EUVD-2017-17882

Malware in sbrugna...

YottaMark ShopWell - Healthy Diet and Grocery Food Scanner app for iOS Authentication Vulnerability

YottaMark ShopWell - Healthy Diet and Grocery Food Scanner app for iOS is a healthy diet management software from YottaMark ShopWell, USA. The app provides users with information about the ingredients of food products by scanning their barcodes. A security vulnerability exists in the iOS-based...

Information disclosure

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-8942

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-8942

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-8942

Affected software: YottaMark ShopWell – Healthy Diet & Grocery Food Scanner app for iOS, versions 5.3.7 through 5.4.2. Root cause: app does not verify X.509 certificates from SSL servers. Impact: enables MITM attackers to spoof servers and obtain sensitive information via crafted certificates. No...

CVE-2017-8942: Improper Certificate Validation

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-18643

Name of the Vulnerable Software and Affected Versions YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app versions 5.3.7 through 5.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not...