CVE-2017-5912

The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5912

The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5912

The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The CVE-2017-5913 vulnerability affects the TradeKing Forex for iPhone app (iOS) version 1.2.1, where the app does not verify X.509 certificates from SSL servers. The root cause is improper SSL certificate validation, enabling MITM attackers to spoof servers and potentially exfiltrate sensitive i...

CVE-2017-5912

CVE-2017-5912 affects the FOREXTrader for iPhone app (iOS) versions 2.9.12–2.9.14. The root cause is the app’s failure to verify X.509 certificates from SSL servers, which can allow a man-in-the-middle attacker to spoof legitimate servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apple iOS webkit type obfuscation vulnerability

Apple iOS is an operating system for Apple smart devices. A memory obfuscation vulnerability exists in Webkit used by Apple iOS, which allows an attacker to exploit the vulnerability to build a malicious web page that can be clicked on by a user, which can crash the application or execute arbitra...

Apple iOS Safari HTTP Authentication Denial of Service Vulnerability

Apple iOS is an operating system for Apple smart devices. A denial of service vulnerability exists in Apple iOS Safari's handling of HTTP authentication, which allows attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into parsing for denial of service...

Apple iOS webkit bookmark forgery vulnerability

Apple iOS is an operating system for Apple smart devices. The creation of bookmarks in Webkit used by Apple iOS suffers from authentication forgery, which allows an attacker to construct malicious links and trick users into clicking on them, which could spoof bookmarks or execute arbitrary code...

Design/Logic Flaw

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch 2nd generation and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device...

CVE-2010-1776

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch 2nd generation and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device...

CVE-2010-1776

The CVE-2010-1776 issue affects Find My iPhone in iOS 2.0–3.1.3 (iPhone 3G and later) and iOS 2.1–3.1.3 (iPod touch 2nd gen and later). When Find My iPhone is disabled, remote authenticated users with an associated MobileMe account could wipe the device, per CVE records and multiple sources (NVD/...

CVE-2010-1776

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch 2nd generation and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device...

CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

Code injection

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

CVE-2016-1187

CVE-2016-1187 affects Cybozu KUNAI: iPhone in versions 2.0.3–3.1.5 and Android in 2.1.2–3.0.4 fail to verify SSL server certificates. This causes a potential man-in-the-middle risk, allowing eavesdropping on encrypted communications. Impact is the ability for an attacker on the network to interce...