CVE-2014-8346

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

PT-2014-8480

Name of the Vulnerable Software and Affected Versions Samsung mobile devices affected versions not specified Description The issue concerns the Remote Controls feature on Samsung mobile devices, which fails to validate the source of lock-code data received over a network. This makes it easier for...

CVE-2014-8346: Improper Control of Generation of Code

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...

Mac OS X < 10.10 Multiple Vulnerabilities (APPLE-SA-2014-10-16-1 OS X Yosemite v10.10)

Binary data 8555.prm...

CVE-2014-4435

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

Design/Logic Flaw

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

CVE-2014-4435

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

CVE-2014-4435

The CVE-2014-4435 entry concerns iCloud Find My Mac on macOS prior to 10.10, where rate limiting on the Lost Mode PIN was not properly enforced, enabling brute‑force access via a series of reboots for users in proximity. Connected sources corroborate that the issue affects macOS OS X pre-10.10 an...

PT-2014-5898

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10 Description The issue concerns the "iCloud Find My Mac" feature, which does not properly enforce rate limiting of lost-mode PIN entry. This makes it easier for physically proximate attackers to obtain access...

CVE-2014-4435: Improper Authentication

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

Mac OS X < 10.10 Multiple Vulnerabilities (POODLE) (Shellshock)

The remote host is running a version of Mac OS X is prior to version 10.10. This update contains several security-related fixes for the following components : - 802.1X - AFP File Server - apache - App Sandbox - Bash - Bluetooth - Certificate Trust Policy - CFPreferences - CoreStorage - CUPS - Doc...

Design/Logic Flaw

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7023

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7023

CVE-2014-7023 concerns the Android app “Find Color” (package com.chudong.color) version 1.1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

PT-2014-7698

Name of the Vulnerable Software and Affected Versions Find Color aka com.chudong.color application version 1.1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-7023: Undefined Security Weakness

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6658

CVE-2014-6658 affects the Apploi Job Search – Find Jobs Android app (v4.19). The issue is failure to verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and access sensitive data via crafted certificates. CVSS-derived impact indicates partial confidentiality/integri...

CVE-2014-6658: Undefined Security Weakness

The Apploi Job Search- Find Jobs aka com.apploi application 4.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7336

Name of the Vulnerable Software and Affected Versions Apploi Job Search- Find Jobs aka com.apploi version 4.19 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()

An off-by-one heap-based buffer overflow flaw was found in glibc's internal gconvtranslitfind function. An attacker able to make an application call the iconvopen function with a specially crafted argument could possibly use this flaw to execute arbitrary code with the privileges of that...