Forest: Stay focused - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Forest: Stay focused published at the 'play' market has multiple vulnerabilities...

Forest Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Forest Live Wallpaper published at the 'play' market has multiple vulnerabilities...

Forest Sounds Nature To Sleep - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Forest Sounds Nature To Sleep published at the 'play' market has multiple vulnerabilities...

Mysterious Forest watchface - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mysterious Forest watchface published at the 'play' market has multiple vulnerabilities...

java-1.8.0-openjdk security update

1:1.8.0.71-1.b15 - Add patch to turn off strict overflow on IndicRearrangementProcessor,2.cpp - Resolves: rhbz1295751 1:1.8.0.71-0.b15 - January 2016 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Update patch documentation using version originally...

java-1.8.0-openjdk security update

1:1.8.0.71-2.b15 - Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz1295753 1:1.8.0.71-1.b15 - Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor,2.cpp - Resolves:...

Oracle: Security Advisory (ELSA-2014-0889)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-7117

The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7117

The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7117

The CVE-2014-7117 entry concerns The Forest Area FCU Mobile app (com.metova.cuae.fafcu), version 1.0.29 for Android, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation, enabling MITM attackers to spoof servers and obtain sensitive information via...

PT-2014-7781

Name of the Vulnerable Software and Affected Versions The Forest Area FCU Mobile application version 1.0.29 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7117: Undefined Security Weakness

The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6864

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6864

CVE-2014-6864 concerns the Forest River Forums Android app (package com.socialknowledge.forestriverforums) version 3.7.5. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-6864: Undefined Security Weakness

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7540

Name of the Vulnerable Software and Affected Versions The Forest River Forums application version 3.7.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...

Fedora 20 : java-1.7.0-openjdk-1.7.0.65-2.5.1.2.fc20 (2014-8417)

Updated to security icedtea7-forest 2.5.1 http://blog.fuseyism.com/index.php/2014/07/16/security-icedtea-2-5-1-f or-openjdk-7-released/ based on u65 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.h tmlAppendixJAVA Note that Tenable Network Security has extracted the precedin...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2014-0889)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0889 advisory. 1.7.0.65-2.5.1.2.0.1.el65 - Update DISTRONAME in specfile 1.7.0.65-2.5.1.2 - added and applied fix for samrtcard io patch405, pr1864smartcardIO.pat...

java-1.7.0-openjdk security update

1.7.0.65-2.5.1.2.0.1.el510 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.65-2.5.1.2 - added and applied fix for samrtcard io patch405, pr1864smartcardIO.patch - Resolves: rhbz1115872 1.7.0.65-2.5.1.1.el5 - updated to security patched icedtea7-forest 2.5.1 - Resolves:...