Labanquepostale

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-5839 Sep 09, 10:55 MEDIUM This Month

The Acces Compte (aka com.fullsix.android.labanquepostale.accountaccess) application 3.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Labanquepostale Acces Compte

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-5076 Sep 02, 10:55 MEDIUM POC This Month

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Information Disclosure Google Labanquepostale

NVD

CVSS 2.0

4.3

EPSS

0.4%

CVE-2014-5839

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Labanquepostale +1

NVD

CVE-2014-5076

EPSS 0% CVSS 4.3

MEDIUM POC This Month

Information Disclosure Google Labanquepostale

NVD