CVE-2014-7317

The CVE-2014-7317 entry concerns the Android app Aloha Bail Bonds (com.onesolutionapps.alohabailbondsandroid) version 1.1, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in TLS certificate validation that enables man-in-the-middle attackers to spoof s...

CVE-2014-7333

The CVE-2014-7333 entry concerns the Android application Aloha Guide (package com.aloha.guide.japnese) version 1.3, where the app does not verify X.509 certificates from SSL servers. Root cause: missing certificate verification in SSL/TLS, enabling man-in-the-middle attackers to spoof servers and...

PT-2014-7900

Name of the Vulnerable Software and Affected Versions Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-7911

Name of the Vulnerable Software and Affected Versions The Aloha Guide aka com.aloha.guide.japnese version 1.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-7333: Undefined Security Weakness

The Aloha Guide aka com.aloha.guide.japnese application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7317: Undefined Security Weakness

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6812

The Aloha Guide aka com.aloha.guide.english application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6812

The Aloha Guide aka com.aloha.guide.english application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6812

CVE-2014-6812 affects the Android app “The Aloha Guide” (com.aloha.guide.english), version 1.5. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Pub...

PT-2014-7489

Name of the Vulnerable Software and Affected Versions The Aloha Guide aka com.aloha.guide.english version 1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-6812: Undefined Security Weakness

The Aloha Guide aka com.aloha.guide.english application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

CVE-2014-6781 concerns the Aloha Stadium - Hawaii Android app (package com.stadium.aloha), version 1.2. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certif...

CVE-2014-6781: Undefined Security Weakness

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Unfixed XSS vulnerability at aloha-t.com

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting aloha-t.com, which at the time of submission ranked 7108346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...