UBUNTU-CVE-2013-4366

http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification...

Hubei Radio and Television Station Yangtze River Cloud Android APP suffers from overstepping access vulnerability

Yangtze River Cloud Android APP is a news and information software created by Hubei Radio and Television Station, which integrates the three functions of government affairs, news and information, and life services. A vulnerability exists in the Hubei Radio and Television Changjiang Cloud Android...

CVE-2017-14511

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

Rent 8 Rings APP suffers from Arbitrary Explosion and Arbitrary Login Vulnerability

Rent 8 Rings APP is a cell phone software for online electric car sharing and renting by Jiangsu Rent 8 Rings Intelligent Technology Cable Company. Rent 8 Rings APP exists arbitrary blasting arbitrary login vulnerability. Attackers can log in to the task account by grabbing packets and blasting t...

SAP E-Recruiting Email Verification Bypass Vulnerability

SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability. title: Email verification bypass product: SAP E-Recruiting vulnerable version: 605, 606, 616, 617 fixed version: see SAP security note number 2507798 impact: medium homepage: https://www.sap.c...

The vulnerability of the primary bootloader of OnePlus 2 operating systems allows a hacker to bypass digital signature verification checks.

The vulnerability of the Primary Bootloader of OnePlus 2 operating systems is related to deficiencies in access control—the bootloader lacks sufficient checks for digital signatures. Exploiting this vulnerability could allow a malicious actor, who has remote access and write permissions on the SB...

Multiple NXP i.MX products verified to bypass vulnerability

The NXP i.MX 50 and others are different families of microprocessor products from NXP Semiconductors in the Netherlands. A security vulnerability exists in several NXP i.MX products due to the program failing to properly validate certificates. An attacker could use the vulnerability to bypass...

kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user

It was discovered that root can gain direct access to an internal keyring, such as '.dnsresolver' in RHEL-7 or '.builtintrustedkeys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyri...

vc movie app has a payment logic design flaw

vc movie app is a movie information software on the phone. The vc movie app has a payment logic design vulnerability. Attackers use the vulnerability to bypass the payment verification mechanism to modify the payment amount...

The vulnerability of the Android operating system, which allows a hacker to bypass the certificate verification process

The vulnerability of the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...

CVE-2017-9570

The mount-vernon-bank-trust-mobile-banking/id542706679 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Security update for chromium (important)

This update to Chromium 59.0.3071.86 fixes the following security issues: - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-5074: Use after free in Apps Bluetooth...

Design Flaw Vulnerability in MallBuilder Mall Page CAPTCHA of Farfound Group

MallBuilder is a multi-user online shopping mall solution based on PHP + MYSQL. A design flaw vulnerability exists in the Farfound Group MallBuilder mall page authentication code. Allows attackers to bypass the page verification code for brute force cracking...

openSUSE Security Update : chromium (openSUSE-2017-661)

This update to Chromium 59.0.3071.86 fixes the following security issues : - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-5074: Use after free in Apps Bluetoot...

openSUSE: Security Advisory for chromium (openSUSE-SU-2017:1502-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-06) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.

The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...

CVE-2017-3212

The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process

The vulnerability of the PowerShell script for the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to bypass certificate verification...

The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to bypass the certificate verification process through a specially created application...