EUVD-2014-5457

Malware in sbrugna...

CVE-2014-5570

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5570

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5570

The CVE-2014-5570 entry concerns the Android app DailyFinance – Stocks & News (com.aol.mobile.dailyFinance) version 2.0.2.1 that fails to verify X.509 certificates from SSL servers. The underlying issue is missing certificate verification in TLS, which enables man-in-the-middle attackers to spoof...

PT-2014-6555

Name of the Vulnerable Software and Affected Versions The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance version 2.0.2.1 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-5570: Undefined Security Weakness

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...