Lucene search
+L

8292 matches found

CNVD
CNVD
added 2017/05/16 12:00 a.m.6 views

PayQuicker app SSL certificate validation vulnerability

PayQuicker app for iOS is a fast payment solution based on iOS. A security vulnerability exists in version 1.0.0 of the PayQuicker app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. The vulnerability can be exploited to conduct ...

5.9CVSS6.6AI score0.00477EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/16 12:00 a.m.8 views

Space Coast Credit Union Mobile app SSL Certificate Validation Vulnerability

Space Coast Credit Union SCCU Mobile for iOS and Android is a mobile banking app for iOS and Android from Space Coast Credit Union SCCU Bank, featuring quick access to manage bank accounts, manage balances, pay bills, send money and more! Features. A security vulnerability exists in SCCU Mobile...

5.9CVSS6.6AI score0.00848EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/16 12:00 a.m.5 views

China Construction Bank's Android app suffers from weak certificate validation vulnerability

China Construction Bank Android APP is the mobile application product of China Construction Bank. China Construction Bank Android APP suffers from a weak certificate validation vulnerability, as the X509TrustManager validation function does not validate the server-side certificate. An attacker ca...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2017/05/16 12:00 a.m.9 views

Think Mutual Bank Mobile Banking app SSL Certificate Validation Vulnerability

Think Mutual Bank mobile banking app for iOS is a mobile banking app for iOS from Think Mutual Bank that provides quick access to manage customer accounts, manage balances, pay bills, send money, deposit checks, set up text alerts, find branch and ATM locations and more. A security vulnerability...

5.9CVSS6.5AI score0.00864EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/15 6:29 p.m.9 views

CVE-2017-8943

The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9CVSS5.8AI score0.00598EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/15 6:29 p.m.7 views

CVE-2017-8938

The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9CVSS5.8AI score0.00658EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/15 6:29 p.m.9 views

CVE-2017-8940

The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9CVSS5.8AI score0.00486EPSS
SaveExploits0References1
Citrix
Citrix
added 2017/05/11 12:00 a.m.53 views

Citrix Cloud Connector Installation does not complete: Unable to validate certificate chain

Citrix Cloud Connector does not complete its initial installation or is unable to upgrade to the latest Cloud Connector version. The installation is blocked because it’s not able to validate the code signing certificate of the Citrix Cloud Components downloaded, which may be due to the certificat...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2017/05/11 12:00 a.m.9 views

America's First Federal Credit Union Mobile Banking app for iOS Security Bypass Vulnerability

America's First Federal Credit Union Mobile Banking app for iOS is a mobile app for iOS from America's First Federal Credit Union FCU Bank, featuring quick access to manage bank accounts, manage balances, manage balances, pay bills, send money, and more. A security bypass vulnerability exists in...

5.9CVSS6.5AI score0.00486EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/05/11 12:00 a.m.32 views

Microsoft .NET Framework Security Bypass Vulnerability (4019113)

This host is missing an important security update according to Microsoft KB4019113 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.5CVSS7.5AI score0.0551EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/05/11 12:00 a.m.8 views

Microsoft .NET Framework Security Feature Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security feature bypass vulnerability exists in the Microsoft .NET Framework and .NET Core component that does not properly validate certificates, which could allow an attacker to bypass certain restrictions and perform unauthorized...

7.5CVSS6.8AI score0.0551EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/11 12:00 a.m.7 views

TradeKing FOREXTrader for iPhone app for iOS Sensitive Rest Vulnerability

TradeKingFOREXTraderforiPhoneappforiOS is the United States of America Karson TradeKing company for iOS a highly personalized operating environment with the foreign exchange trading platform. A sensitive information disclosure vulnerability exists in versions 2.9.12 to 2.9.14 of...

5.9CVSS6.2AI score0.00486EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/11 12:00 a.m.10 views

LibreSSL TLS Certificate Validation Vulnerability

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. A certificate validation vulnerability exists in LibreSSL TLS. A remote attacker can exploit this vulnerability by relying on SSLgetverifyresult, resulting in LibreSSL lacking TLS...

5.3CVSS7AI score0.01021EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2017/05/09 7:00 a.m.40 views

.NET Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft .NET Framework and .NET Core components do not completely validate certificates. An attacker could present a certificate that is marked invalid for a specific use, but the component uses it for that purpose. This action disregards the...

7.5CVSS1.6AI score0.0551EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/05/09 7:00 a.m.59 views

Security Only update for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: May 9, 2017

Security Only update for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: May 9, 2017 View products that this article applies to. Notice May 30, 2017 If you install the .NET Framework Security and Quality...

7.5CVSS7.7AI score0.0551EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/05/09 7:00 a.m.80 views

Security and Quality Rollup for the .NET Framework 3.5 Service Pack 1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 8.1 and Windows Server 2012 R2: May 9, 2017

Security and Quality Rollup for the .NET Framework 3.5 Service Pack 1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 8.1 and Windows Server 2012 R2: May 9, 2017 View products that this article applies to. Summary This security update for the Microsoft .NET Framework resolves a security feature...

7.5CVSS7.6AI score0.0551EPSS
SaveExploits0
CNVD
CNVD
added 2017/05/09 12:00 a.m.6 views

State Bank of India State Bank Anywhere app for iOS Man-in-the-Middle Attack Vulnerability

State Bank of India State Bank Anywhere app for iOS is a mobile app for iOS from State Bank of India with features like quick access to manage bank accounts, manage balances, pay bills and send money. A security vulnerability exists in version 5.1.0 of the State Bank of India State Bank Anywhere...

5.9CVSS6.5AI score0.00486EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2017/05/09 12:00 a.m.167 views

KLA11011 Security Bypass vulnerability in Microsoft .NET Framework

An incomplete validation of certificates was found in Microsoft .NET Framework. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via a specially designed certificate, which is marked invalid for a specific use, but sti...

7.5CVSS7.7AI score0.0551EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2017/05/09 12:00 a.m.113 views

Security and Quality Rollup for .NET Framework (May 2017)

The version of Microsoft .NET Framework installed on the remote Windows host is missing a security update. It is, therefore, affected by a security bypass vulnerability in the Microsoft .NET Framework and .NET Core components due to a failure to completely validate certificates. An unauthenticate...

7.5CVSS7.6AI score0.0551EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/05/09 12:00 a.m.9 views

Dollar Bank Mobile app for iOS Man-in-the-Middle Attack Vulnerability

Dollar Bank Mobile app for iOS is a mobile app for iOS from Dollar Bank USA. With features like access to manage your bank account, manage balances, pay bills and send money. A security vulnerability exists in version 2.6.3 of the Dollar Bank Mobile app for iOS-based platforms due to the program...

5.9CVSS6.5AI score0.00477EPSS
SaveExploits0References1
Rows per page
Query Builder