CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2017/04/28 4:59 p.m.•22 views

Information disclosure

The Business LaLa Call App for Android 1.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

4.3CVSS5.3AI score0.0066EPSS

SaveExploits0References2Affected Software1

CVE•added 2017/04/28 4:00 p.m.•63 views

CVE-2017-2104

The CVE-2017-2104 entry applies to the Android app Business LaLa Call App for Android, version 1.4.7 and earlier. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

5.9CVSS5.2AI score0.0066EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2017/04/28 4:00 p.m.•29 views

CVE-2017-2104

5.3AI score0.0066EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by