Lucene search
+L

191 matches found

NVD
NVD
•added 2017/09/30 1:29 a.m.•28 views

CVE-2017-14582

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

5.9CVSS5.4AI score0.02356EPSS
SaveExploits0References2
Prion
Prion
•added 2017/09/30 1:29 a.m.•22 views

Design/Logic Flaw

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

4.3CVSS5.4AI score0.02356EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/30 12:00 a.m.•7 views

CVE-2017-14582: Improper Certificate Validation

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

5.9CVSS6.2AI score0.02356EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/09/29 8:00 p.m.•34 views

CVE-2017-14582

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

5.4AI score0.02356EPSS
SaveExploits0References2
CVE
CVE
•added 2017/09/29 8:00 p.m.•64 views

CVE-2017-14582

Zoho Site24x7 Mobile Network Poller for Android (before 1.1.5) does not verify SSL X.509 certificates, enabling MITM via self-signed certs. Affected component: Android client; root cause: absent certificate verification. Impact: potential disclosure of sensitive information; exploitation details ...

5.9CVSS5.3AI score0.02356EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2017/09/29 12:00 a.m.•3 views

PT-2017-13559

Name of the Vulnerable Software and Affected Versions Zoho Site24x7 Mobile Network Poller version 1.1.4 and earlier Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate because the application does not verify X.50...

5.9CVSS0.02356EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•51 views

openSUSE Security Update : cacti (openSUSE-SU-2013:1377-1)

cacti was updated to version 0.8.8b to fix security issues and bugs. - Fixes CVE-2013-1434 CVE-2013-1435 - security: SQL injection and shell escaping issues - bug: Fixed issue with custom data source information being lost when saved from edit - bug: Repopulate the poller cache on new installatio...

7.5CVSS8AI score0.02391EPSS
SaveExploits0References4
OSV
OSV
•added 2013/08/23 4:55 p.m.•7 views

DEBIAN-CVE-2013-1434

Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS8.8AI score0.01727EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2012/06/03 12:00 a.m.•83 views

Multiple xss issues in Liferay

Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal written in Java Multiple xss vulnerabilities where found in liferay. Because liferay has a "remember me" option in their login screen that stores an encrypted password in a cookie this is more problematic than it...

SaveExploits0
Packet Storm
Packet Storm
•added 2012/05/15 12:00 a.m.•54 views

Liferay 5.x / 6.x Cross Site Scripting

Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal written in Java Multiple xss vulnerabilities where found in liferay. Because liferay has a "remember me" option in their login screen that stores an encrypted password in a cookie this is more problematic than it...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/03/05 12:00 a.m.•25 views

RRDBrowse <= 1.6 Remote Arbitrary File Disclosure Vulnerability

No description provided by source. I - TITLE Security advisory: Arbitrary file disclosure vulnerability in rrdbrowse II - SUMMARY Description: Arbitrary file disclosure vulnerability in rrdbrowse = 1.6 Author: Sebastian Wolfgarten sebastian at wolfgarten dot com, http://www.devtarget.org Date:...

7.1AI score
SaveExploits0
Rows per page
Query Builder