PT-2014-7457

Name of the Vulnerable Software and Affected Versions The Cart App aka com.virtecha.mobilewallet version 1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-7452

Name of the Vulnerable Software and Affected Versions USEK aka com.university.usek version 1.0.8 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-7470

Name of the Vulnerable Software and Affected Versions Suriname Radio aka com.wordbox.surinameRadio version 1.5 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...

PT-2014-7455

Name of the Vulnerable Software and Affected Versions blueeleph application version 1.0 Description The issue concerns the blueeleph application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

PT-2014-7462

Name of the Vulnerable Software and Affected Versions Fermononrespiri Mobile aka com.tapatalk.rmonlineitforums version 3.8.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.5...

PT-2014-7458

Name of the Vulnerable Software and Affected Versions MeiTalk aka com.playjia.meitalk version @7F060012 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...

CVE-2014-7145

The SMB2tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service NULL pointer dereference and client system crash or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals...

CVE-2014-7145

The SMB2tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service NULL pointer dereference and client system crash or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals...

CVE-2014-7145

The SMB2tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service NULL pointer dereference and client system crash or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals...

CVE-2014-7145

The SMB2tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service NULL pointer dereference and client system crash or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals...

CVE-2014-6766

The Afro-Beat aka com.zero.themelock.tambourine application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6771

The United Heritage Mobile aka FiMobile.UHCU application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6759

The Downton Abbey Fan Portal aka com.downton.abbey.fan.portal application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7428

Name of the Vulnerable Software and Affected Versions The $0.99 Kindle Books aka com.kindle.books.for99 application version 6.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-7449

Name of the Vulnerable Software and Affected Versions United Heritage Mobile aka Fi Mobile.UHCU application version 1.1 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not...

CVE-2014-7145

The SMB2tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service NULL pointer dereference and client system crash or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals...

Design/Logic Flaw

The Infiniti Roadside Assistance aka com.ccas.rsa.common.infiniti application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The CVE-2014-6738 entry concerns the Maccabi Tel Aviv Android app (com.monkeytech.maccabi) version 1.0, which does not verify X.509 certificates when communicating with SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access ...

CVE-2014-6737

The Ultimate Target-Armored Sniper aka air.wood.liame.ultimatetarget application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7425

Name of the Vulnerable Software and Affected Versions SeeOn aka com.seeon application version 4.0.7 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...