Menu

Star on GitHub · 3.2k

2014

7,937 vulnerabilities published in 2014.

Results

7,937· Page 53/159
5.4
CVE-2014-6825

The Teatro Franco Parenti (aka com.mintlab.mx.teatroparenti) application 1.4.0 for Android does not verify X.509 certifi

5.4
CVE-2014-6824

The kamkomesan (aka com.anek.kamkomesan) application 1.0 for Android does not verify X.509 certificates from SSL servers

5.4
CVE-2014-6823

The kuailecaidengmi (aka com.licai.kuailecaidengmi) application 1.7.12.15 for Android does not verify X.509 certificates

5.4
CVE-2014-6822

The Nerdico (aka com.nerdico.danielepais) application 1.9 Stable for Android does not verify X.509 certificates from SSL

5.4
CVE-2014-6821

The voetbal (aka nl.jborsje.android.voetbal.az) application 4.7.2 for Android does not verify X.509 certificates from SS

5.4
CVE-2014-6820

The Amebra Ameba (aka jp.honeytrap15.amebra) application 1.0.0 for Android does not verify X.509 certificates from SSL s

5.4
CVE-2014-6819

The Lapp Group Catalogue (aka com.prinovis.LappKabel) application 1.4 for Android does not verify X.509 certificates fro

5.4
CVE-2014-6818

The OHBM 20th Annual Meeting (aka com.coreapps.android.followme.ohbm2014) application 6.0.9.2 for Android does not verif

5.4
CVE-2014-6817

The Cove (aka org.covechurch.app) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, whi

5.4
CVE-2014-6816

The WISDOM (aka lvtu99.com.nescmxiaoniuniu) application 2.1 for Android does not verify X.509 certificates from SSL serv

5.4
CVE-2014-6815

The Vouch! (aka com.voucherry.voucherry) application 2.1.6 for Android does not verify X.509 certificates from SSL serve

5.4
CVE-2014-6814

The Sentinels Randomizer (aka com.mikehipps.sentinelsrandomizer) application 1.1.0 for Android does not verify X.509 cer

5.4
CVE-2014-6813

The klassens (aka com.mcreda.klassens.apps) application 1.0 for Android does not verify X.509 certificates from SSL serv

5.4
CVE-2014-6812

The Aloha Guide (aka com.aloha.guide.english) application 1.5 for Android does not verify X.509 certificates from SSL se

5.4
CVE-2014-6810

The RIMS 2014 Annual Conference (aka com.coreapps.android.followme.rims2014) application 6.0.7.4 for Android does not ve

5.4
CVE-2014-6808

The Active 24 (aka com.zentity.app.active24) application 1.0.1 for Android does not verify X.509 certificates from SSL s

5.4
CVE-2014-6807

The OLA School (aka com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) application 1.2.7.132 for Android does not ver

5.4
CVE-2014-6806

The Thanodi - Setswana Translator (aka com.thanodi.thanodi) application 1.0.0 for Android does not verify X.509 certific

5.4
CVE-2014-6805

The weibo (aka magic.weibo) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allow

8.8
CVE-2014-6278KEV

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

8.8
CVE-2013-3632

The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users

8.3
CVE-2013-3092

The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors rela

6.8
CVE-2013-3089

Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers t

6.8
CVE-2013-3086

Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hij

6.8
CVE-2013-3083

Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attac

6.8
CVE-2013-3068

Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hij

7.1
CVE-2013-3066

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain se

3.5
CVE-2013-3065

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876

6.8
CVE-2013-3064

Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote att

4.3
CVE-2013-2586

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp

9.3
CVE-2013-2100

The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 c

4.4
CVE-2013-1874

Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Tr

2.1
CVE-2012-6110

bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job,

4.3
CVE-2012-6107

Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subje

5.0
CVE-2012-5621

lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (cra

2.1
CVE-2012-5619

The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file

4.3
CVE-2014-3824

Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) de

4.3
CVE-2014-3823

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1

4.3
CVE-2014-3820

Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service

7.2
CVE-2014-3811

Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local use

5.4
CVE-2014-6804

The Deschutes Public MobileLibrary (aka com.bredir.boopsie.deschutes) application 4.5.110 for Android does not verify X.

5.4
CVE-2014-6803

The Bank of Moscow EIRTS Rent (aka ru.bm.rbs.android) application 1.0.0 for Android does not verify X.509 certificates f

5.4
CVE-2014-6802

The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify X

5.4
CVE-2014-6801

The frank matano (aka com.frank.matano) application 1.0 for Android does not verify X.509 certificates from SSL servers,

5.4
CVE-2014-6800

The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X.509 certificates fro

5.4
CVE-2014-6799

The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.509 certificates from

5.4
CVE-2014-6798

The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.509 certificates from

5.4
CVE-2014-6797

The Abu Ali Anasheeds (aka com.faapps.abuali_anasheeds) application 1.1 for Android does not verify X.509 certificates f

5.4
CVE-2014-6796

The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, w

5.4
CVE-2014-6795

The Beekeeping Forum (aka com.tapatalk.supporttapatalkcomxxxxx) application 3.9.15 for Android does not verify X.509 cer

Test your stack for 2014issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.