Lucene search
+L

3 matches found

CVE
CVE
•added 2014/10/21 10:00 a.m.•52 views

CVE-2014-7778

The CVE-2014-7778 entry affects the Android app “Epc World” (package com.magzter.epcworld) version 3.1. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certific...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/21 12:00 a.m.•6 views

PT-2014-8263

Name of the Vulnerable Software and Affected Versions com.magzter.epcworld version 3.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/21 12:00 a.m.•10 views

CVE-2014-7778: Undefined Security Weakness

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.7AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder