CVE-2014-6417

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via a long unencrypted auth ticket...

CVE-2014-6416

Buffer overflow in net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a long unencrypted auth ticket...

CVE-2014-6417: Undefined Security Weakness

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via a long unencrypted auth ticket...

UBUNTU-CVE-2014-6416

Buffer overflow in net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a long unencrypted auth ticket...

CVE-2014-6417

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via a long unencrypted auth ticket...

PT-2020-7671

Name of the Vulnerable Software and Affected Versions Jasig Java CAS Client versions prior to 3.3.2 .NET CAS Client versions prior to 1.0.2 phpCAS versions prior to 1.3.3 Description A URL parameter injection issue was found in the CAS protocol, specifically in the back-channel ticket validation...

CVE-2014-6677

The Ticket Round Up aka com.xcr.android.ticketroundupapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Ticket Round Up aka com.xcr.android.ticketroundupapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6677

The Ticket Round Up aka com.xcr.android.ticketroundupapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6677

The CVE-2014-6677 entry applies to The Ticket Round Up (com.xcr.android.ticketroundupapp) on Android, version 3.0.1, where the app does not verify X.509 certificates from SSL servers. This certificate validation failure enables a man-in-the-middle to spoof servers and access sensitive information...

CVE-2014-6677: Undefined Security Weakness

The Ticket Round Up aka com.xcr.android.ticketroundupapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7355

Name of the Vulnerable Software and Affected Versions The Ticket Round Up aka com.xcr.android.ticketroundupapp version 3.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.5...

PT-2014-7215 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.16.3 Description: The issue allows remote attackers to cause a denial of service, resulting in memory corruption and panic, or possibly have other unspecified impacts. This is achieved via a long unencrypted...

Information disclosure

The TICKET APP - Concerts & Sports aka com.xcr.android.ticketapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5949

The CVE-2014-5949 entry concerns the Android app “The TICKET APP - Concerts & Sports” (com.xcr.android.ticketapp) version 3.0.1. It does not verify X.509 certificates from SSL servers, allowing man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5949

The TICKET APP - Concerts & Sports aka com.xcr.android.ticketapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Wordpress WP Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities

No description provided by source. Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities Google Dork: N/A Date: 09.09.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage - http://wpsuportplus.byethost7.com/ Softwar...

PT-2014-6934

Name of the Vulnerable Software and Affected Versions The TICKET APP - Concerts & Sports aka com.xcr.android.ticketapp version 3.0.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-5949: Undefined Security Weakness

The TICKET APP - Concerts & Sports aka com.xcr.android.ticketapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-5421

Name of the Vulnerable Software and Affected Versions nginx versions 0.5.6 through 1.7.4 Description The issue allows remote attackers with certain privileges to conduct virtual host confusion attacks by reusing a cached SSL session for an unrelated context when the same shared ssl session cache ...