CVE-database
133.515 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5563 MEDIUM · 5.4 The Show do Milhao 2014 (aka br.com.lgrmobile.sdm) application 1.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Show Do Milhao 2014 Project
- CVE-2014-5562 MEDIUM · 5.4 De Coles Credit Card App (aka au.com.colesfinancialservices.mobile) applicatie 1.0.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waarmee man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Coles Credit Cards
- CVE-2014-5561 MEDIUM · 5.4 The Word Search Free (aka air.wordSearchFree) application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Devarai
- CVE-2014-5560 MEDIUM · 5.4 De Popscene (Music Industry Sim) (ook bekend als Air.Popscene) -applicatie 1.04 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Mdickie
- CVE-2014-5559 MEDIUM · 5.4 De applicatie Kids GoldFish Care (aka air.josiane.sauveterre.kidsgoldfishcare) 1.0.3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Josiane Sauveterre
- CVE-2014-5558 MEDIUM · 5.4 De applicatie Hard Time (Prison Sim) (ook bekend als air.HardTime) 1.111 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Mdickie
- CVE-2014-5557 MEDIUM · 5.4 De applicatie America's Economy for Phone (ook bekend als air.gov.census.mobile.phone.americaseconomy) 1.5.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige… Commerce
- CVE-2014-5556 MEDIUM · 5.4 The Fly Fishing & Fly Tying (aka air.com.yudu.ReaderAIR3209899) application 3.21.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Flyfishing-and-flytying
- CVE-2014-5555 MEDIUM · 5.4 The Counting & Addition Kids Games (aka air.com.tribalnova.ilearnwith.ipad.PokoAddEn) application 1.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Ilearnwith
- CVE-2014-5554 MEDIUM · 5.4 The Fun Preschool Creativity Game (aka air.com.tribalnova.ilearnwith.ipad.MotherAppEn) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Ilearnwith
- CVE-2014-5553 MEDIUM · 5.4 De applicatie Kids Preschool Learning Games (aka air.com.tribalnova.ilearnwith.ipad.App3En) 1.3.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Ilearnwith
- CVE-2014-5552 MEDIUM · 5.4 The Numbers & Addition! Math games (aka air.com.tribalnova.ilearnwith.ipad.App2En) application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Ilearnwith
- CVE-2014-5551 MEDIUM · 5.4 The Alphabet & Spelling Kids Games (aka air.com.tribalnova.ilearnwith.ipad.App1En) application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Ilearnwith
- CVE-2014-5550 MEDIUM · 5.4 The Animals! Kids Preschool Games (aka air.com.tribalnova.Animals) application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Ilearnwith
- CVE-2014-5549 MEDIUM · 5.4 De Puppy Slots (ook bekend als air.com.starluxstudios.PuppySlotsFree) applicatie 3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Starluxstudios
- CVE-2014-5548 MEDIUM · 5.4 The Christmas Words (aka air.com.sevenBulls.summerWords) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Seven Bulls
- CVE-2014-5547 MEDIUM · 5.4 The Mahjong Galaxy Space Lite (aka air.com.permadi.mahjongIris) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Permadi
- CVE-2014-5546 MEDIUM · 5.4 De applicatie Africa Memory (ook bekend als air.com.klon4enabor4e.AfricaMemory) 1.0.1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Little Games
- CVE-2014-5545 MEDIUM · 5.4 De Sprint Jump (ook bekend als air.com.ilaz.appilas) applicatie 1 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen… Torrnad0
- CVE-2014-5544 MEDIUM · 5.4 De SongPop (aka air.com.freshplanet.games.WaM) -applicatie 1.21.2 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een… Freshplanet
- CVE-2014-5543 MEDIUM · 5.4 The Hidden Object - Alice Free (aka air.com.differencegames.hovisionsofalicefree) application 1.0.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Differencegames
- CVE-2014-5542 MEDIUM · 5.4 The Hidden Object Mystery (aka air.com.differencegames.hodetectivemysteryfree) application 1.0.65 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Tamalaki
- CVE-2014-5541 MEDIUM · 5.4 The Hidden Memory - Aladdin FREE! (aka air.com.differencegames.hmaladdinfree) application 1.0.31 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to… Differencegames
- CVE-2014-5540 MEDIUM · 5.4 De Flick a Trade (ook bekend als air.com.cygnecode.fat) -applicatie 3.3 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Flickatrade
- CVE-2014-5539 MEDIUM · 5.4 The Michael Baker FCU (aka air.com.creditunionhomebanking.mb155) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Amiscu
- CVE-2014-5538 MEDIUM · 5.4 De Westmoreland Water FCU (aka air.com.creditunionhomebanking.mb115) applicatie 1.2.0 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Amiscu
- CVE-2014-5537 MEDIUM · 5.4 De applicatie Abduction Stacker Free (ook bekend als air.com.chewygames.abductionstacker2) 1.0.7 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Chewysoftware
- CVE-2014-5536 MEDIUM · 5.4 The Bingo Bash - Free Bingo Casino (aka air.com.bitrhymes.bingo) application 1.31.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Bashgaming
- CVE-2014-5535 MEDIUM · 5.4 The Baby Get Up - Kids Care (aka air.brown.jordansa.getup) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Girlgame
- CVE-2014-5534 MEDIUM · 5.4 The Princess Shopping (aka air.android.PrincessShopping) application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Appministry
- CVE-2014-5532 MEDIUM · 5.4 The Honolulu (aka adidas.jp.android.running.honolulu) application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Adidas
- CVE-2014-5531 MEDIUM · 5.4 The Abode (aka abode.webview) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Goabode
- CVE-2014-5529 MEDIUM · 5.4 De Gameloft-bibliotheek voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een vervaardigd certificaat. Gameloft
- CVE-2014-5528 MEDIUM · 5.4 The Appsflyer library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Appsflyer
- CVE-2014-5527 MEDIUM · 5.4 De Tapjoy-bibliotheek voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een vervaardigd certificaat. Tapjoy
- CVE-2014-5526 MEDIUM · 5.4 The Inmobi library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Inmobi
- CVE-2014-5525 MEDIUM · 5.4 The MoMinis library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Playscape
- CVE-2014-5524 MEDIUM · 5.4 The Adcolony library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via… Adcolony
- CVE-2014-5464 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitrary web script or… Ntop
- CVE-2014-5369 MEDIUM · 4.3 Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive… Enigmail
- CVE-2014-3618 HIGH · 7.5 Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… Procmail Canonical
- CVE-2014-0153 MEDIUM · 4.3 De REST API in oVirt 3.4.0 en eerder slaat sessie-ID's op in HTML5 lokale opslag, waarmee externe aanvallers gevoelige informatie kunnen verkrijgen via een vervaardigde… Ovirt
- CVE-2014-0152 MEDIUM · 6.8 Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Ovirt Redhat
- CVE-2014-5256 MEDIUM · 5.0 Node.js 0.8 vóór 0.8.28 en 0.10 vóór 0.10.30 houdt geen rekening met de mogelijkheid van recursieve verwerking die V8-afvalverzameling activeert in combinatie met een V8-interrupt,… Nodejs
- CVE-2014-4863 MEDIUM · 5.0 The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and… Arris
- CVE-2014-4862 MEDIUM · 5.0 The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID… Netmaster
- CVE-2014-3910 MEDIUM · 4.4 Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named… Emurasoft
- CVE-2014-3909 MEDIUM · 6.8 Session fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Falconsc
- CVE-2014-2379 MEDIUM · 4.3 Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not use encryption, which allows remote attackers to interfere with traffic… Sensysnetworks
- CVE-2014-2378 MEDIUM · 6.5 Sensys Networks VSN240-F and VSN240-T sensors VDS before 2.10.1 and TrafficDOT before 2.10.3 do not verify the integrity of downloaded updates, which allows remote attackers… Sensysnetworks