Lucene search
+L

8 matches found

Openbugbounty
Openbugbounty
•added 2022/10/05 11:24 a.m.•15 views

fiksu-solutions.com Cross Site Scripting vulnerability OBB-2978518

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/01/20 10:26 a.m.•19 views

jira.fiksu.com Cross Site Scripting vulnerability OBB-2341104

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2014/09/22 10:55 a.m.•26 views

CVE-2014-5971

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00297EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/22 10:55 a.m.•24 views

Information disclosure

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.2AI score0.00297EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2014/09/22 10:00 a.m.•39 views

CVE-2014-5971

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.8AI score0.00297EPSS
SaveExploits0References3
CVE
CVE
•added 2014/09/22 10:00 a.m.•53 views

CVE-2014-5971

The CVE-2014-5971 entry concerns the Fiksu library for Android failing to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD description confirms the lack of certificate verification as the root ...

5.4CVSS6AI score0.00297EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/22 12:00 a.m.•6 views

CVE-2014-5971: Undefined Security Weakness

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00297EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/22 12:00 a.m.•5 views

PT-2014-6956

Name of the Vulnerable Software and Affected Versions Fiksu library for Android affected versions not specified Description The issue concerns the Fiksu library for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and...

5.4CVSS0.00297EPSS
SaveExploits0References4
Rows per page
Query Builder