2246 matches found
Directory traversal
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
CVE-2011-4722
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
CVE-2011-4722
CVE-2011-4722 is a directory traversal vulnerability in Ipswitch WhatsUp Gold’s TFTP Server 1.0.0.24 that allows remote attackers to read arbitrary files via a .. sequence in the Filename field of an RRQ request. Public materials describe exploitation via a Metasploit module targeting WhatsUp Gol...
CVE-2011-4722
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the Filename field of an RRQ operation...
CVE-2014-7630
The Fling Gold aka com.mbgames.fling.gold application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4888
The BattleFriends at Sea GOLD aka com.tequilamobile.warshipslivegold application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Input validation
The Fling Gold aka com.mbgames.fling.gold application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7630
The Fling Gold aka com.mbgames.fling.gold application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4888
The BattleFriends at Sea GOLD aka com.tequilamobile.warshipslivegold application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7630
The CVE-2014-7630 issue affects the Android app Fling Gold (com.mbgames.fling.gold) version 1.1.3, which does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information. NVD lists a CVSSv2 base score of 5.4 (Medium) with partial confi...
CVE-2014-4888
The CVE-2014-4888 entry concerns the Android app BattleFriends at Sea GOLD (package com.tequilamobile.warshipslivegold) version 1.1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive ...
CVE-2014-5988
The Azkend Gold aka com.the10tons.azkend.gold application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Azkend Gold aka com.the10tons.azkend.gold application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5988
The CVE-2014-5988 entry applies to the Android app Azkend Gold (package com.the10tons.azkend.gold) 1.2.6, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in TLS handling, enabling MITM attackers to spoof servers and obtain sensitive data via a...
CVE-2014-5988
The Azkend Gold aka com.the10tons.azkend.gold application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5830
The Farm Frenzy Gold aka com.herocraft.game.farmfrenzy.gold application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5830
CVE-2014-5830 affects the Android app Farm Frenzy Gold (com.herocraft.game.farmfrenzy.gold) version 1.0.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5830
The Farm Frenzy Gold aka com.herocraft.game.farmfrenzy.gold application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Security feature bypass
The Windows Installer in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application that invokes the...
