PT-2018-7157

Name of the Vulnerable Software and Affected Versions: Active Directory Plugin for Jenkins versions up to and including 2.2 Description: The issue allows for Man-in-the-Middle attacks due to the lack of certificate verification of the Active Directory server. Recommendations: For versions up to a...

PT-2014-8213

Name of the Vulnerable Software and Affected Versions The Indian Jeweller aka com.magzter.indianjeweller application version 3.0 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application doe...

PT-2014-7895

Name of the Vulnerable Software and Affected Versions Ali Visual aka com.ali.visual version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

CVE-2014-7387: Undefined Security Weakness

The ACC Advocacy Action aka com.acc.app.android.ui application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6920: Undefined Security Weakness

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5930: Undefined Security Weakness

The Store and Share aka sg.com.singnet.mystorage.android application 2.0.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6886

Name of the Vulnerable Software and Affected Versions The Beauty Bible - App for Girls aka com.my.beauty.bible application version 5 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

CVE-2014-5582: Undefined Security Weakness

The Ingress Intel Helper aka com.bb.ingressintel application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6808

Name of the Vulnerable Software and Affected Versions The Cleaner - Speed up & Clean aka com.liquidum.thecleaner version 1.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not veri...

PT-2014-6707

Name of the Vulnerable Software and Affected Versions SwiftKey Keyboard + Emoji version 5.0.2.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...