Vulnerability index

Browse CVEs

2,155 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cryptographic IssuesCWE-310 × clear
Network Data Loss Prevention MEDIUM 6.5
CVE-2014-8531

The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticat…

Fix: after 9.2.2
Fix from $1,600 2014-10-29
Ubuntu Linux MEDIUM 6.4
CVE-2014-3694

The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the B…

Fix: after 2.10.9
Fix from $1,600 2014-10-29
Big Ip Analytics HIGH 7.5
CVE-2013-7408

F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by gu…

No fix yet
Fix from $1,950 2014-10-26
Jboss Fuse MEDIUM 6.8
CVE-2014-5075

The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname match…

Fix: after 6.1.0
Fix from $1,600 2014-10-25
Ejabberd MEDIUM 5.0
CVE-2014-8760

ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without…

Fix: after 2.1.12
Fix from $1,600 2014-10-25
Not Yet Commons Ssl MEDIUM 6.8
CVE-2014-3604

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Commo…

Fix: after 0.3.14
Fix from $1,600 2014-10-25
Virtual Desktop Service Manager MEDIUM 5.0
CVE-2014-7968

VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.

Mitigation only
Fix from $1,600 2014-10-22
Iphone Os MEDIUM 6.8
CVE-2014-4449

iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof ser…

Fix: after 8.0.2
Fix from $1,600 2014-10-22
Backyard Wrestling MEDIUM 5.4
CVE-2014-7791

The Backyard Wrestling (aka com.wBackyardWrestling) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man…

Mitigation only
Fix from $1,600 2014-10-21
Cb Calciatori Brutti MEDIUM 5.4
CVE-2014-7793

The CB - Calciatori Brutti (aka com.calciatori.brutti) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows …

Mitigation only
Fix from $1,600 2014-10-21
Knights Of The Void MEDIUM 5.4
CVE-2014-7794

The Knights of the Void (aka me.narr8.android.serial.knights_of_the_void) application 2.1.7 for Android does not verify X.509 certificates from SSL s…

Mitigation only
Fix from $1,600 2014-10-21
Harpers Bazaar Art MEDIUM 5.4
CVE-2014-7795

The Harpers Bazaar Art (aka com.itp.harpersart) application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows m…

Mitigation only
Fix from $1,600 2014-10-21
House365 Radio MEDIUM 5.4
CVE-2014-7796

The House365 Radio (aka com.nobexinc.wls_27853803.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows…

Mitigation only
Fix from $1,600 2014-10-21
Thai Food MEDIUM 5.4
CVE-2014-7797

The Thai food (aka com.foods.thaifood) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl…

Mitigation only
Fix from $1,600 2014-10-21
Coca Cola Fm Brasil MEDIUM 5.4
CVE-2014-7798

The Coca-Cola FM Brasil (aka com.enyetech.radio.coca_cola.fm_br) application 2.0.41709 for Android does not verify X.509 certificates from SSL server…

Mitigation only
Fix from $1,600 2014-10-21
Squishy Birds MEDIUM 5.4
CVE-2014-7799

The Squishy birds (aka com.tatmob.squishybirds) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i…

Mitigation only
Fix from $1,600 2014-10-21
Daily Green MEDIUM 5.4
CVE-2014-7800

The Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which all…

Mitigation only
Fix from $1,600 2014-10-21
Top Roller Coasters Europe 2 MEDIUM 5.4
CVE-2014-7802

The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2) application @7F050001 for Android does not verify X.509 certi…

Mitigation only
Fix from $1,600 2014-10-21
Woodward Bail MEDIUM 5.4
CVE-2014-7803

The Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, whic…

Mitigation only
Fix from $1,600 2014-10-21
Gangsta Auto Thief Iii MEDIUM 5.4
CVE-2014-7804

The Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allo…

Mitigation only
Fix from $1,600 2014-10-21
Cleveland Football Stream MEDIUM 5.4
CVE-2014-7773

The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android does not verify X.509 certificates from S…

Mitigation only
Fix from $1,600 2014-10-21
Herbs \& Flowers Dictionary MEDIUM 5.4
CVE-2014-7774

The Herbs & Flowers Dictionary (aka com.wHerbsNFlowersDictionary) application 0.1 for Android does not verify X.509 certificates from SSL servers, wh…

Mitigation only
Fix from $1,600 2014-10-21
Champak Hindi MEDIUM 5.4
CVE-2014-7775

The Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows ma…

Mitigation only
Fix from $1,600 2014-10-21
Kavita Ks MEDIUM 5.4
CVE-2014-7776

The Kavita KS (aka com.snaplion.kavitaks) application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mi…

Mitigation only
Fix from $1,600 2014-10-21
Slingshot Forum MEDIUM 5.4
CVE-2014-7777

The Slingshot Forum (aka com.tapatalk.theslingshotforumcom) application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which…

Mitigation only
Fix from $1,600 2014-10-21
Epc World MEDIUM 5.4
CVE-2014-7778

The Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid…

Mitigation only
Fix from $1,600 2014-10-21
Kuran\'in Bilimsel Mucizeleri MEDIUM 5.4
CVE-2014-7779

The Kuran'in Bilimsel Mucizeleri (aka com.wKurannBilimselMucizeleri) application 0.1 for Android does not verify X.509 certificates from SSL servers,…

Mitigation only
Fix from $1,600 2014-10-21
Pakistan Cricket News MEDIUM 5.4
CVE-2014-7780

The Pakistan Cricket News (aka com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app) application 1.21.38.6504 for Android does not verify X.509 certi…

Mitigation only
Fix from $1,600 2014-10-21
Marijuana Handbook Lite Weed MEDIUM 5.4
CVE-2014-7781

The Marijuana Handbook Lite - Weed (aka com.fallacystudios.marijuanahandbooklite) application 3.2 for Android does not verify X.509 certificates from…

Mitigation only
Fix from $1,600 2014-10-21
Macedonia Hacienda Hotel MEDIUM 5.4
CVE-2014-7782

The Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for Android does not verify X.509 certificates from SSL…

Mitigation only
Fix from $1,600 2014-10-21