VYPR

CVEs

355,873 total · page 5836 of 7,118

AllCriticalHighKEV
  • CVE-2014-5985Sep 20, 2014
    Topappsbuilder Project
    Animal Kaiser Zangetsu
    risk 0.00cvss —epss 0.00

    The Animal Kaiser Zangetsu (aka com.wAnimalKaiserZangetsu) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5981Sep 20, 2014
    Moweather
    Moweather
    risk 0.00cvss —epss 0.00

    The MoWeather (aka com.moji.moweather) application 1.40.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5980Sep 20, 2014
    Genertel
    Genertel
    risk 0.00cvss —epss 0.00

    The Genertel (aka com.genertel) application 2.6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5979Sep 20, 2014
    Tvbengali
    Tv Bengali Open Directory
    risk 0.00cvss —epss 0.00

    The TV Bengali Open Directory (aka com.TVBengali) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5978Sep 20, 2014
    Memetan
    memetan (aka memetan.android.com.activity)
    risk 0.00cvss —epss 0.00

    The memetan (aka memetan.android.com.activity) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5977Sep 20, 2014
    Mobile Face Project
    Mobile Face
    risk 0.00cvss —epss 0.00

    The Mobile Face (aka com.wFacemobile) application 0.74.13432.91159 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5976Sep 20, 2014
    Alibaba
    Alibaba
    risk 0.00cvss —epss 0.00

    The alibaba (aka com.alibaba.wireless) application 4.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5975Sep 20, 2014
    Anddeveloper
    eponyms
    risk 0.00cvss —epss 0.00

    The eponyms (aka com.anddeveloper.eponyms) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5974Sep 20, 2014
    Vertifi
    PSECU Mobile+
    risk 0.00cvss —epss 0.00

    The PSECU Mobile+ (aka com.Vertifi.Mobile.P231381116) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5973Sep 20, 2014
    Socialknowledge
    Aquarium Advice
    risk 0.00cvss —epss 0.00

    The Aquarium Advice (aka com.socialknowledge.aquariumadvice) application 3.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5972Sep 20, 2014
    Loving.fm
    Loving Couple Essential
    risk 0.00cvss —epss 0.00

    The Loving - Couple Essential (aka com.xiaoenai.app) application 4.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-3379Sep 20, 2014
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.01

    Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.

  • CVE-2014-3378Sep 20, 2014
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet, aka Bug ID CSCum00468.

  • CVE-2014-3377Sep 20, 2014
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.01

    snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet, aka Bug ID CSCun67791.

  • CVE-2014-3376Sep 20, 2014
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID CSCuq12031.

  • CVE-2014-3367Sep 20, 2014
    Cisco Systems, Inc.
    Cisco Nexus 1000v Intercloud
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524.

  • CVE-2014-0992Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter.

  • CVE-2014-0991Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter.

  • CVE-2014-0990Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter.

  • CVE-2014-0989Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter.

  • CVE-2014-0988Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter.

  • CVE-2014-0987Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter.

  • CVE-2014-0986Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter.

  • CVE-2014-0985Sep 20, 2014
    Advantech
    Webaccess
    risk 0.00cvss —epss 0.03

    Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter.

  • CVE-2014-3614Sep 19, 2014
    PowerDNS
    Recursor
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in PowerDNS Recursor (aka pdns_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service (crash) via an unknown sequence of malformed packets.

  • CVE-2012-6659Sep 19, 2014
    Phorum
    Phorum
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

  • CVE-2012-2588Sep 19, 2014
    MailEnable
    Mailenable
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.

  • CVE-2014-5970Sep 19, 2014
    Babybus
    Babybus
    risk 0.00cvss —epss 0.00

    The BabyBus (aka com.sinyee.babybus.concert.ru) application 3.91 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5969Sep 19, 2014
    Aleksander Grzyb
    healthylifestyle
    risk 0.00cvss —epss 0.00

    The healthylifestyle (aka com.alek.healthylifestyle) application 1.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5968Sep 19, 2014
    Igolf
    iGolf
    risk 0.00cvss —epss 0.00

    The iGolf - Golf GPS (aka com.igolf) application 20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5967Sep 19, 2014
    Decoracionesnailart
    Designs Nail Arts
    risk 0.00cvss —epss 0.01

    The Designs Nail Arts (aka com.decoracionesnailart.flickr) application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5966Sep 19, 2014
    Golauncher
    Dreamland Super Theme Go Gold
    risk 0.00cvss —epss 0.00

    The Dreamland Super Theme GO Gold (aka com.gau.go.launcherex.viptheme.dreamland.gold) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted…

  • CVE-2014-5965Sep 19, 2014
    Mobincube
    GrooveMusic
    risk 0.00cvss —epss 0.00

    The GrooveMusic (aka com.mobincube.android.sc_2HKFF) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5964Sep 19, 2014
    Megabank
    Megabank
    risk 0.00cvss —epss 0.00

    The MegaBank (aka com.megabank.mobilebank) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5963Sep 19, 2014
    Corntree
    Halieutics
    risk 0.00cvss —epss 0.00

    The Halieutics (aka com.corn.Halieutics) application 21.40.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5962Sep 19, 2014
    Gamelikeapps
    Guess The Actor
    risk 0.00cvss —epss 0.00

    The Guess The Actor (aka com.gamelikeinc.actors) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5961Sep 19, 2014
    Hdcar
    Russiananime
    risk 0.00cvss —epss 0.00

    The russiananime (aka com.rareartifact.russiananime68A5CCFE) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5960Sep 19, 2014
    Kbv
    Federal Doctors
    risk 0.00cvss —epss 0.00

    The BundesArztsuche (aka de.kbv.bas) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5959Sep 19, 2014
    Mytx
    Tx Smart
    risk 0.00cvss —epss 0.00

    The tx Smart (aka com.wooriwm.txsmart) application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5958Sep 19, 2014
    Chatbox
    Chatbox Chat Rooms
    risk 0.00cvss —epss 0.00

    The ChatBox - Chat Rooms (aka com.droidchatroom.messengerapp) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-4424Sep 19, 2014
    Apple Inc.
    Wiki Server
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2014-4416Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability…

  • CVE-2014-4406MedSep 19, 2014
    Apple Inc.
    Xcode Server
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2014-4403Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information and bypass the ASLR protection mechanism by leveraging predictability of the location of the CPU Global Descriptor Table.

  • CVE-2014-4402Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.03

    An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

  • CVE-2014-4401Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability…

  • CVE-2014-4400Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability…

  • CVE-2014-4399Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability…

  • CVE-2014-4398Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability…

  • CVE-2014-4397Sep 19, 2014
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability…