Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-5624

Malware in sbrugna...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References4
OSV
OSV
added 2022/05/13 3:15 p.m.2 views

CVE-2022-27247

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer e.g., data of birth, full address, mail information, and phone number via GastKont Insecure Direct Object Reference...

5.3CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2022/05/13 2:25 p.m.67 views

CVE-2022-27247

Affected software: cdSoft Onlinetools-Smart Winhotel.MX 2021. The vulnerability is described as an Insecure Direct Object Reference (GastKont) that permits an attacker to download sensitive customer data (e.g., date of birth, full address, email, phone). Root cause indicated as improper exposure/...

5.3CVSS5.1AI score0.00213EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2014/09/09 10:55 a.m.10 views

CVE-2014-5737

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Prion
Prion
added 2014/09/09 10:55 a.m.14 views

Information disclosure

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/09 10:0 a.m.17 views

CVE-2014-5737

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
CVE
CVE
added 2014/09/09 10:0 a.m.32 views

CVE-2014-5737

The CVE-2014-5737 entry relates to the CDsoft (com.wCDSOFT) Android app version 0.2 failing to verify X.509 certificates from SSL servers. This creates susceptibility to man-in-the-middle attacks, enabling an attacker to spoof servers and access sensitive information via a crafted certificate. Co...

5.4CVSS6AI score0.00134EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder