Lucene search
+L

4 matches found

NVD
NVD
•added 2014/09/09 10:55 a.m.•25 views

CVE-2014-5820

The OkCupid Dating com.okcupid.okcupid application 3.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/09 10:55 a.m.•19 views

Design/Logic Flaw

The OkCupid Dating com.okcupid.okcupid application 3.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/09 12:00 a.m.•11 views

CVE-2014-5820: Undefined Security Weakness

The OkCupid Dating com.okcupid.okcupid application 3.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/09 12:00 a.m.•5 views

PT-2014-6805

Name of the Vulnerable Software and Affected Versions OkCupid Dating application version 3.4.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

5.4CVSS0.00271EPSS
SaveExploits0References4
Rows per page
Query Builder