202 matches found
Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities
The makers of the popular parental control system called Circle with Disney patched 23 vulnerabilities over the weekend. The bugs ran the gamut from memory corruption and denial of service, to SSL validation vulnerabilities and impact all devices managed on a network. Circle with Disney is a $90...
SSL Certificate Not Validated Vulnerability in OnStar IOS Client
OnStar iOS client is a smart driving system. An SSL certificate not verified vulnerability exists in AnjiStar IOS client. Since the AngelStar IOS client uses SSL HTTPS communication with the server, the security processing method is to do the verification of the server certificate before the...
Restaurant Karaoke SHIDAX app for Android man-in-the-middle attack vulnerability
SHIDAX CORPORATION Restaurant Karaoke SHIDAX app for Android is a SHIDAX account management mobile application based on Android platform by SHIDAX CORPORATION in Japan. A security vulnerability exists in the Restaurant Karaoke SHIDAX app for Android 1.3.3 and earlier versions, which originates fr...
Fedora 26 : 1:dovecot (2017-e8b639c286)
quota: Add plugin quotamaxmailsize setting to limit the maximum individual mail size that can be saved. + imapc: Add imapcfeatures=delay-login. If set, connecting to the remote IMAP server isn't done until it's necessary. + imapc: Add imapcconnectionretrycount and imapcconnectionretryinterval...
Code injection
Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate...
CVE-2016-5648
Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate...
CVE-2016-3083
Apache Hive JDBC + HiveServer2 implements SSL for plain TCP and HTTP connections it supports both transport modes. While validating the server's certificate during the connection setup, the client in Apache Hive before 1.2.2 and 2.0.x before 2.0.1 doesn't seem to be verifying the common name...
CVE-2016-1184
This CVE concerns the Tokyo Star bank App for Android before 1.4 and iOS before 1.4 failing to validate SSL server certificates, enabling potential man-in-the-middle eavesdropping. Affected apps are Android v1.3 and earlier and iOS v1.3 and earlier. Root cause: lack of server certificate validati...
Man-in-the-Middle (MitM)
flink-mesos is susceptible to man-in-the-middle attacks. The attack is possible because it does not use canonical hostname verification in SSL validation for client-to-server connections...
CVE-2016-1000033
Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...
U by BB&T iOS banking application fails to properly validate SSL certificates
Overview U by BB&T for iOS, version 1.5.4 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks. Description CWE-295: Improper Certificate Validation - CVE-2016-6550U by BB&T is a banking...
SUSE SLES12 Security Update : squid (SUSE-SU-2016:2008-1)
The Squid HTTP proxy has been updated to version 3.3.14, fixing the following security issues : - Fixed multiple Denial of Service issues in HTTP Response processing. CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572, bsc968392, bsc968393, bsc968394, bsc968395 - CVE-2016-3947: Buffer...
DMM Movie Player App for Android and for iPhone/iPad Man-in-the-Middle Attack Vulnerability
DMM Movie Player App is a suite of video player applications from DMM Japan. A security vulnerability exists in DMM Movie Player App for Android before 1.2.1 and for iPhone/iPad before 2.1.3, which originates from the program failing to validate an SSL server-side certificate. An attacker could u...
CVE-2016-4005
The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...
Cybozu KUNAI App Man-in-the-Middle Attack Vulnerability
Cybozu KUNAI is a set of Cybozu's licensed software applications for quick access to Cybozu's licensed software. A security vulnerability exists in Cybozu KUNAI, which is caused by the program failing to validate SSL server certificates. An attacker could exploit the vulnerability to conduct a...
RHEL 7 : mariadb (RHSA-2016:0534)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0534 advisory. - mysql: unspecified vulnerability related to Server:Partition CPU October 2015 CVE-2015-4792, CVE-2015-4802 - mysql: unspecified...
HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password
Overview The HP ArcSight SmartConnector fails to properly validate SSL certificates, and also contains a hard-coded password. Description CWE-295: Improper Certificate Validation - CVE-2015-2902The ArcSight SmartConnector fails to validate the certificate of the upstream Logger device it is...
Foreman Man-in-the-Middle Attack Vulnerability
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 1.7.4, which stems from the program's failu...
DEBIAN-CVE-2015-3455
Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid...
