10856 matches found
CVE-2014-7033
The Cure Viewer aka com.livedoor.android.cureviewer application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Cure Viewer aka com.livedoor.android.cureviewer application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7033
The Cure Viewer aka com.livedoor.android.cureviewer application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7033
The Cure Viewer (com.livedoor.android.cureviewer) app v1.03 on Android is affected by CVE-2014-7033 due to not verifying X.509 certificates in SSL connections. This root cause allows man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Explo...
Apple Motion OZDocument::parseElement Integer Overflow (CVE-2013-6114)
An integer overflow has been reported in Apple Motion 5. The vulnerability is due to lack of validation on "subview" values in a "viewer" tag. A remote unauthenticated attacker can leverage this vulnerability by enticing the user to open a specially crafted .motn file. Successful exploitation may...
CVE-2014-6834
The Instaroid - Instagram Viewer aka net.muik.instaroid application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6834
The CVE-2014-6834 entry concerns Instaroid - Instagram Viewer (net.muik.instaroid) for Android (version 1.2.1). Affected component: SSL/TLS certificate validation in the app; root cause is that X.509 certificates from SSL servers are not verified, which can allow MITM attackers to spoof servers a...
CVE-2014-6834
The Instaroid - Instagram Viewer aka net.muik.instaroid application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
[SECURITY] Fedora 20 Update: okular-4.14.1-1.fc20
A document viewer...
[SECURITY] Fedora 20 Update: kdeadmin-4.14.1-1.fc20
The kdeadmin metapackage includes administrative tools including: kcron: systemsettings module for the cron task scheduler ksystemlog: system log viewer kuser: user manager...
[SECURITY] Fedora 20 Update: gwenview-4.14.1-1.fc20
An image viewer...
Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities
Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...
Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities
Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...
Air Transfer Iphone 1.3.9 Multiple Vulnerabilities
Air Transfer Iphone version 1.3.9 suffers from remote denial of service and unauthenticated file access vulnerabilities. Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor...
Microsoft Windows Kodak Image Viewer Code Execution (MS07-055) - ver 2 (CVE-2007-2217)
A buffer overflow vulnerability has been reported in Microsoft Windows Kodak Image Viewer. The vulnerability is due to improper parsing of specially crafted image files, such as TIFF files. An attacker can exploit this vulnerability by constructing a specially crafted image and enticing a victim ...
ABB RobotStudio and Test Signal Viewer DLL Hijack Vulnerability
OVERVIEW Ivan Sanchez of WiseSecurity Team has identified a dll hijack vulnerability in the ABB RobotStudio and Test Signal Viewer applications. ABB has produced new versions that mitigate this vulnerability. Mr. Sanchez has tested the new version to validate that it resolves the vulnerability...
GroupDocs Viewer 1.4.1 - options.php Multiple Parameter XSS
The GroupDocs.Viewer for Cloud WordPress plugin was affected by an options.php Multiple Parameter XSS security vulnerability...
GroupDocs Viewer 1.4.1 - grpdocs-dialog.php Multiple Parameter XSS
The GroupDocs.Viewer for Cloud WordPress plugin was affected by a grpdocs-dialog.php Multiple Parameter XSS security vulnerability...
