PT-2014-8665

Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety affected versions not specified Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. The exact vectors used for exploitation are not specified. Recommendations A...

CVE-2014-8664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8659: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary files via unspecified vectors...

Threat Outbreak Alert RuleID12220: Email Messages Distributing Malicious Software on November 3, 2014

Medium Alert ID: 36301 First Published: 2014 November 3 15:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12220 may contain the following files: Name |...

drchrono Electronic Health Record (EHR) web applications vulnerable to cross-site scripting and cross-site request forgery

Overview drchrono Electronic Health Record EHR web applications allow cross-site scripting XSS and cross-site request forgery CSRF that could allow an attacker to obtain sensitive patient information. Description drchrono provides an EHR web application service at drchrono.com, onpatient.com, and...

CVE-2014-7760

The Health assistance service aka net.nttcloud.ft.karada application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7760

The Health assistance service aka net.nttcloud.ft.karada application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Health assistance service aka net.nttcloud.ft.karada application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7760

The Health assistance service aka net.nttcloud.ft.karada application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7760

The CVE-2014-7760 entry concerns the Android Health assistance service (net.nttcloud.ft.karada) app version 2.4.1, which does not verify X.509 certificates when connecting to SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certifi...

PT-2014-8245

Name of the Vulnerable Software and Affected Versions Health assistance service aka net.nttcloud.ft.karada version 2.4.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-7760: Undefined Security Weakness

The Health assistance service aka net.nttcloud.ft.karada application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7562

The Health Advocate SmartHelp aka com.healthadvocate.ui application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Health Advocate SmartHelp aka com.healthadvocate.ui application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7562

The Health Advocate SmartHelp aka com.healthadvocate.ui application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7562

The Health Advocate SmartHelp (com.healthadvocate.ui) Android app version 3.6 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause: missing certificate validation during TLS. Impact: pa...

PT-2014-8093

Name of the Vulnerable Software and Affected Versions Health Advocate SmartHelp application version 3.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...

CVE-2014-7562: Undefined Security Weakness

The Health Advocate SmartHelp aka com.healthadvocate.ui application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7335

The Liver Health - Hepatitis C aka gov.nyc.dohmh.HepC application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7335

The Liver Health - Hepatitis C aka gov.nyc.dohmh.HepC application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...