Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

CVE-2014-9101

CVE-2014-9101 affects Oxwall 1.7.0 (build 7907/7906) and SkaDate Lite 2.0 (build 7651) with multiple CSRF vulnerabilities enabling possible admin session hijack and related XSS via POST parameters (e.g., label in admin/users/roles/, lang[...] in AddAccountType, qst_name in addQuestion, form_name ...

Visitors Google Map Lite module mod_visitorsgooglemap SQL Injection

An SQL injection vulnerability has been reported in Visitors Google Map Lite module Mod Visitorsgooglemap. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-7646

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7646

CVE-2014-7646 concerns the Android app EMT-Paramedic Lite (com.wEMTparamedicLite) version 0.1, where the SSL implementation fails to verify X.509 certificates. This allows man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Connected records (N...

CVE-2014-7781

CVE-2014-7781 affects the Android app The Marijuana Handbook Lite - Weed (com.fallacystudios.marijuanahandbooklite), version 3.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and acces...

CVE-2014-7781

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7419

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7419

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7419

The CVE-2014-7419 entry affects the Android app PokeCreator Lite (package name com.pokecreator.builderlite ) at version 1.1 . The root cause is that the application does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensiti...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720

The CVE-2014-6720 entry concerns the Android app Pesca de Carpa Lite (com.clearfishing.pescadecarpa.lite) version 1.0, which fails to verify X.509 certificates when connecting to SSL servers. This undermines TLS trust and enables man-in-the-middle attackers to spoof the SSL server and access sens...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6722

The CVE-2014-6722 entry affects the Android app “Pescuit Crap Lite” (ro.aventurilapescui.pescuitcrap.lite), version 1.0. The vulnerability stems from the app not verifying X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and obtain sensitive ...

CVE-2014-6722

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...