efergy engage - Customized SSL, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application efergy engage published at the 'play' market has multiple vulnerabilities...

Point - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Point published at the 'play' market has multiple vulnerabilities...

キルベジ - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application キルベジ published at the 'play' market has multiple vulnerabilities...

RiotZone - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RiotZone published at the 'play' market has multiple vulnerabilities...

GPS Tracker - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application GPS Tracker published at the 'play' market has multiple vulnerabilities...

Code injection

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...

CVE-2015-2012

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...

CVE-2015-2012

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...

Vulnerabilities in the Android operating system that allow a hacker to execute arbitrary code and read arbitrary keys from the Keystore.

The multiple vulnerabilities of the Android operating system’s Keystore component are related to buffer overflows in dynamic memory, caused by integer overflows. Exploitation of these vulnerabilities allows a remote attacker to execute arbitrary code and read arbitrary Keystore keys using a...

Google Patches Stagefright 2.0 in Android OTA Nexus Update

Google today patched the latest round of Stagefright vulnerabilities in Android, pushing them out as part of its latest over-the-air update to Nexus devices. Stagefright 2.0, as it’s come to be known, affected the Stagefright media playback engine in Android and one billion devices dating back to...

CVE-2015-3863

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399...

Integer overflow

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399...

CVE-2015-3863

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399...

UBUNTU-CVE-2015-3863

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399...

CVE-2015-3863

CVE-2015-3863 affects the Android Keystore component: multiple integer overflows in the Blob class (keystore/keystore.cpp) allow an app that uses a crafted blob in an insert operation to execute arbitrary code and read arbitrary Keystore keys. Affected: Android versions prior to 5.1.1 (LMY48M). R...

CVE-2015-3863

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...

Default credentials

GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository is affected by a default-password issue: initinit for the SSL key manager and server keystore, keystore_password for the server truststore, and atna for the primary and archive storage databases. This credential exposure can enable ...

CVE-2013-7397

Async Http Client aka AHC or async-http-client before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an arbitrary certificate during use of a...