Lucene search
+L

27 matches found

osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-8701 Malicious code in @malware-test-hakas-vouch/test-mlw3-hakas-vouch (npm)

The package @malware-test-hakas-vouch/test-mlw3-hakas-vouch was found to contain malicious code...

7.2AI score
SaveExploits0
NVD
NVD
•added 2014/09/30 10:55 a.m.•22 views

CVE-2014-6815

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/30 10:55 a.m.•22 views

Information disclosure

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/09/30 10:00 a.m.•71 views

CVE-2014-6815

CVE-2014-6815 affects the Android Vouch! app (com.voucherry.voucherry) version 2.1.6, where SSL certificate validation is not performed. The root cause is failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information ...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/09/30 10:00 a.m.•33 views

CVE-2014-6815

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2014/09/30 12:00 a.m.•4 views

PT-2014-7492

Name of the Vulnerable Software and Affected Versions The Vouch! aka com.voucherry.voucherry application version 2.1.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/30 12:00 a.m.•8 views

CVE-2014-6815: Undefined Security Weakness

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder