MoboTap Dolphin Web Browser - Fast Private Internet Search app for iOS Authentication Vulnerability

MoboTap Dolphin Web Browser - Fast Private Internet Search app for iOS is an iOS-based smartphone browser from MoboTap, Inc. An authentication vulnerability exists in the MoboTap Dolphin Web Browser - Fast Private Internet Search app versions 9.23.0 to 9.23.2 for iOS, which stems from the program...

CVE-2017-9045

The CVE-2017-9045 issue affects the Google I/O 2017 Android app (pre-5.1.4). It downloads multiple .json files from http://storage.googleapis.com without SSL, enabling MITM attackers to spoof Feed and Schedule data via a modified blocks_v4.json file. This is described in official CVE/NVD records;...

Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-3278-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3278-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could...

CVE-2017-8937

The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-8937

The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-8935

Summary: The Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. What’s affected: iOS client of the Indiana Voters app (v...

CVE-2017-8937

The CVE-2017-8937 entry concerns the Life Before Us Yo app for iOS version 2.5.8, where the app does not verify X.509 certificates from SSL servers. This creates a vulnerability that could allow a man‑in‑the‑middle attacker to spoof the server and obtain sensitive information via a crafted certif...

CVE-2017-8943

The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

OnePlus OTA One/X Crossover Vulnerability(CVE-2017-8851)

Products OnePlus X OnePlus One Vulnerable Version All OnePlus OxygenOS & HydrogenOS OTAs Technical Details Due to lenient updater-script on the OnePlus One & X’s OTA images see below, the fact both products use the same OTA verification keys, and the fact both products share the same...

Panda Mobile Security for iOS Man-in-the-Middle Attack Vulnerability

Panda Mobile Security for iOS is a mobile antivirus product for iOS developed by the Spanish company Panda Security. The product protects mobile networks from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in version 1.1 of Panda Mobile Security for iOS. An...

CVE-2017-3212

The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5905

The CVE-2017-5905 entry concerns the Dollar Bank Mobile app for iOS (version 2.6.3). The vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables a man-in-the-middle attacker to spoof the legitimate server and obtain sensitive information via a crafted cert...

CVE-2017-3212

CVE-2017-3212 affects the Space Coast Credit Union SCCU Mobile apps: iOS v2.2 and Android v2.1.0.1104, which fail to verify SSL X.509 certificates. This enables MITM attackers to spoof servers and access sensitive information via crafted certificates. Connected sources (NVD, CNVD, CVE listings, C...

CVE-2017-5906

The CVE-2017-5906 issue affects Everyday Health’s iOS app “Diabetes in Check: Blood Glucose & Carb Tracker” (version 3.4.2). The root cause is failure to validate X.509 certificates from SSL servers, enabling man-in-the-middle attacks to spoof servers and access sensitive information. Connected C...

CVE-2017-5902

PayQuicker app 1.0.0 for iOS fails to verify X.509 certificates from SSL servers, due to improper TLS certificate validation in the iOS client. Root cause: insecure certificate handling during TLS handshake, allowing man‑in‑the‑middle attackers to impersonate trusted servers and obtain sensitive ...

CVE-2017-5915

CVE-2017-5915 affects Emirates NBD Bank P.J.S.C Emirates NBD KSA iOS apps (versions UAE 3.10.0–3.10.4 and KSA 2.0.1–2.1.0). The root cause is failure to verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to impersonate a trusted server and obtain sensitive informati...

CVE-2017-5909

The CVE-2017-5909 entry concerns the Electronic Funds Source Mobile Driver Source app for iOS, version 2.5. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2017-8059

Foxit PDF (iOS) before version 5.4 is vulnerable to accepting invalid/self-signed TLS certificates, enabling a passive or proximity attacker to perform a MITM and silently intercept login credentials (username/password) and an existing authentication token. Root cause: improper TLS certificate va...

CVE-2017-2110

CVE-2017-2110 affects the Access CX App on Android < 2.0.0.1 and iOS

Moderate: Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Updated python27 packages are now available as a part of Red Hat Software Collections 2.4 for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...