Lucene search
+L

190 matches found

The Hacker News
The Hacker News
added 2015/10/02 10:6 p.m.14 views

How to Freeze Credit Report To Protect Yourself Against Identity Theft

If your Social Security number gets hacked in any data breaches, including recently hacked T-Mobile, then there's a way to prevent hackers from misusing your identity i.e. identity theft. The solution here is that you can institute a security freeze at each of the three credit bureaus, Equifax,...

6.8AI score
SaveExploits0
NVD
NVD
added 2014/10/02 10:55 a.m.18 views

CVE-2014-6879

The Equifax Mobile aka com.equifax application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
added 2014/10/02 10:55 a.m.19 views

Information disclosure

The Equifax Mobile aka com.equifax application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.5AI score0.00266EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2014/10/02 10:0 a.m.50 views

CVE-2014-6879

The CVE-2014-6879 entry concerns the Equifax Mobile app (com.equifax) for Android, version 1.5. The authenticated description states that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/10/02 10:0 a.m.27 views

CVE-2014-6879

The Equifax Mobile aka com.equifax application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2013/12/13 3:4 p.m.22 views

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

2.5AI score
SaveExploits0References2
ThreatPost
ThreatPost
added 2013/03/14 1:18 a.m.10 views

Top Credit Agencies Admit Celebrities' Data Stolen

The top credit bureaus have admitted someone accessed prominent Americans’ private data by filling out bogus requests via a Web site used by millions of consumers to access free annual credit reports. “We are aware of recent media reports pertaining to unauthorized access to files belonging to...

0.7AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2012/12/03 8:25 a.m.15 views

Sensitive information of 1 Million people breached at Nationwide Insurance

Nationwide Insurance was breached last week and Sensitive information of about 1 Million people is at risk. The FBI is investigating a breach, including policy and non-policy holders. Nationwide mailed notices to all affected individuals last Friday. Insurance Commissioner Ralph Hudgens issued th...

6.7AI score
SaveExploits0
securityvulns
securityvulns
added 2008/09/24 12:0 a.m.47 views

Aruba Mobility Controller Shared Default Certificate

Aruba Mobility Controller Shared Default Certificate Product: Aruba Mobility Controller http://www.arubanetworks.com/products/mobilitycontrollers.php Aruba mobility controllers use X.509 certificates to protect access to the web management interface and to provide secure wireless authentication,...

1.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/10/20 12:0 a.m.31 views

SUSE-SA:2005:061: openssl

The remote host is missing the patch for the advisory SUSE-SA:2005:061 openssl. The openssl cryptographic libraries have been updated to fix a protocol downgrading attack which allows a man-in-the-middle attacker to force the usage of SSLv2. This happens due to the work-around code of...

5CVSS6.6AI score0.04866EPSS
SaveExploits0
Rows per page
Query Builder