4 matches found
CVE-2022-0863
The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...
CVE-2014-5911
The Free App Icons & Icon Packs aka com.jellytap.cooliconfinder application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6896
Name of the Vulnerable Software and Affected Versions The Free App Icons & Icon Packs aka com.jellytap.cooliconfinder version 1.4 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...
CVE-2014-5911: Undefined Security Weakness
The Free App Icons & Icon Packs aka com.jellytap.cooliconfinder application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...