CVE-2014-7460

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5906

The Lil Wayne Slots: FREE SLOTS aka com.lilwayneslots.slots.android application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Lil Wayne Slots: FREE SLOTS aka com.lilwayneslots.slots.android application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5906

The Lil Wayne Slots: FREE SLOTS aka com.lilwayneslots.slots.android application 1.138 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5906

CVE-2014-5906 affects the Android app “Lil Wayne Slots: FREE SLOTS” (com.lilwayneslots.slots.android) version 1.138. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a ...

dbus -- multiple vulnerabilities

Simon McVittie reports: Do not accept an extra fd in the padding of a cmsg message, which could lead to a 4-byte heap buffer overrun CVE-2014-3635. Reduce default for maximum Unix file descriptors passed per message from 1024 to 16, preventing a uid with the default maximum number of connections...

CVE-2014-5888

The CVE-2014-5888 entry concerns the Android app “SLOTS: Bible Slots Free” (package com.topfreegames.topbibleslots) version 1.122. The underlying issue is that the app does not verify X.509 SSL certificates, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a craf...

CVE-2014-5847

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5693

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5693

The Slots Vacation - FREE Slots (Android, package com.scopely.slotsvacation) is affected by CVE-2014-5693: app version 1.47.2 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is mis...

CVE-2014-5693

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5847

CVE-2014-5847 affects the Android app Big Win Slots - Slot Machines (com.gosub60.BigWinSlots), version 1.11.2. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Exp...

CVE-2014-5847

The Big Win Slots - Slot Machines aka com.gosub60.BigWinSlots application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5549

The Puppy Slots aka air.com.starluxstudios.PuppySlotsFree application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Puppy Slots aka air.com.starluxstudios.PuppySlotsFree application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5549

Summary: CVE-2014-5549 affects the Android app Puppy Slots Free (air.com.starluxstudios.PuppySlotsFree) v3. The issue is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and harvest sensitive information via a crafted certificate. Wha...

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2013:1591 Updated openssh packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common...

kernel: kvm: memory leak when memory slot is moved with assigned device

Memory leak in the kvmsetmemoryregion function in virt/kvm/kvmmain.c in the Linux kernel before 3.9 allows local users to cause a denial of service memory consumption by leveraging certain device access to trigger movement of memory slots...