Skip to main content

Information Disclosure

70996 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2014-6924 MEDIUM This Month

The Metro News (aka com.netpia.ha.metro) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Metro News
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6923 MEDIUM This Month

The Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dubrovnik Guided Walking Tours
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6922 MEDIUM This Month

The KFAI Community Radio (aka com.skyblue.pra.kfai) application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kfai Community Radio
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6921 MEDIUM This Month

The Buckhorn Grill (aka com.orderingapps.buckhorn) application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buckhorn Grill
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6920 MEDIUM This Month

The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Canal 44
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6919 MEDIUM This Month

The Metalcasting Newsstand (aka air.com.yudu.ReaderAIR3017071) application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Metalcasting Newsstand
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6918 MEDIUM This Month

The Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bikers Underground
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6917 MEDIUM This Month

The www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Www Knote Kr Smart
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6916 MEDIUM This Month

The mama.cn (aka cn.ziipin.mama.ui) application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mama Cn
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6914 MEDIUM This Month

The Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Houcine El Jasmi
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6913 MEDIUM This Month

The Dive The World (aka com.paperton.wl.divetheworld) application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dive The World
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6912 MEDIUM This Month

The IRA's 59th Annual Conference (aka com.coreapps.android.followme.ira_14) application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ira S 59Th Annual Conference
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6911 MEDIUM This Month

The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Diziturky Hd 2015
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6910 MEDIUM This Month

The MemorizeIt!. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Memorizeit
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6909 MEDIUM This Month

The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Coca Cola Fm Peru
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6908 MEDIUM This Month

The Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Forum Ic
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6907 MEDIUM This Month

The Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rakuten Install
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6906 MEDIUM This Month

The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Loli Chocolate Cake
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6292 PHP MEDIUM PATCH This Month

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Femanager
NVD
CVSS 2.0
6.4
EPSS
0.4%
CVE-2014-6905 MEDIUM This Month

The H2O Human Harmony Organization (aka com.netpia.ha.theh2o) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure H2O Human Harmony Organization
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6903 MEDIUM This Month

The Gulf Power Mobile Bill Pay (aka com.tionetworks.gulf) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gulf Power Mobile Bill Pay
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6902 MEDIUM This Month

The Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Anjuke
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6901 MEDIUM This Month

The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Radios Del Ecuador
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6900 MEDIUM This Month

The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Eage Amsterdam 2014
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6899 MEDIUM This Month

The Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Jazeera Airways
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6898 MEDIUM This Month

The Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Boopsie Mylibrary
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6897 MEDIUM This Month

The Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Skyrim Map
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6896 MEDIUM This Month

The Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Yik Yak
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6895 MEDIUM This Month

The Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Throne Rush
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6894 MEDIUM This Month

The Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Lucktastic
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-7144 PyPI MEDIUM PATCH This Month

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Python Information Disclosure Keystonemiddleware Python Keystoneclient
NVD
CVSS 2.0
4.3
EPSS
0.4%
CVE-2014-3621 PyPI MEDIUM POC PATCH This Month

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Keystone Ubuntu Linux Openstack
NVD
CVSS 2.0
4.0
EPSS
0.4%
CVE-2014-6893 MEDIUM This Month

The Pushpins Grocery Coupons (aka com.pushpinsapp.pushpins) application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pushpins Grocery Coupons
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6892 MEDIUM This Month

The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kalahari Com Shopping
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6890 MEDIUM This Month

The CouponCabin - Coupons & Deals (aka com.couponcabin) application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Couponcabin Coupons Deals
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6889 MEDIUM This Month

The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gunbroker Com
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6888 MEDIUM This Month

The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pennytalk Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6886 MEDIUM This Month

The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wephone Phone Calls Vs Skype
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6885 MEDIUM This Month

The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Academy Sports Outdoors Visa
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6884 MEDIUM This Month

The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ford Credit Account Manager
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6883 MEDIUM This Month

The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cnnmoney Portfolio For Stocks
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6882 MEDIUM This Month

The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Western Federal Credit Union
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6881 MEDIUM This Month

The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Virtual Wallet By Pnc
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6880 MEDIUM This Month

The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tradehero
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6879 MEDIUM This Month

The Equifax Mobile (aka com.equifax) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Equifax Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6878 MEDIUM This Month

The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rbfcu Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6877 MEDIUM This Month

The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Santander Personal Banking
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6876 MEDIUM This Month

The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure American Express Serve
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6875 MEDIUM This Month

The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Woodforest Mobile Banking
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6874 MEDIUM This Month

The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Modsim Connected
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6873 MEDIUM This Month

The AMGC (aka com.amec.uae) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Amgc
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6872 MEDIUM This Month

The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ttnet Muzik
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6871 MEDIUM This Month

The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hogs Fly Crazy
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6870 MEDIUM This Month

The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bgenergy
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6869 MEDIUM This Month

The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Barcode Scanner
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6868 MEDIUM This Month

The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Synology Google Information Disclosure Ds Audio
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6867 MEDIUM This Month

The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sortir En Alsace
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6866 MEDIUM This Month

The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Homeadvisor Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6865 MEDIUM This Month

The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Jamal Bates Show
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6864 MEDIUM This Month

The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Forest River Forums
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6863 MEDIUM This Month

The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mootorratturid Biker Ee
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6862 MEDIUM This Month

The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Artacces
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6861 MEDIUM This Month

The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Terrarienbilder Com Forum
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6860 MEDIUM This Month

The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Trial Tracker
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6859 MEDIUM This Month

The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Daum Maps Subway
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6858 MEDIUM This Month

The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mostafa Shemeas
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6857 MEDIUM This Month

The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Car Wallpapers Hd
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6856 MEDIUM This Month

The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ahrah
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-4765 MEDIUM PATCH This Month

IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

IBM Information Disclosure Change And Configuration Management Database Maximo Asset Management Maximo Asset Management Essentials +9
NVD
CVSS 2.0
5.0
EPSS
0.2%
CVE-2014-3060 CRITICAL PATCH Act Now

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

IBM Information Disclosure Websphere Datapower Xc10 Appliance Firmware Websphere Datapower Xc10 Appliance
NVD
CVSS 2.0
10.0
EPSS
2.4%
CVE-2014-3059 CRITICAL PATCH Act Now

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

IBM Information Disclosure Websphere Datapower Xc10 Appliance Firmware Websphere Datapower Xc10 Appliance
NVD
CVSS 2.0
10.0
EPSS
2.4%
CVE-2014-2642 MEDIUM This Month

HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

HP Information Disclosure System Management Homepage
NVD
CVSS 2.0
4.3
EPSS
0.5%
CVE-2014-6855 MEDIUM This Month

The Long (aka com.imop.longjiang.android) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Long
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6854 MEDIUM This Month

The EyeXam (aka com.globaleyeventures.eyexam) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Eyexam
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6853 MEDIUM This Month

The Foxit MobilePDF - PDF Reader (aka com.foxit.mobile.pdf.lite) application 2.2.0.0616 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Foxit Mobilepdf Pdf Reader
NVD
CVSS 2.0
5.4
EPSS
0.6%
CVE-2014-6852 MEDIUM This Month

The LedLine.gr Official (aka com.automon.ledline.gr) application 1.4.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ledline Gr Official
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6851 MEDIUM This Month

The New Beginnings CFC (aka com.goodbarber.nbcfc) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure New Beginnings Cfc
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-3395 MEDIUM This Month

Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Cisco Information Disclosure Webex Meetings Server
NVD
CVSS 2.0
5.0
EPSS
0.2%
CVE-2014-6850 MEDIUM This Month

The SED Account (aka com.starkville.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sed Account
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6848 MEDIUM This Month

The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Synology Google Information Disclosure Ds File
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6847 MEDIUM This Month

The Horoscopes and Dreams (aka com.horoscopesanddreams) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Horoscopes And Dreams
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6846 MEDIUM This Month

The Four Seasons Beverly Hills (aka com.intelitycorp.FourSeasons.android.ice) application @7F050007 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Four Seasons Beverly Hills
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6845 MEDIUM This Month

The MediaFire (aka com.mediafire.android) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mediafire
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6844 MEDIUM This Month

The ABC Song (aka com.tabtale.abcsingalong) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Abc Song
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6843 MEDIUM This Month

The Sweatshop (aka com.orderingapps.sweatshop) application 2.96 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sweatshop
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6842 MEDIUM This Month

The Daily Advertiser Print (aka com.lafayettedailyadv.android.prod) application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Daily Advertiser Print
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6841 MEDIUM This Month

The RTI INDIA (aka com.vbulletin.build_890) application 3.8.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rti India
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6840 MEDIUM This Month

The My Wedding Planner (aka app.wedding) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure My Wedding Planner
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6839 MEDIUM This Month

The Alma Corinthiana (aka com.alma.corinthiana) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Alma Corinthiana
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6838 MEDIUM This Month

The Groupama toujours la (aka com.groupama.toujoursla) application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Groupama Toujours La
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6924
EPSS 0% CVSS 5.4
MEDIUM This Month

The Metro News (aka com.netpia.ha.metro) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Metro News
NVD
CVE-2014-6923
EPSS 0% CVSS 5.4
MEDIUM This Month

The Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dubrovnik Guided Walking Tours
NVD
CVE-2014-6922
EPSS 0% CVSS 5.4
MEDIUM This Month

The KFAI Community Radio (aka com.skyblue.pra.kfai) application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kfai Community Radio
NVD
CVE-2014-6921
EPSS 0% CVSS 5.4
MEDIUM This Month

The Buckhorn Grill (aka com.orderingapps.buckhorn) application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buckhorn Grill
NVD
CVE-2014-6920
EPSS 0% CVSS 5.4
MEDIUM This Month

The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Canal 44
NVD
CVE-2014-6919
EPSS 0% CVSS 5.4
MEDIUM This Month

The Metalcasting Newsstand (aka air.com.yudu.ReaderAIR3017071) application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Metalcasting Newsstand
NVD
CVE-2014-6918
EPSS 0% CVSS 5.4
MEDIUM This Month

The Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bikers Underground
NVD
CVE-2014-6917
EPSS 0% CVSS 5.4
MEDIUM This Month

The www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Www Knote Kr Smart
NVD
CVE-2014-6916
EPSS 0% CVSS 5.4
MEDIUM This Month

The mama.cn (aka cn.ziipin.mama.ui) application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mama Cn
NVD
CVE-2014-6914
EPSS 0% CVSS 5.4
MEDIUM This Month

The Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Houcine El Jasmi
NVD
CVE-2014-6913
EPSS 0% CVSS 5.4
MEDIUM This Month

The Dive The World (aka com.paperton.wl.divetheworld) application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dive The World
NVD
CVE-2014-6912
EPSS 0% CVSS 5.4
MEDIUM This Month

The IRA's 59th Annual Conference (aka com.coreapps.android.followme.ira_14) application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ira S 59Th Annual Conference
NVD
CVE-2014-6911
EPSS 0% CVSS 5.4
MEDIUM This Month

The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Diziturky Hd 2015
NVD
CVE-2014-6910
EPSS 0% CVSS 5.4
MEDIUM This Month

The MemorizeIt!. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Memorizeit
NVD
CVE-2014-6909
EPSS 0% CVSS 5.4
MEDIUM This Month

The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Coca Cola Fm Peru
NVD
CVE-2014-6908
EPSS 0% CVSS 5.4
MEDIUM This Month

The Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Forum Ic
NVD
CVE-2014-6907
EPSS 0% CVSS 5.4
MEDIUM This Month

The Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rakuten Install
NVD
CVE-2014-6906
EPSS 0% CVSS 5.4
MEDIUM This Month

The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Loli Chocolate Cake
NVD
CVE-2014-6292 PHP
EPSS 0% CVSS 6.4
MEDIUM PATCH This Month

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Femanager
NVD
CVE-2014-6905
EPSS 0% CVSS 5.4
MEDIUM This Month

The H2O Human Harmony Organization (aka com.netpia.ha.theh2o) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure H2O Human Harmony Organization
NVD
CVE-2014-6903
EPSS 0% CVSS 5.4
MEDIUM This Month

The Gulf Power Mobile Bill Pay (aka com.tionetworks.gulf) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gulf Power Mobile Bill Pay
NVD
CVE-2014-6902
EPSS 0% CVSS 5.4
MEDIUM This Month

The Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Anjuke
NVD
CVE-2014-6901
EPSS 0% CVSS 5.4
MEDIUM This Month

The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Radios Del Ecuador
NVD
CVE-2014-6900
EPSS 0% CVSS 5.4
MEDIUM This Month

The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Eage Amsterdam 2014
NVD
CVE-2014-6899
EPSS 0% CVSS 5.4
MEDIUM This Month

The Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Jazeera Airways
NVD
CVE-2014-6898
EPSS 0% CVSS 5.4
MEDIUM This Month

The Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Boopsie Mylibrary
NVD
CVE-2014-6897
EPSS 0% CVSS 5.4
MEDIUM This Month

The Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Skyrim Map
NVD
CVE-2014-6896
EPSS 0% CVSS 5.4
MEDIUM This Month

The Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Yik Yak
NVD
CVE-2014-6895
EPSS 0% CVSS 5.4
MEDIUM This Month

The Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Throne Rush
NVD
CVE-2014-6894
EPSS 0% CVSS 5.4
MEDIUM This Month

The Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Lucktastic
NVD
CVE-2014-7144 PyPI
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Python Information Disclosure Keystonemiddleware +1
NVD
CVE-2014-3621 PyPI
EPSS 0% CVSS 4.0
MEDIUM POC PATCH This Month

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Keystone Ubuntu Linux +1
NVD
CVE-2014-6893
EPSS 0% CVSS 5.4
MEDIUM This Month

The Pushpins Grocery Coupons (aka com.pushpinsapp.pushpins) application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pushpins Grocery Coupons
NVD
CVE-2014-6892
EPSS 0% CVSS 5.4
MEDIUM This Month

The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kalahari Com Shopping
NVD
CVE-2014-6890
EPSS 0% CVSS 5.4
MEDIUM This Month

The CouponCabin - Coupons & Deals (aka com.couponcabin) application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Couponcabin Coupons Deals
NVD
CVE-2014-6889
EPSS 0% CVSS 5.4
MEDIUM This Month

The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gunbroker Com
NVD
CVE-2014-6888
EPSS 0% CVSS 5.4
MEDIUM This Month

The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pennytalk Mobile
NVD
CVE-2014-6886
EPSS 0% CVSS 5.4
MEDIUM This Month

The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wephone Phone Calls Vs Skype
NVD
CVE-2014-6885
EPSS 0% CVSS 5.4
MEDIUM This Month

The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Academy Sports Outdoors Visa
NVD
CVE-2014-6884
EPSS 0% CVSS 5.4
MEDIUM This Month

The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ford Credit Account Manager
NVD
CVE-2014-6883
EPSS 0% CVSS 5.4
MEDIUM This Month

The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cnnmoney Portfolio For Stocks
NVD
CVE-2014-6882
EPSS 0% CVSS 5.4
MEDIUM This Month

The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Western Federal Credit Union
NVD
CVE-2014-6881
EPSS 0% CVSS 5.4
MEDIUM This Month

The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Virtual Wallet By Pnc
NVD
CVE-2014-6880
EPSS 0% CVSS 5.4
MEDIUM This Month

The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tradehero
NVD
CVE-2014-6879
EPSS 0% CVSS 5.4
MEDIUM This Month

The Equifax Mobile (aka com.equifax) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Equifax Mobile
NVD
CVE-2014-6878
EPSS 0% CVSS 5.4
MEDIUM This Month

The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rbfcu Mobile
NVD
CVE-2014-6877
EPSS 0% CVSS 5.4
MEDIUM This Month

The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Santander Personal Banking
NVD
CVE-2014-6876
EPSS 0% CVSS 5.4
MEDIUM This Month

The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure American Express Serve
NVD
CVE-2014-6875
EPSS 0% CVSS 5.4
MEDIUM This Month

The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Woodforest Mobile Banking
NVD
CVE-2014-6874
EPSS 0% CVSS 5.4
MEDIUM This Month

The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Modsim Connected
NVD
CVE-2014-6873
EPSS 0% CVSS 5.4
MEDIUM This Month

The AMGC (aka com.amec.uae) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Amgc
NVD
CVE-2014-6872
EPSS 0% CVSS 5.4
MEDIUM This Month

The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ttnet Muzik
NVD
CVE-2014-6871
EPSS 0% CVSS 5.4
MEDIUM This Month

The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hogs Fly Crazy
NVD
CVE-2014-6870
EPSS 0% CVSS 5.4
MEDIUM This Month

The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bgenergy
NVD
CVE-2014-6869
EPSS 0% CVSS 5.4
MEDIUM This Month

The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Barcode Scanner
NVD
CVE-2014-6868
EPSS 0% CVSS 5.4
MEDIUM This Month

The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Synology Google Information Disclosure +1
NVD
CVE-2014-6867
EPSS 0% CVSS 5.4
MEDIUM This Month

The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sortir En Alsace
NVD
CVE-2014-6866
EPSS 0% CVSS 5.4
MEDIUM This Month

The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Homeadvisor Mobile
NVD
CVE-2014-6865
EPSS 0% CVSS 5.4
MEDIUM This Month

The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Jamal Bates Show
NVD
CVE-2014-6864
EPSS 0% CVSS 5.4
MEDIUM This Month

The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Forest River Forums
NVD
CVE-2014-6863
EPSS 0% CVSS 5.4
MEDIUM This Month

The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mootorratturid Biker Ee
NVD
CVE-2014-6862
EPSS 0% CVSS 5.4
MEDIUM This Month

The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Artacces
NVD
CVE-2014-6861
EPSS 0% CVSS 5.4
MEDIUM This Month

The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Terrarienbilder Com Forum
NVD
CVE-2014-6860
EPSS 0% CVSS 5.4
MEDIUM This Month

The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Trial Tracker
NVD
CVE-2014-6859
EPSS 0% CVSS 5.4
MEDIUM This Month

The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Daum Maps Subway
NVD
CVE-2014-6858
EPSS 0% CVSS 5.4
MEDIUM This Month

The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mostafa Shemeas
NVD
CVE-2014-6857
EPSS 0% CVSS 5.4
MEDIUM This Month

The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Car Wallpapers Hd
NVD
CVE-2014-6856
EPSS 0% CVSS 5.4
MEDIUM This Month

The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ahrah
NVD
CVE-2014-4765
EPSS 0% CVSS 5.0
MEDIUM PATCH This Month

IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

IBM Information Disclosure Change And Configuration Management Database +11
NVD
CVE-2014-3060
EPSS 2% CVSS 10.0
CRITICAL PATCH Act Now

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

IBM Information Disclosure Websphere Datapower Xc10 Appliance Firmware +1
NVD
CVE-2014-3059
EPSS 2% CVSS 10.0
CRITICAL PATCH Act Now

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

IBM Information Disclosure Websphere Datapower Xc10 Appliance Firmware +1
NVD
CVE-2014-2642
EPSS 0% CVSS 4.3
MEDIUM This Month

HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

HP Information Disclosure System Management Homepage
NVD
CVE-2014-6855
EPSS 0% CVSS 5.4
MEDIUM This Month

The Long (aka com.imop.longjiang.android) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Long
NVD
CVE-2014-6854
EPSS 0% CVSS 5.4
MEDIUM This Month

The EyeXam (aka com.globaleyeventures.eyexam) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Eyexam
NVD
CVE-2014-6853
EPSS 1% CVSS 5.4
MEDIUM This Month

The Foxit MobilePDF - PDF Reader (aka com.foxit.mobile.pdf.lite) application 2.2.0.0616 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Foxit Mobilepdf Pdf Reader
NVD
CVE-2014-6852
EPSS 0% CVSS 5.4
MEDIUM This Month

The LedLine.gr Official (aka com.automon.ledline.gr) application 1.4.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ledline Gr Official
NVD
CVE-2014-6851
EPSS 0% CVSS 5.4
MEDIUM This Month

The New Beginnings CFC (aka com.goodbarber.nbcfc) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure New Beginnings Cfc
NVD
CVE-2014-3395
EPSS 0% CVSS 5.0
MEDIUM This Month

Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Cisco Information Disclosure Webex Meetings Server
NVD
CVE-2014-6850
EPSS 0% CVSS 5.4
MEDIUM This Month

The SED Account (aka com.starkville.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sed Account
NVD
CVE-2014-6848
EPSS 0% CVSS 5.4
MEDIUM This Month

The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Synology Google Information Disclosure +1
NVD
CVE-2014-6847
EPSS 0% CVSS 5.4
MEDIUM This Month

The Horoscopes and Dreams (aka com.horoscopesanddreams) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Horoscopes And Dreams
NVD
CVE-2014-6846
EPSS 0% CVSS 5.4
MEDIUM This Month

The Four Seasons Beverly Hills (aka com.intelitycorp.FourSeasons.android.ice) application @7F050007 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Four Seasons Beverly Hills
NVD
CVE-2014-6845
EPSS 0% CVSS 5.4
MEDIUM This Month

The MediaFire (aka com.mediafire.android) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mediafire
NVD
CVE-2014-6844
EPSS 0% CVSS 5.4
MEDIUM This Month

The ABC Song (aka com.tabtale.abcsingalong) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Abc Song
NVD
CVE-2014-6843
EPSS 0% CVSS 5.4
MEDIUM This Month

The Sweatshop (aka com.orderingapps.sweatshop) application 2.96 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sweatshop
NVD
CVE-2014-6842
EPSS 0% CVSS 5.4
MEDIUM This Month

The Daily Advertiser Print (aka com.lafayettedailyadv.android.prod) application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Daily Advertiser Print
NVD
CVE-2014-6841
EPSS 0% CVSS 5.4
MEDIUM This Month

The RTI INDIA (aka com.vbulletin.build_890) application 3.8.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rti India
NVD
CVE-2014-6840
EPSS 0% CVSS 5.4
MEDIUM This Month

The My Wedding Planner (aka app.wedding) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure My Wedding Planner
NVD
CVE-2014-6839
EPSS 0% CVSS 5.4
MEDIUM This Month

The Alma Corinthiana (aka com.alma.corinthiana) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Alma Corinthiana
NVD
CVE-2014-6838
EPSS 0% CVSS 5.4
MEDIUM This Month

The Groupama toujours la (aka com.groupama.toujoursla) application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Groupama Toujours La
NVD
Prev Page 742 of 789 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy