|
277871
|
- |
|
w88235ff7bdc2fb574f1789750ea99ed6_project
|
w88235ff7bdc2fb574f1789750ea99ed6
|
The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attac…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6682
|
2024-11-21 11:15 |
2014-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277872
|
- |
|
wordbox
|
mahabharata_audiocast
|
The Mahabharata Audiocast (aka com.wordbox.mahabharataAudiocast) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof ser…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6681
|
2024-11-21 11:15 |
2014-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277873
|
- |
|
superheroquiz_project
|
superheroquiz
|
The superheroquiz (aka com.davidhey.superheroquiz) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtai…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6680
|
2024-11-21 11:15 |
2014-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277874
|
- |
|
wepisdparentportal_project
|
wepisdparentportal
|
The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof server…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6679
|
2024-11-21 11:15 |
2014-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277875
|
- |
|
wordbox
|
algeria_radio
|
The Algeria Radio (aka com.wordbox.algeriaRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain …
|
CWE-310
Cryptographic Issues
|
CVE-2014-6678
|
2024-11-21 11:15 |
2014-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277876
|
7.5 |
HIGH
Network
|
zenoss debian
|
zenoss_core debian_linux
|
Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of s…
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2014-6262
|
2024-11-21 11:14 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277877
|
7.1 |
HIGH
Network
|
juniper
|
junos
|
Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS). This affects Juniper Junos OS 12.1X44 before …
|
CWE-79
Cross-site Scripting
|
CVE-2014-6447
|
2024-11-21 11:14 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277878
|
6.1 |
MEDIUM
Network
|
watchguard
|
fireware_xtm
|
A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script.
|
CWE-79
Cross-site Scripting
|
CVE-2014-6413
|
2024-11-21 11:14 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277879
|
7.8 |
HIGH
Local
|
juniper
|
junos
|
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access.
|
CWE-269
Improper Privilege Management
|
CVE-2014-6448
|
2024-11-21 11:14 |
2020-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277880
|
5.9 |
MEDIUM
Network
|
fusionforge debian
|
fusionforge debian_linux
|
FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it …
|
CWE-200
Information Exposure
|
CVE-2014-6275
|
2024-11-21 11:14 |
2020-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|