Lucene search
K

6 matches found

Openbugbounty
Openbugbounty
added 2022/10/05 11:24 a.m.9 views

fiksu-solutions.com Cross Site Scripting vulnerability OBB-2978518

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
Openbugbounty
Openbugbounty
added 2022/01/20 10:26 a.m.13 views

jira.fiksu.com Cross Site Scripting vulnerability OBB-2341104

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
NVD
NVD
added 2014/09/22 10:55 a.m.9 views

CVE-2014-5971

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00134EPSS
Exploits0References3
Prion
Prion
added 2014/09/22 10:55 a.m.11 views

Information disclosure

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.2AI score0.00134EPSS
Exploits0References3
Cvelist
Cvelist
added 2014/09/22 10:0 a.m.16 views

CVE-2014-5971

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.8AI score0.00134EPSS
Exploits0References3
CVE
CVE
added 2014/09/22 10:0 a.m.35 views

CVE-2014-5971

The CVE-2014-5971 entry concerns the Fiksu library for Android failing to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD description confirms the lack of certificate verification as the root ...

5.4CVSS6AI score0.00134EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder