CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2014/10/04 10:55 a.m.•26 views

Information disclosure

The Loli Chocolate Cake aka com.alison.kang.chocolatecake application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2014/10/04 10:00 a.m.•40 views

CVE-2014-6906

5.9AI score0.00266EPSS

SaveExploits0References3

CVE•added 2014/10/04 10:00 a.m.•51 views

CVE-2014-6906

The CVE-2014-6906 entry concerns the Android app Loli Chocolate Cake (com.alison.kang.chocolatecake) 1.0.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. According to ...

5.4CVSS6AI score0.00266EPSS

SaveExploits0References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2014/10/04 12:00 a.m.•5 views

CVE-2014-6906: Undefined Security Weakness

5.4CVSS5.8AI score0.00266EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by