2851 matches found
CVE-2014-6700
The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6700
The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6700
The CVE-2014-6700 entry concerns the NBA Game Time 2013-2014 Android app (com.nbadigital.gametimelite) version 4.11. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certif...
CVE-2014-5720
The CVE-2014-5720 entry covers the Android app Bike Race Free - Top Free Game (package com.topfreegames.bikeracefreeworld), version 4.3, which does not verify X.509 certificates from SSL servers. This improper certificate validation enables man-in-the-middle attackers to spoof servers and obtain ...
Use after free
The Sniper Shooter Free - Fun Game aka com.fungamesforfree.snipershooter.free application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Fun Preschool Creativity Game aka air.com.tribalnova.ilearnwith.ipad.MotherAppEn application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5554
CVE-2014-5554 : The Android app “Fun Preschool Creativity Game” (package air.com.tribalnova.ilearnwith.ipad.MotherAppEn), version 1.6.2, does not verify SSL/TLS X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5624
The CVE-2014-5624 entry applies to the Android app “The Sniper Shooter Free - Fun Game” (com.fungamesforfree.snipershooter.free), version 2.8, where SSL connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof trusted servers and obtain sensitive ...
70% of South Korean Population Victimized In Online Gaming Heist
More than half of South Korea's 50 million population aged between 15 and 65 have been affected in a massive data breach, compromising their personal information. The data breach came to light when 16 individual were arrested following the theft of about 220 million stolen records from a number o...
[SECURITY] Fedora 20 Update: mumble-1.2.6-1.fc20.1
Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...
WordPress Game-Tabs plugin 'n' Parameter Cross Site Scripting Vulnerability
WordPress Game-Tabs Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4531
Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...
CVE-2014-4531
The CVE-2014-4531 entry describes a Cross-Site Scripting (XSS) vulnerability in WordPress Game-Tabs plugin versions 0.4.0 and earlier, exploitable via the n parameter in main_page.php. According to the provided data, affected software is the WordPress Game-Tabs plugin
CVE-2014-4531
Cross-site scripting XSS vulnerability in mainpage.php in the Game tabs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the n parameter...
0verkill 0.16 Game Client Multiple Local Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9550/info The 0verkill game client has been reported prone to multiple instances of exploitable buffer overrun vulnerabilities. The functions that have been reported to be affected are loadcfg, savecfg and sendmessage. It...
Orbz Game <= 2.10 Remote Buffer Overflow Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probabl...
LBreakOut2 2.x Login Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8021/info It has been reported that lbreakout2 is vulnerable to a format string issue in the login component. This may result in an attacker executing arbitrary code on a vulnerable host. / lbreakout2-2.5+: remote format...
Menasoft SPHEREserver 0.99 Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4258/info Menasoft SPHEREserver .99 is an online role playing game server. It is vulnerable to a denial of service; multiple connections to the server can be made from a single machine, exhausting available connections an...