CVE-2014-7800

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7800

The CVE-2014-7800 entry concerns The Daily Green (Android app, 2014.07 dlygrn) that does not verify X.509 certificates when connecting to SSL servers. The root cause is missing TLS certificate validation, enabling man-in-the-middle attackers to spoof servers and potentially disclose sensitive inf...

CVE-2014-7800

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6842

The Daily Advertiser Print aka com.lafayettedailyadv.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Daily Advertiser Print aka com.lafayettedailyadv.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6842

CVE-2014-6842 affects the Daily Advertiser Print Android app (com.lafayettedailyadv.android.prod), version 6.7, where the SSL/TLS layer does not validate server X.509 certificates. This allows MITM attackers to spoof servers and access sensitive data by presenting a crafted certificate. The issue...

CVE-2014-6642

The Mark's Daily Apple Forum aka com.tapatalk.marksdailyapplecomforum application 2.4.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6642

The Mark's Daily Apple Forum aka com.tapatalk.marksdailyapplecomforum application 2.4.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6642

The CVE concerns the Android app for The Mark’s Daily Apple Forum (com.tapatalk.marksdailyapplecomforum) v2.4.9.3, where the implementation does not verify X.509 certificates from SSL servers. This lack of certificate verification enables man-in-the-middle attackers to spoof servers and exfiltrat...

CVE-2014-5935

The Daily Free App @ Amazon aka com.kattanweb.android.dfaa application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Double free

The Daily Free App @ Amazon aka com.kattanweb.android.dfaa application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5935

The Daily Free App @ Amazon aka com.kattanweb.android.dfaa application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5935

CVE-2014-5935 concerns the Android app “The Daily Free App @ Amazon” (package com.kattanweb.android.dfaa), version 1.5.2. The connected documents state that the client fails to verify X.509 certificates from SSL servers, constituting a failure of certificate validation. The underlying impact is e...

WordPress Daily Deal Theme - Cross Site Request Forgery Vulnerability

This theme is prone to a cross site request forgery vulnerability. Solution Update the theme...

WordPress Daily Edition Theme <= 1.6.2 - Cross Site Scripting

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

WordPress Daily Edition Theme <= 1.6.2 - Unrestricted File Upload

Because of this vulnerability, the attackers can upload any file to the site by using this uploader. Solution Update the theme...

WordPress Daily Edition Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

WordPress Daily Deal Theme - Remote Code Execution Vulnerability

Because of this vulnerability, the attackers can execute arbitrary commands via unspecified vectors. Solution Update the theme...

WordPress Daily Edition Theme <= 1.6.2 - SQL Injection

This theme is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the theme...