CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature

More info at https://symfony.com/cve-2015-8124...

CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature

More info at https://symfony.com/cve-2015-8124...

CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service

More info at https://symfony.com/cve-2015-8125...

CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature

More info at https://symfony.com/cve-2015-8124...

CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service

More info at https://symfony.com/cve-2015-8125...

CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service

More info at https://symfony.com/cve-2015-8125...

CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature

Affected Versions Symfony 2.3.0 to 2.3.34, 2.6.0 - 2.6.11, 2.7.0 - 2.7.6 versions of the Security component are affected by this security issue. This issue has been fixed in Symfony 2.3.35, 2.6.12, and 2.7.7. Note that no fixes are provided for Symfony 2.4 and 2.5 as they are not maintained...

Integer overflow

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition Crypto-C ME before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service...

phpSFP 'remember me()' function SQL Injection Vulnerability

phpSFP is a PHP script for adding website content and sharing it on Facebook pages and admin groups. A SQL injection vulnerability exists in phpSFP, which allows remote attackers to exploit the vulnerability to submit specially crafted SQL queries to manipulate or obtain database data...

CVE-2014-7254

Unspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or modify flash memory via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or modify flash memory via unknown vectors...

CVE-2014-7254

Unspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or modify flash memory via unknown vectors...

CVE-2014-7254

CVE-2014-7254 affects ARROWS Me F-11D. The vulnerability allows a locally proximate attacker to read or modify arbitrary areas of the device’s flash memory. The issue is documented as affecting ARROWS Me F-11D with local access required; the exact vector and root cause are not detailed in the pro...

ARROWS Me F-11D vulnerability where arbitrary areas may be accessed

Overview ARROWS Me F-11D contains a vulnerability where arbitrary areas on the device may be accessed. FUKAUMI Naoki of SOUM Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attacker with local...

JVN#61593104: ARROWS Me F-11D vulnerability where arbitrary areas may be accessed

ARROWS Me F-11D contains a vulnerability where arbitrary areas on the device may be accessed. Impact An attacker with local access may obtain or alter contents in the flash memory of the device. Solution Apply an Update Apply the update according to the information provided by the provider...

Information disclosure

The City Star ME aka com.citystarme application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7053

The CVE-2014-7053 entry concerns the City Star ME Android app (com.citystarme) version 1.0, where SSL certificate validation is missing. Specifically, the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and retrieve sensitive data via...

CVE-2014-7053

The City Star ME aka com.citystarme application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5714

The Text Me! Free Texting & Call aka com.textmeinc.textme application 2.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5714

CVE-2014-5714 affects the Text Me! Free Texting & Call Android app (com.textmeinc.textme) version 2.5.5. The issue is that the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ce...