CVE-2017-9573: Improper Certificate Validation

The North Adams State Bank Ursa nasb-mobile-banking/id980573797 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-19047

Name of the Vulnerable Software and Affected Versions PCSB BANK Mobile app version 3.0.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers...

PT-2017-19058

Name of the Vulnerable Software and Affected Versions Morton Credit Union Mobile Banking version 3.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the app does not verify X.509 certificates from SSL...

KLA11044 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple serious vulnerabilities have been found in Firefox and Firefox ESR. Malicious users can exploit these vulnerabilities to gain privileges, cause a denial of service, read and write local files, spoof user interface and bypass security restrictions. Below is a complete list of...

Google I/O 2017 application for Android has an unspecified vulnerability

Google I/O 2017 application for Android is a conference management application for Google's annual I/O conference based on the Android platform developed by Google USA. A security vulnerability exists in versions of the Google I/O 2017 application for Android-based platforms prior to 5.1.4, due t...

PT-2017-18640

Name of the Vulnerable Software and Affected Versions ellentube app versions 3.1.1 through 3.1.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers...

CVE-2017-8943: Improper Certificate Validation

The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Microsoft Windows Multiple Vulnerabilities (KB4019474)

This host is missing important/critical security update according to Microsoft Security update KB4019474. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

GLSA-201705-06 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201705-06 Mozilla Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execut...

PT-2018-8252

Name of the Vulnerable Software and Affected Versions: Firefox for Android versions prior to 53 Description: The issue allows an attacker to spoof the contents of the address bar as displayed to users by launching Firefox for Android in reader mode with a user-specified URL using Android intents...

CVE-2017-5919: Improper Certificate Validation

The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-16748

Name of the Vulnerable Software and Affected Versions Great Southern Mobile Banking app version prior to 4.0.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from S...

PT-2017-16758

Name of the Vulnerable Software and Affected Versions Banco de Costa Rica BCR Movil app version 3.7 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL...

PT-2017-16754

Name of the Vulnerable Software and Affected Versions DOT IT Banque Zitouna app version 2.1 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the app does not verify X.509 certificates from SSL...

CVE-2016-4467

The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate when using the SChannel-based security layer,...

PT-2017-15172

Name of the Vulnerable Software and Affected Versions TVer App for Android versions 3.2.7 and earlier Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the TVer App for Android does not verify X.509...

Apple iOS webkit bookmark forgery vulnerability

Apple iOS is an operating system for Apple smart devices. The creation of bookmarks in Webkit used by Apple iOS suffers from authentication forgery, which allows an attacker to construct malicious links and trick users into clicking on them, which could spoof bookmarks or execute arbitrary code...

CVE-2017-5046

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure...

CVE-2017-5046

Removed by vendor...

PT-2017-7961

Name of the Vulnerable Software and Affected Versions Grandstream Wave app versions 1.0.1.26 and earlier Grandstream Video IP phones versions affected versions not specified Description The issue concerns the auto-provisioning mechanism, which fails to use an HTTPS session for downloading...