257 matches found
careers.guess.eu XSS vulnerability
Vulnerable URL: http://careers.guess.eu/elencoannunci.php?paginaScelta=1perpagina=4an=asd"===chiave=tbm=4531=4958"submit=Search Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Fedora 23 : nrpe-2.15-7.fc23 (2015-15398)
Use %configure macro as it deals with config.sub/guess and various flags properly ---- nrpe-2.15-6.el7 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.el6 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.fc23 - Fix spec file for missing...
CVE-2014-9152: Undefined Security Weakness
The userresourcecreate function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes it easier for remote attackers to guess the password via a brute force attack...
CVE-2014-7624
The CVE-2014-7624 entry affects the Android app “Guess the Pixel Character Quiz” (com.aiadp.pixelcQuiz) version 1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...
PT-2014-8143
Name of the Vulnerable Software and Affected Versions The Guess the Pixel Character Quiz aka com.aiadp.pixelcQuiz version 1.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via...
CVE-2014-7624: Undefined Security Weakness
The Guess the Pixel Character Quiz aka com.aiadp.pixelcQuiz application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5962
The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5962
The CVE-2014-5962 entry concerns the Android app Guess The Actor (com.gamelikeinc.actors) version 1.1, which does not verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...
CVE-2014-5962: Undefined Security Weakness
The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6947
Name of the Vulnerable Software and Affected Versions The Guess The Actor aka com.gamelikeinc.actors application version 1.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...
CVE-2014-5825
The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5825
The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5825
The Guess The Movie (com.june.guessthemovie) Android app (version 2.982) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a CVSSv2 base score of 5.4 (MEDIUM) with ...
CVE-2014-5825: Undefined Security Weakness
The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6810
Name of the Vulnerable Software and Affected Versions The Guess The Movie aka com.june.guessthemovie application version 2.982 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...
PT-2014-5365
Name of the Vulnerable Software and Affected Versions Apache Syncope versions 1.1.x through 1.1.7 Description The issue allows remote attackers to guess passwords via a brute force attack due to the use of weak random values for password generation. Recommendations For Apache Syncope versions 1.1...
DEBIAN-CVE-2013-0157
a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...
UBUNTU-CVE-2013-0157
a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...
CVE-2013-0157
a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...