar.wny) application 5.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Avantar
- CVE-2014-5313 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to inject arbitrary web script or… Sixapart
- CVE-2014-4864 LOW · 3.3 The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a… Netgear
- CVE-2014-4789 MEDIUM · 6.8 Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers… Ibm
- CVE-2014-4788 MEDIUM · 5.0 IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not have an off autocomplete attribute… Ibm
- CVE-2014-4787 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote… Ibm
- CVE-2014-4786 MEDIUM · 4.9 IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME… Ibm
- CVE-2014-4785 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows… Ibm
- CVE-2014-4784 MEDIUM · 4.3 IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME… Ibm
- CVE-2014-4783 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in IBM Initiate Master Data Service 9.5 vóór 9.5.093013, 9.7 vóór 9.7.093013, 10.0 vóór 10.0.093013 en 10.1 vóór 10.1.093013 stelt… Ibm
- CVE-2014-4756 LOW · 3.5 Met de Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x vóór 8.1.4.4 kunnen op afstand geverifieerde gebruikers sessies kapen via niet-gespecificeerde… Ibm
- CVE-2014-3348 MEDIUM · 5.0 The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause… Cisco
- CVE-2014-3343 MEDIUM · 4.3 Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packet, aka Bug ID CSCuo59052. Cisco
- CVE-2014-3179 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google
- CVE-2014-3178 HIGH · 7.5 Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause a denial of service or possibly have… Google
- CVE-2014-3079 LOW · 2.1 The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit… Ibm