Unspecified vulnerability in libinfinity

libinfinity is a library for building text editors. A security vulnerability exists in versions of libinfinity prior to 0.6.6-1 that stems from the program failing to properly validate a revoked SSL certificate. No details of the vulnerability are provided at this time...

Schneider Electric PowerSCADA Anywhere/Citect Anywhere Certificate Validation Vulnerability

PowerSCADA Anywhere is SCADA and power monitoring software.Citect is industrial automation operation and monitoring software. A certificate validation vulnerability exists in PowerSCADA Anywhere version 1.0 and Citect Anywhere version 1.0. The vulnerability exists because the program uses expired...

Design/Logic Flaw

NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer...

CVE-2017-11501

NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer...

CVE-2017-11501

CVE-2017-11501 affects NixOS 17.03 and earlier via the users.ldap PAM module used for LDAP authentication. When TLS is used to connect to the LDAP server (users.ldap.useTLS), the peer certificate verification is unconditionally disabled in /etc/ldap.conf. This creates a risk of man-in-the-middle ...

CVE-2017-11501

NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer...

Multiple Pivotal Software Products Accept Expired Certificates Vulnerability

Pivotal Cloud Foundry PCF, UAA, and UAA-Release are products of Pivotal Software, Inc. of the U.S. PCF is a suite of open-source Platform-as-a-Service PaaS cloud computing platforms that provide features such as container scheduling, continuous delivery, and automated service deployment; UAA is a...

Banco Santander Mexico SA Supermovil app for iOS Information Disclosure Vulnerability

Banco Santander Mexico SA Supermovil app for iOS is an iOS-based mobile application from Banco Santander Mexico SA with quick access to manage your bank account, manage balances, pay bills and send money. A security vulnerability exists in versions 3.5 through 3.7 of the Banco Santander Mexico SA...

Electronic Funds Source Mobile Driver Source app for iOS Security Vulnerability

Electronic Funds Source EFS Mobile Driver Source app for iOS is an iOS based EFS card management app. A security vulnerability exists in version 2.5 of the EFS Mobile Driver Source app for iOS, which is caused by the program failing to validate an X.509 certificate on the server side of an SSL...

Banco de Costa Rica BCR Movil app for iOS Man-in-the-Middle Attack Vulnerability

Banco de Costa Rica BCR Movil app for iOS is a mobile app for iOS from Banco de Costa Rica with quick access to manage your bank account, manage your balances, pay bills and send money. A security vulnerability exists in version 3.7 of the Banco de Costa Rica BCR Movil app for iOS-based platforms...

DOT IT Banque Zitouna app for iOS Man-in-the-Middle Attack Vulnerability

DOT IT Banque Zitouna app for iOS is an iOS-based mobile application developed by the DOT IT team for accessing Banque Zitouna Bank with quick access to manage bank accounts, manage balances, pay bills and send money. The security vulnerability in version 2.1 of the DOT IT Banque Zitouna app for...

Emirates NBD Bank P.J.S.C Emirates NBD KSA app for iOS Man-in-the-Middle Attack Vulnerability

A security vulnerability in the Emirates NBD Bank P.J.S.C Emirates NBD KSA app for iOS-based platforms versions 3.10.0 to 3.10.4 UAE and versions 2.0.1 to 2.1.0 KSA stems from the program's failure to validate an X.509 certificate on the server side of an SSL server. The vulnerability can be...

TradeKing Forex for iPhone app for iOS Information Disclosure Vulnerability

TradeKing Forex for iPhone app for iOS is a highly customizable forex trading platform for iOS from TradeKing. A security vulnerability exists in version 1.2.1 of the TradeKing Forex for iPhone app for iOS, which is caused by the program failing to validate an X.509 certificate on the SSL server...

TxAWS Man-in-the-Middle Attack Vulnerability

txAWS is an open source Twisted Python-based asynchronous web framework based client library for interacting with Amazon Web Services. A security vulnerability exists in txAWS that stems from the program's failure to adequately validate certificates. An attacker could exploit the vulnerability to...

CVE-2017-7726

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability...

Huawei SMC2.0 Denial of Service Vulnerability

Huawei SMC2.0 is a video management solution from Huawei, China. The solution supports both H.323 and SIP protocols, and supports access from computers and cell phones. A denial of service vulnerability exists in Huawei SMC2.0, which originates from the program failing to adequately validate...

Samsung Magician Remote Code Execution Vulnerability

Samsung Magician is software for Samsung SSDs that provides performance testing, performance optimization, and firmware upgrades for SSDs. A remote code execution vulnerability exists in Samsung Magician due to the program failing to properly validate TLS certificates for HTTPS software update...

CVE-2017-3218

Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates...

LBTC Mobile Information Disclosure Vulnerability

LBTC Mobile is a banking service that you can access anytime, anywhere. Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS The app fails to validate X.509 certificates for SSL servers, allowing man-in-the-middle attackers to spoof servers and gain access to sensitive information by...

Wawa Employees Credit Union Mobile Information Disclosure Vulnerability

Wawa Employees Credit Union Mobile allows you to bank anywhere, anytime. Wawa Employees Credit Union Mobile for iOS fails to validate SSL servers with X.509 certificates, allowing man-in-the-middle attackers to spoof servers and gain access to sensitive information by crafting certificates...