PT-2014-6626

Name of the Vulnerable Software and Affected Versions Cloud Manager aka com.ileaf.cloud manager version 1.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

PT-2014-6645

Name of the Vulnerable Software and Affected Versions com.metova.cuae.tmffcu version 1.0.28 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-6541

Name of the Vulnerable Software and Affected Versions Fly Fishing & Fly Tying aka air.com.yudu.ReaderAIR3209899 version 3.21.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-6805

Name of the Vulnerable Software and Affected Versions OkCupid Dating application version 3.4.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-6735

Name of the Vulnerable Software and Affected Versions The Pro Bet Tips aka com.wProBetTips application version 0.2 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...

PT-2014-6761

Name of the Vulnerable Software and Affected Versions PlayMemories Online aka jp.co.sony.tablet.PersonalSpace version 4.2.0.05070 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verif...

PT-2014-6609

Name of the Vulnerable Software and Affected Versions The Sniper Shooter Free - Fun Game aka com.fungamesforfree.snipershooter.free version 2.8 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

PT-2014-6548

Name of the Vulnerable Software and Affected Versions br.com.lgrmobile.sdm version 1.4.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-6613

Name of the Vulnerable Software and Affected Versions The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM version 1.6.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application doe...

PT-2014-6815

Name of the Vulnerable Software and Affected Versions The Farm Frenzy Gold aka com.herocraft.game.farmfrenzy.gold version 1.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-6736

Name of the Vulnerable Software and Affected Versions Tor Browser the Short Guide aka com.wTorShortUserManual version 0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6802

Name of the Vulnerable Software and Affected Versions The Mini Pets aka com.miniclip.animalshelter version 2.0.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6638

Name of the Vulnerable Software and Affected Versions Unblock Me FREE version 1.4.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-6760

Name of the Vulnerable Software and Affected Versions The Super Fast Browser aka iron.web.jalepano.browser version 2.0.5.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6612

Name of the Vulnerable Software and Affected Versions The Ice Age Village aka com.gameloft.android.ANMP.GloftIAHM version 2.8.0m Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

kernel security and bug fix update

2.6.32-431.29.2 - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc 1114549 1096351 CVE-2014-3535 2.6.32-431.29.1 - mm hugetlb: ensure hugepage access is denied if hugepages are not supported Gustav...

Cisco Unified Computing System E-Series Blade Servers Cisco Integrated Management Controller SSH Denial of Service Vulnerability

A vulnerability in the Cisco Integrated Management Controller Cisco IMC SSH module of the Cisco Unified Computing System E-Series Blade servers could allow an unauthenticated, remote attacker to cause a denial of service condition. The vulnerability is due to a failure to properly handle a crafte...

Cisco Integrated Management Controller SSH Denial of Service Vulnerability

A vulnerability in the Cisco Integrated Management Controller Cisco IMC SSH module of the Cisco Unified Computing System E-Series Blade servers could allow an unauthenticated, remote attacker to cause a denial of service condition. The vulnerability is due to a failure to properly handle a crafte...

SOL15573 - OpenSSL DTLS vulnerabilities CVE-2014-3505, CVE-2014-3506, and CVE-2014-3507

1 If you are planning to upgrade to BIG-IP APM 11.5.1 HF6 to mitigate this issue, you should instead upgrade to 11.5.1 HF7 to avoid an issue specific to BIG-IP APM. For more information, refer to SOL15914: The tmm process may restart and produce a core file after BIG-IP APM systems are upgraded. ...

UBUNTU-CVE-2014-6060

The getoption function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHOOPTIONSOVERLOADED option in the 1 bootfile or 2 servername section, which triggers the option to be processed again...