Lucene search
+L

6 matches found

NVD
NVD
•added 2014/10/19 10:55 a.m.•20 views

CVE-2014-7430

The Flood-It aka com.appspot.eoltek.flood application 4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
•added 2014/10/19 10:55 a.m.•20 views

Information disclosure

The Flood-It aka com.appspot.eoltek.flood application 4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/10/19 10:00 a.m.•47 views

CVE-2014-7430

CVE-2014-7430 affects the Flood-It Android app (package com.appspot.eoltek.flood), version 4.2. The underlying issue is failure to verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and potentially obtain sensitive information. The C...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/19 10:00 a.m.•33 views

CVE-2014-7430

The Flood-It aka com.appspot.eoltek.flood application 4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2014/10/19 12:00 a.m.•4 views

PT-2014-7989

Name of the Vulnerable Software and Affected Versions Flood-It aka com.appspot.eoltek.flood version 4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/19 12:00 a.m.•9 views

CVE-2014-7430: Undefined Security Weakness

The Flood-It aka com.appspot.eoltek.flood application 4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder