Browse CVEs

MEDIUM 6.5 CVE-2014-8531 The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticat… Network Data Loss Prevention after 9.2.2 Fix from $1,6002014-10-29 MEDIUM 6.4 CVE-2014-3694 The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the B… Ubuntu Linux after 2.10.9 Fix from $1,6002014-10-29 HIGH 7.5 CVE-2013-7408 F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by gu… Big Ip Analytics No fix yet Fix from $1,9502014-10-26 MEDIUM 6.8 CVE-2014-5075 The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname match… Jboss Fuse after 6.1.0 Fix from $1,6002014-10-25 MEDIUM 5.0 CVE-2014-8760 ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without… Ejabberd after 2.1.12 Fix from $1,6002014-10-25 MEDIUM 6.8 CVE-2014-3604 Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Commo… Not Yet Commons Ssl after 0.3.14 Fix from $1,6002014-10-25 MEDIUM 5.0 CVE-2014-7968 VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open. Virtual Desktop Service Manager Mitigation only Fix from $1,6002014-10-22 MEDIUM 6.8 CVE-2014-4449 iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof ser… Iphone Os after 8.0.2 Fix from $1,6002014-10-22 MEDIUM 5.4 CVE-2014-7791 The Backyard Wrestling (aka com.wBackyardWrestling) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man… Backyard Wrestling Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7793 The CB - Calciatori Brutti (aka com.calciatori.brutti) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows … Cb Calciatori Brutti Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7794 The Knights of the Void (aka me.narr8.android.serial.knights_of_the_void) application 2.1.7 for Android does not verify X.509 certificates from SSL s… Knights Of The Void Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7795 The Harpers Bazaar Art (aka com.itp.harpersart) application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows m… Harpers Bazaar Art Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7796 The House365 Radio (aka com.nobexinc.wls_27853803.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows… House365 Radio Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7797 The Thai food (aka com.foods.thaifood) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl… Thai Food Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7798 The Coca-Cola FM Brasil (aka com.enyetech.radio.coca_cola.fm_br) application 2.0.41709 for Android does not verify X.509 certificates from SSL server… Coca Cola Fm Brasil Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7799 The Squishy birds (aka com.tatmob.squishybirds) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i… Squishy Birds Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7800 The Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which all… Daily Green Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7802 The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2) application @7F050001 for Android does not verify X.509 certi… Top Roller Coasters Europe 2 Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7803 The Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, whic… Woodward Bail Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7804 The Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allo… Gangsta Auto Thief Iii Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7773 The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android does not verify X.509 certificates from S… Cleveland Football Stream Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7774 The Herbs & Flowers Dictionary (aka com.wHerbsNFlowersDictionary) application 0.1 for Android does not verify X.509 certificates from SSL servers, wh… Herbs \& Flowers Dictionary Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7775 The Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows ma… Champak Hindi Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7776 The Kavita KS (aka com.snaplion.kavitaks) application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mi… Kavita Ks Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7777 The Slingshot Forum (aka com.tapatalk.theslingshotforumcom) application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which… Slingshot Forum Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7778 The Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid… Epc World Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7779 The Kuran'in Bilimsel Mucizeleri (aka com.wKurannBilimselMucizeleri) application 0.1 for Android does not verify X.509 certificates from SSL servers,… Kuran\'in Bilimsel Mucizeleri Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7780 The Pakistan Cricket News (aka com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app) application 1.21.38.6504 for Android does not verify X.509 certi… Pakistan Cricket News Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7781 The Marijuana Handbook Lite - Weed (aka com.fallacystudios.marijuanahandbooklite) application 3.2 for Android does not verify X.509 certificates from… Marijuana Handbook Lite Weed Mitigation only Fix from $1,6002014-10-21 MEDIUM 5.4 CVE-2014-7782 The Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for Android does not verify X.509 certificates from SSL… Macedonia Hacienda Hotel Mitigation only Fix from $1,6002014-10-21