Lucene search
+L

8126 matches found

NVD
NVD
•added 2014/10/21 10:55 a.m.•17 views

CVE-2014-7659

The ExpeditersOnline.com Forum aka com.quoord.tapatalkeo.activity application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
•added 2014/10/21 10:55 a.m.•21 views

Design/Logic Flaw

The Slingshot Forum aka com.tapatalk.theslingshotforumcom application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/21 10:00 a.m.•32 views

CVE-2014-7659

The ExpeditersOnline.com Forum aka com.quoord.tapatalkeo.activity application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/21 10:00 a.m.•49 views

CVE-2014-7659

CVE-2014-7659 affects the Android app ExpeditersOnline.com Forum (com.quoord.tapatalkeo.activity) 3.7.13. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The ...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/10/21 10:00 a.m.•53 views

CVE-2014-7777

The CVE-2014-7777 entry concerns The Slingshot Forum Android app (version 3.9.14, package com.tapatalk.theslingshotforumcom). According to NVD/NVD-related records, the vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to s...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/21 10:00 a.m.•38 views

CVE-2014-7777

The Slingshot Forum aka com.tapatalk.theslingshotforumcom application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2014/10/21 12:00 a.m.•3 views

PT-2014-8262

Name of the Vulnerable Software and Affected Versions The Slingshot Forum aka com.tapatalk.theslingshotforumcom version 3.9.14 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/21 12:00 a.m.•7 views

CVE-2014-7777: Undefined Security Weakness

The Slingshot Forum aka com.tapatalk.theslingshotforumcom application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/21 12:00 a.m.•5 views

CVE-2014-7659: Undefined Security Weakness

The ExpeditersOnline.com Forum aka com.quoord.tapatalkeo.activity application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
NVD
NVD
•added 2014/10/20 10:55 a.m.•20 views

CVE-2014-7585

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00292EPSS
SaveExploits0References3
Prion
Prion
•added 2014/10/20 10:55 a.m.•17 views

Design/Logic Flaw

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00292EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/20 10:00 a.m.•35 views

CVE-2014-7585

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00292EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/20 10:00 a.m.•52 views

CVE-2014-7585

The CVE affects the Android app Biplane Forum (com.gcspublishing.biplaneforum) version 3.7.14, which does not verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The p...

5.4CVSS6AI score0.00292EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/20 12:00 a.m.•3 views

PT-2014-8113

Name of the Vulnerable Software and Affected Versions The Biplane Forum aka com.gcspublishing.biplaneforum version 3.7.14 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

5.4CVSS0.00292EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/20 12:00 a.m.•4 views

CVE-2014-7585: Undefined Security Weakness

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00292EPSS
SaveExploits0References2
NVD
NVD
•added 2014/10/16 7:55 p.m.•21 views

CVE-2014-7008

The Forum FrAndroid beta aka com.tapatalk.forumfrandroidcom application 3.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00292EPSS
SaveExploits0References3
NVD
NVD
•added 2014/10/16 7:55 p.m.•18 views

CVE-2014-7020

The Diabetes Forum aka com.tapatalk.diabetescoukdiabetesforum application 3.9.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
NVD
NVD
•added 2014/10/16 7:55 p.m.•13 views

CVE-2014-7022

The Modelisme.com forum/portail aka com.tapatalk.modelismecomforum application 3.6.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
•added 2014/10/16 7:55 p.m.•22 views

Design/Logic Flaw

The Forum FrAndroid beta aka com.tapatalk.forumfrandroidcom application 3.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00292EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2014/10/16 7:55 p.m.•12 views

Information disclosure

The Modelisme.com forum/portail aka com.tapatalk.modelismecomforum application 3.6.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder