3553 matches found
CVE-2014-7335
The CVE-2014-7335 entry affects the Liver Health - Hepatitis C (gov.nyc.dohmh.HepC) Android app version 2.0.0. The issue is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted ...
PT-2014-7913
Name of the Vulnerable Software and Affected Versions The Liver Health - Hepatitis C application version 2.0.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...
CVE-2014-7335: Undefined Security Weakness
The Liver Health - Hepatitis C aka gov.nyc.dohmh.HepC application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Threat Outbreak Alert RuleID11970: Email Messages Distributing Malicious Software on October 14, 2014
Medium Alert ID: 36079 First Published: 2014 October 14 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11970 may contain the following files: Name |...
Race condition
Race condition in the Health and Performance Monitoring HPM for ASDM feature in Cisco ASA Software 8.3 before 8.32.42, 8.4 before 8.47.11, 8.5 before 8.51.19, 8.6 before 8.61.13, 8.7 before 8.71.11, 9.0 before 9.04.8, and 9.1 before 9.14.5 allows remote attackers to cause a denial of service devi...
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)
The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A flaw exists in the SQLNET Inspection Engine due to improper handling of SQL REDIRECT packets. An attacker can exploit this vulnerability by sending a crafted sequence of REDIRECT packets through the...
Multiple Vulnerabilities in Cisco ASA Software
2015-July-08 UPDATE: Cisco PSIRT is aware of disruption to some Cisco customers with Cisco ASA devices affected by CVE-2014-3383, the Cisco ASA VPN Denial of Service Vulnerability that was disclosed in this Security Advisory. Traffic causing the disruption was isolated to a specific source IPv4...
PT-2014-5275
Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 8.3 through 8.32.41 Cisco ASA Software versions 8.4 through 8.47.10 Cisco ASA Software versions 8.5 through 8.51.18 Cisco ASA Software versions 8.6 through 8.61.12 Cisco ASA Software versions 8.7 through 8.71.10 Cis...
CVE-2014-6717
The iTriage Health aka com.healthagen.iTriage application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The iTriage Health aka com.healthagen.iTriage application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6717
The CVE-2014-6717 vulnerability affects the iTriage Health Android app (package com.healthagen.iTriage) version 5.29. The issue is that the app does not verify X.509 certificates from SSL servers, creating a trust flaw that can enable man-in-the-middle attackers to spoof servers and obtain sensit...
CVE-2014-6717
The iTriage Health aka com.healthagen.iTriage application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7395
Name of the Vulnerable Software and Affected Versions iTriage Health application version 5.29 Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6717: Undefined Security Weakness
The iTriage Health aka com.healthagen.iTriage application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Obamacare Marketplaces Could Improve Information Security
The health insurance marketplaces instituted by the Affordable Care Act and through which tens of millions of Americans have signed up for medical coverage, aren’t doing a bad job of securing sensitive personal information but they could certainly be doing a better job, according a new analysis. ...
One in Five Massachusetts Residents Breached in 2013
Roughly one in five Massachusetts residents were affected by a data breach last year, according to numbers released today by the Commonwealth’s Office of Consumer Affairs & Business Regulation OCABR. The number, about 1.2 million residents, is nearly a 60 percent increase from 2012. “Last year wa...
Community Health data leak suspected of the use of the Heartbleed vulnerability-a vulnerability warning-the black bar safety net
When the Heartbleed OpenSSL vulnerability in 4 months is discovered, the security community many experts are warning that the vulnerability could be used to expose sensitive data, although at the time also there is no evidence that attackers are actively using Heartbleed vulnerability. And now, a...
Heartbleed Aftershocks: Community Health Systems Breach, 4.5 Million Records Lost
The news this week that hackers from China compromised 4.5 million customer records held by Community Health Systems is just the latest indication that companies are not adequately protecting the information of the consumers they serve...
