VYPR

CVEs

391,038 total · page 6534 of 7,821

AllCriticalHighKEV
  • CVE-2014-3823Sep 29, 2014
    Juniper Networks
    Junos Pulse Secure Access Service
    risk 0.00cvss —epss 0.01

    The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

  • CVE-2014-3820Sep 29, 2014
    Juniper Networks
    Junos Pulse Secure Access Service
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS…

  • CVE-2014-3811Sep 29, 2014
    Juniper Networks
    Junos Pulse Client
    risk 0.00cvss —epss 0.00

    Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors.

  • CVE-2014-6804Sep 29, 2014
    Boopsie
    Deschutes Public Mobilelibrary
    risk 0.00cvss —epss 0.00

    The Deschutes Public MobileLibrary (aka com.bredir.boopsie.deschutes) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6803Sep 29, 2014
    Bm
    Bank Of Moscow Eirts Rent
    risk 0.00cvss —epss 0.00

    The Bank of Moscow EIRTS Rent (aka ru.bm.rbs.android) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6802Sep 29, 2014
    Subsplash
    First Assembly Nlr
    risk 0.00cvss —epss 0.00

    The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6801Sep 29, 2014
    Frank Matano Project
    Frank Matano
    risk 0.00cvss —epss 0.00

    The frank matano (aka com.frank.matano) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6800Sep 29, 2014
    Parentlink
    Bloom Township 206
    risk 0.00cvss —epss 0.00

    The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6799Sep 29, 2014
    Broadcom Corporation
    Investigation Tool
    risk 0.00cvss —epss 0.00

    The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6798Sep 29, 2014
    Weeverapps
    Mcmaster Marauders
    risk 0.00cvss —epss 0.00

    The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6797Sep 29, 2014
    Abu Ali Anasheeds Project
    Abu Ali Anasheeds
    risk 0.00cvss —epss 0.00

    The Abu Ali Anasheeds (aka com.faapps.abuali_anasheeds) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6796Sep 29, 2014
    Localsense
    Localsense
    risk 0.00cvss —epss 0.00

    The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6795Sep 29, 2014
    Gcspublishing
    Beekeeping Forum
    risk 0.00cvss —epss 0.00

    The Beekeeping Forum (aka com.tapatalk.supporttapatalkcomxxxxx) application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6794Sep 29, 2014
    Boopsie
    Aapld
    risk 0.00cvss —epss 0.00

    The AAPLD (aka com.bredir.boopsie.aapld) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6793Sep 29, 2014
    Arch Friend
    Arch Friend
    risk 0.00cvss —epss 0.00

    The Arch Friend (aka com.xyproto.archfriend) application 0.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6792Sep 29, 2014
    Suriname Radio Project
    Suriname Radio
    risk 0.00cvss —epss 0.00

    The Suriname Radio (aka com.wordbox.surinameRadio) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6791Sep 29, 2014
    Angel Reigns
    Angel Reigns
    risk 0.00cvss —epss 0.00

    The Angel Reigns (aka com.conduit.app_dab60e7bd60d4f23a14b3fb7357f9dcd.app) application 1.2.6.185 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6790Sep 29, 2014
    Keyinternet
    Invex
    risk 0.00cvss —epss 0.00

    The INVEX (aka com.mobilatolye.keyinternet) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6789Sep 29, 2014
    Bredir
    Anaheim Library 2Go!
    risk 0.00cvss —epss 0.00

    The Anaheim Library 2Go! (aka com.bredir.boopsie.anaheim) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6788Sep 29, 2014
    Oman News Project
    Oman News
    risk 0.00cvss —epss 0.00

    The Oman News (aka com.oman.news.rmtzlnbuooordciw) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6787Sep 29, 2014
    Counterintuition
    Counter Intuition
    risk 0.00cvss —epss 0.00

    The Counter Intuition (aka com.counter.intuition) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6786Sep 29, 2014
    Tinytap
    Math For Kids Subtraction
    risk 0.00cvss —epss 0.00

    The Math for Kids - Subtraction (aka it.tinytap.attsa.deepsub) application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6785Sep 29, 2014
    Subsplash
    Renny Mclean Ministries
    risk 0.00cvss —epss 0.00

    The Renny McLean Ministries (aka com.subsplash.thechurchapp.s_GJQX72) application 2.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6784Sep 29, 2014
    Fermononrespiri
    Fermononrespiri Mobile
    risk 0.00cvss —epss 0.00

    The Fermononrespiri Mobile (aka com.tapatalk.rmonlineitforums) application 3.8.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6783Sep 29, 2014
    Campustv
    Campus Link Campus Tv Hkusu
    risk 0.00cvss —epss 0.00

    The Campus Link - Campus TV HKUSU (aka com.campus.tv.hkusu) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6782Sep 29, 2014
    Abrahamtours
    Abraham Tours
    risk 0.00cvss —epss 0.00

    The Abraham Tours (aka com.mytoursapp.android.app432) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6781Sep 29, 2014
    Mobilizedsolutions
    Aloha Stadium Hawaii
    risk 0.00cvss —epss 0.00

    The Aloha Stadium - Hawaii (aka com.stadium.aloha) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6780Sep 29, 2014
    Meitalk
    Meitalk
    risk 0.00cvss —epss 0.00

    The MeiTalk (aka com.playjia.meitalk) application @7F060012 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6779Sep 29, 2014
    Cart App
    Cart App
    risk 0.00cvss —epss 0.00

    The Cart App (aka com.virtecha.mobilewallet) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6778Sep 29, 2014
    Gcspublishing
    Goat Forum
    risk 0.00cvss —epss 0.00

    The Goat Forum (aka com.gcspublishing.goatspot) application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6777Sep 29, 2014
    Blueeleph Project
    Blueeleph
    risk 0.00cvss —epss 0.00

    The blueeleph (aka eg.film.blueeleph) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6776Sep 29, 2014
    Uanw
    United Advantage Nw Federal Cr
    risk 0.00cvss —epss 0.00

    The United Advantage NW Federal Cr (aka com.myappengine.uanwfcu) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6775Sep 29, 2014
    Animalcenter
    Light For Pets
    risk 0.00cvss —epss 0.00

    The Light for Pets (aka com.helenwoodward.light4pets) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6774Sep 29, 2014
    USEK
    USEK
    risk 0.00cvss —epss 0.00

    The USEK (aka com.university.usek) application 1.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6773Sep 29, 2014
    Bowenehs
    Cih Quiz Game
    risk 0.00cvss —epss 0.00

    The CIH Quiz game (aka com.bowenehs.cihquizgameapp) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6772Sep 29, 2014
    United Educational CU
    United Educational CU
    risk 0.00cvss —epss 0.00

    The United Educational CU (aka com.metova.cuae.uecu) application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-7187Sep 28, 2014
    GNU
    Bash
    risk 0.08cvss —epss 0.58

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the…

  • CVE-2014-7186Sep 28, 2014
    GNU
    Bash
    risk 0.08cvss —epss 0.64

    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack"…

  • CVE-2014-3535Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a…

  • CVE-2014-2639Sep 28, 2014
    Microfocus
    MPIO Device Specific Module Manager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors.

  • CVE-2014-0205Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a…

  • CVE-2014-7145Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.04

    The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS…

  • CVE-2014-6418Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.05

    net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph…

  • CVE-2014-6417Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.05

    net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a long unencrypted auth…

  • CVE-2014-6416Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.06

    Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.

  • CVE-2014-6410Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted…

  • CVE-2014-3631Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or…

  • CVE-2014-3186Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically proximate attackers to cause a denial of service (system crash) or…

  • CVE-2014-3185Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.01

    Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2014-3184Sep 28, 2014
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c,…