PT-2014-4225

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 4.0.x before 4.0.15 Bugzilla versions 4.1.x and 4.2.x before 4.2.11 Bugzilla versions 4.3.x and 4.4.x before 4.4.6 Bugzilla versions 4.5.x before 4.5.6 Description The issue arises from the confirm create account...

PT-2014-7537

Name of the Vulnerable Software and Affected Versions com.tapatalk.terrarienbildercomvb version 3.8.20 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from S...

PT-2014-7524

Name of the Vulnerable Software and Affected Versions Horoscopes and Dreams application version 1.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fro...

Information disclosure

The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7394

Name of the Vulnerable Software and Affected Versions fastin aka moda.azyae.fastin.net application version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificate...

Cross site request forgery (csrf)

The Mahabharata Audiocast aka com.wordbox.mahabharataAudiocast application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6995

Name of the Vulnerable Software and Affected Versions The Rasta Weed Widgets HD aka aw.awesomewidgets.rastaweed application version 4 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the applicatio...

PT-2014-7006

Name of the Vulnerable Software and Affected Versions com.usbank.icsmobile.harleydavidson version 1.18 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from S...

CVE-2014-5959

The tx Smart aka com.wooriwm.txsmart application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4384

Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...

CVE-2014-4386

Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access...

Race condition

Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access...

Directory traversal

Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...

CVE-2014-4384

Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...

CVE-2014-4384

CVE-2014-4384 affects iOS App Installation (Apple) and describes a path traversal in the App Installation workflow. A local attacker could retarget code signature validation to a different bundle during installation, allowing the installation of an unverified app. Apple’s advisory notes the issue...

PT-2014-5851

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description A directory traversal issue exists in the App Installation feature, allowing local users to install unverified apps. This is achieved by triggering code-signature validation of an unintended bundle...

CVE-2014-4384: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...

PT-2014-6863

Name of the Vulnerable Software and Affected Versions ium aka net.ium.mobile.android version 3.3.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-6648

Name of the Vulnerable Software and Affected Versions FreeCell Solitaire aka com.mobilityware.freecell version 2.1.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...