Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:08 p.m.•18 views

CVE-2021-20833

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

7.4CVSS6.4AI score0.00486EPSS
SaveExploits0References1
OSV
OSV
•added 2021/10/13 9:15 a.m.•18 views

CVE-2021-20833

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

7.4CVSS5.8AI score0.00486EPSS
SaveExploits0References2
NVD
NVD
•added 2021/10/13 9:15 a.m.•32 views

CVE-2021-20833

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

7.4CVSS0.00486EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/13 9:15 a.m.•23 views

Code injection

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

5.8CVSS6.9AI score0.00486EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/13 9:15 a.m.•9 views

CVE-2021-20833

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

7.4CVSS6.4AI score0.00486EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2021/10/13 8:31 a.m.•66 views

CVE-2021-20833

The CVE-2021-20833 advisory concerns the SNKRDUNK Market Place App for iOS prior to version 2.2.0, which has improper server certificate verification. The underlying issue is certificate validation failure in the app, enabling a man-in-the-middle (MitM) attacker to eavesdrop on and potentially al...

7.4CVSS6.9AI score0.00486EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/13 8:31 a.m.•47 views

CVE-2021-20833

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

7.2AI score0.00486EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/13 12:00 a.m.•4 views

CVE-2021-20833: Improper Certificate Validation

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate...

7.4CVSS5.7AI score0.00486EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/13 12:00 a.m.•4 views

PT-2021-14277

Name of the Vulnerable Software and Affected Versions: SNKRDUNK Market Place App for iOS versions prior to 2.2.0 Description: The issue allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate, due to improper server certificate verificatio...

7.4CVSS0.00486EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/09/29 12:00 a.m.•17 views

SNKRDUNK Market Place App 信任管理问题漏洞

Soda Inc. Snkrdunk Market Place App is a sneaker media and c2c marketplace by Soda Inc. of Japan. A trust management issue vulnerability exists in SNKRDUNK Market Place App for iOS, which stems from incorrect certificate validation. A remote attacker could perform a man-in-the-middle MitM attack...

7.4CVSS6.3AI score0.00486EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/09/28 12:00 a.m.•41 views

JVN#10168753: SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification

SNKRDUNK Market Place App for iOS provided SODA, Inc. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on and/or alter the communication. Solution Update the application Update the application to the latest...

7.4CVSS7AI score0.00486EPSS
SaveExploits0
Rows per page
Query Builder