Lucene search
K

7 matches found

Debian CVE
Debian CVE
added 2019/01/31 12:0 a.m.267 views

CVE-2019-6111

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned only directory traversal attacks are prevented...

5.9CVSS6.9AI score0.54213EPSS
Exploits9
OSV
OSV
added 2018/12/20 3:29 p.m.15 views

CVE-2018-1000836

bw-calendar-engine version = bw-calendar-engine-3.12.0 contains a XML External Entity XXE vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious...

9CVSS6.9AI score
Exploits0References2
NVD
NVD
added 2014/10/19 10:55 a.m.11 views

CVE-2014-7470

The I Know the Movie aka com.guilardi.jesaislefilm2 application jesaisfilmandroid1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Cvelist
Cvelist
added 2014/10/02 10:0 a.m.13 views

CVE-2014-6856

The AHRAH aka com.vet2pet.aid219426 application 219426 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
NVD
NVD
added 2014/09/09 1:55 a.m.13 views

CVE-2014-5680

The Tapatalk aka com.quoord.tapatalkpro.activity application 4.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Cvelist
Cvelist
added 2014/09/09 1:0 a.m.14 views

CVE-2014-5645

The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
Cvelist
Cvelist
added 2013/06/25 2:0 p.m.19 views

CVE-2013-4669

FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and FortiClient SSL VPN before 4.0.2258 on Linux proceed with an SSL session after determining that the...

6.1AI score0.00187EPSS
Exploits0References4
Rows per page
Query Builder