Lucene search
+L

257 matches found

Openbugbounty
Openbugbounty
•added 2015/12/02 12:47 p.m.•12 views

careers.guess.eu XSS vulnerability

Vulnerable URL: http://careers.guess.eu/elencoannunci.php?paginaScelta=1perpagina=4an=asd"===chiave=tbm=4531=4958"submit=Search Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

6.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/09/21 12:00 a.m.•50 views

Fedora 23 : nrpe-2.15-7.fc23 (2015-15398)

Use %configure macro as it deals with config.sub/guess and various flags properly ---- nrpe-2.15-6.el7 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.el6 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.fc23 - Fix spec file for missing...

7.5CVSS5.3AI score0.15312EPSS
SaveExploits7References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/01 12:00 a.m.•9 views

CVE-2014-9152: Undefined Security Weakness

The userresourcecreate function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes it easier for remote attackers to guess the password via a brute force attack...

7.5CVSS5.9AI score0.02331EPSS
SaveExploits0References2
CVE
CVE
•added 2014/10/20 10:00 a.m.•49 views

CVE-2014-7624

The CVE-2014-7624 entry affects the Android app “Guess the Pixel Character Quiz” (com.aiadp.pixelcQuiz) version 1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/20 12:00 a.m.•2 views

PT-2014-8143

Name of the Vulnerable Software and Affected Versions The Guess the Pixel Character Quiz aka com.aiadp.pixelcQuiz version 1.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/20 12:00 a.m.•5 views

CVE-2014-7624: Undefined Security Weakness

The Guess the Pixel Character Quiz aka com.aiadp.pixelcQuiz application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
NVD
NVD
•added 2014/09/19 10:55 a.m.•26 views

CVE-2014-5962

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
•added 2014/09/19 10:00 a.m.•54 views

CVE-2014-5962

The CVE-2014-5962 entry concerns the Android app Guess The Actor (com.gamelikeinc.actors) version 1.1, which does not verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/19 12:00 a.m.•6 views

CVE-2014-5962: Undefined Security Weakness

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/19 12:00 a.m.•5 views

PT-2014-6947

Name of the Vulnerable Software and Affected Versions The Guess The Actor aka com.gamelikeinc.actors application version 1.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

5.4CVSS0.00271EPSS
SaveExploits0References4
NVD
NVD
•added 2014/09/09 10:55 a.m.•28 views

CVE-2014-5825

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/09 10:55 a.m.•21 views

Information disclosure

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/09/09 10:00 a.m.•35 views

CVE-2014-5825

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
•added 2014/09/09 10:00 a.m.•54 views

CVE-2014-5825

The Guess The Movie (com.june.guessthemovie) Android app (version 2.982) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a CVSSv2 base score of 5.4 (MEDIUM) with ...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/09 12:00 a.m.•7 views

CVE-2014-5825: Undefined Security Weakness

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/09 12:00 a.m.•5 views

PT-2014-6810

Name of the Vulnerable Software and Affected Versions The Guess The Movie aka com.june.guessthemovie application version 2.982 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

5.4CVSS0.00271EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/07/11 12:00 a.m.•6 views

PT-2014-5365

Name of the Vulnerable Software and Affected Versions Apache Syncope versions 1.1.x through 1.1.7 Description The issue allows remote attackers to guess passwords via a brute force attack due to the use of weak random values for password generation. Recommendations For Apache Syncope versions 1.1...

5CVSS0.06023EPSS
SaveExploits0References11
OSV
OSV
•added 2014/01/21 6:55 p.m.•13 views

DEBIAN-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.6AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
•added 2014/01/21 6:55 p.m.•14 views

UBUNTU-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.7AI score0.00375EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2014/01/21 6:55 p.m.•22 views

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS5.5AI score0.00375EPSS
SaveExploits0References8
Rows per page
Query Builder