CVE-2014-7683

CVE-2014-7683 concerns the Android app “Free Canadian Author Previews” (com.booksellerscanada.authorpreview) version 1.0.0. The vulnerability is improper SSL trust validation: the app does not verify X.509 certificates from SSL servers, which can let an attacker perform a man-in-the-middle attack...

CVE-2014-7683

The Free Canadian Author Previews aka com.booksellerscanada.authorpreview application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

openoffice -- information disclosure vulnerability

Apache reports: The exposure exploits the way OLE previews are generated to embed arbitrary file data into a specially crafted document when it is opened. Data exposure is possible if the updated document is distributed to other parties...

PT-2014-3527 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions 1.4.0 through 1.4.x Description: The issue allows remote attackers to obtain sensitive information via the hostname parameter. This is related to spoofing, where access to provisioning template previews is not properly...

New Google service could be a godsend to scammers !

The Instant Previews service that Google launched last week allows users to click on the magnifying glass icon next to a result's title or on its background in order to see a preview of that result. There is no doubt that this feature is very helpful when it comes to skimming through legitimate...

SA-CONTRIB 2010-075 - Tagging - Cross Site Scripting

The Tagging module provides an alternative input widget and other features for taxonomy terms. The module does not properly escape user-provided content submitted to free-tagging vocabularies displayed on node previews, leading to a Cross Site Scripting XSS vulnerability. Any user with permission...