8126 matches found
CVE-2014-6755
The CVE-2014-6755 entry concerns the SDN Forum (TapaTalk) Android app, version 3.6.5 (com.tapatalk.forumshiftdeletenet). The issue is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and expose sensitive information via a crafted certifi...
CVE-2014-6755: Undefined Security Weakness
The SDN Forum TapaTalk aka com.tapatalk.forumshiftdeletenet application 3.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Mingle Forum 1.0.28 - XSS & FPD
The mingle-forum WordPress plugin was affected by a XSS & FPD security vulnerability...
CVE-2014-6740
The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6740
The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6740
The CVE-2014-6740 issue affects the Android XD Forum app (com.tapatalk.xdforumcomforum) version 3.9.17, where the app does not verify X.509 certificates from SSL servers. This behavior enables man‑in‑the‑middle attackers to spoof servers and potentially exfiltrate sensitive information via a craf...
CVE-2014-6740: Undefined Security Weakness
The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6652
The Wizaz Forum aka com.tapatalk.wizazplforum application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6655
The Tortoise Forum aka org.tortoiseforum.android.forumrunner application 3.5.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6670
The SingaporeMotherhood Forum aka com.tapatalk.singaporemotherhoodcomforum application 3.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6651
The Planet of the Vapes Forum aka com.tapatalk.planetofthevapescoukforums application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6662
The Forum Krstarice aka com.tapatalk.forumkrstaricacom application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Tortoise Forum aka org.tortoiseforum.android.forumrunner application 3.5.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Forum Krstarice aka com.tapatalk.forumkrstaricacom application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The SingaporeMotherhood Forum aka com.tapatalk.singaporemotherhoodcomforum application 3.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Wizaz Forum aka com.tapatalk.wizazplforum application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6655
The Tortoise Forum aka org.tortoiseforum.android.forumrunner application 3.5.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6670
The SingaporeMotherhood Forum aka com.tapatalk.singaporemotherhoodcomforum application 3.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6652
CVE-2014-6652 affects the Android app Wizaz Forum (package com.tapatalk.wizazplforum) version 3.6.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c...