Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-7287 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T12:47:32.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail message, as demonstrated by the outbound Subject header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031673 - http://www.securityfocus.com/bid/72307 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_
p://www.securityfocus.com/bid/72307 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150129_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100762
CVE ID: CVE-2014-7288 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T12:47:32.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031673 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150129_00 - http://www.exploit-db.com/exploits/35949 - https://exchange.xf
_advisory&pvid=security_advisory&year=&suid=20150129_00 - http://www.exploit-db.com/exploits/35949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100763 - http://www.osvdb.org/117766 - http://www.securityfocus.com/bid/72308
CVE ID: CVE-2014-7289 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T12:47:32.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/archi
ates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://www.securityfocus.com/archive/1/534527/100/0/threaded - http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html - http://seclists.org/fulldisclosure/2015/Jan/91 - http://www.securityfocus.com/bid/72092
CVE ID: CVE-2014-7290 State: PUBLISHED Published: 2014-11-19T15:00:00 Last Updated: 2024-08-06T12:47:32.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) Action or (2) Form parameter to aeon.dll. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129114/Atlas-Systems-Aeon-3.5-3.6-Cross-Site-Scripting.html - http://tetraph.com/security/xss-vulnerability/cve-2014-7290-atlas-systems-aeon-xss-cross-site-scripting-vulnerability/ - http://seclists.org/fulldisclosure/2014/Nov/3
cve-2014-7290-atlas-systems-aeon-xss-cross-site-scripting-vulnerability/ - http://seclists.org/fulldisclosure/2014/Nov/32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98705
CVE ID: CVE-2014-7291 State: PUBLISHED Published: 2014-12-01T15:00:00 Last Updated: 2024-08-06T12:47:32.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in api_events.php in Springshare LibCal 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) m or (2) cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/90 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99000 - http://tetraph.com/security/cves/cve-2014-7291-springshare-libcal-xss-cross-site-scripting-vulnerability/
CVE ID: CVE-2014-7292 State: PUBLISHED Published: 2014-10-23T14:00:00 Last Updated: 2024-08-06T12:47:32.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx. Additional Analyst Notes: - CVE Program Container: References: - http://www.tetraph.com/blog/cves/cve-2014-7292-newtelligence-dasblog-open-redirect-vulnerability - http://www.securityfocus.com/bid/70654 - http://seclists.org/fulldisclosure/2014/O
dasblog-open-redirect-vulnerability - http://www.securityfocus.com/bid/70654 - http://seclists.org/fulldisclosure/2014/Oct/91 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97667 - http://packetstormsecurity.com/files/128749/Newtelligence-dasBlog-2.3-Open-Redirect.html
CVE ID: CVE-2014-7293 State: PUBLISHED Published: 2015-01-02T20:00:00 Last Updated: 2024-08-06T12:47:31.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://tetraph.com/security/cves/cve-2014-7293-ex-libris-patron-directory-services-pds-xss-cross-site-scripting-security-vulnerability/ - http://seclists.org/fulldisclosure/2014/Dec/125
CVE ID: CVE-2014-7294 State: PUBLISHED Published: 2015-01-02T20:00:00 Last Updated: 2024-08-06T12:47:32.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129756/Ex-Libris-Patron-Directory-Services-2.1-Open-Redirect.html - http://seclists.org/fulldisclosure/2014/Dec/127 - http://tetraph.com/security/cves/cve-2014-7294-ex-l
en-Redirect.html - http://seclists.org/fulldisclosure/2014/Dec/127 - http://tetraph.com/security/cves/cve-2014-7294-ex-libris-patron-directory-services-pds-open-redirect-security-vulnerability/
CVE ID: CVE-2014-7295 State: PUBLISHED Published: 2014-10-07T14:00:00 Last Updated: 2024-08-06T12:47:32.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.wikimedia.org/show_bug.cgi?id=70672 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-October/000163.html - http://www.
/show_bug.cgi?id=70672 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-October/000163.html - http://www.debian.org/security/2014/dsa-3046 - http://secunia.com/advisories/61752 - http://seclists.org/oss-sec/2014/q4/67 - http://www.securityfocus.com/bid/70238
CVE ID: CVE-2014-7296 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:47:32.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document. Additional Analyst Notes: - CVE Program Container: References: - http://spagoworld.org/jira/browse/SPAGOBI-1885 - http://www.securityfocus.com/bid/70240
CVE ID: CVE-2014-7297 State: PUBLISHED Published: 2014-10-13T10:00:00 Last Updated: 2024-08-06T12:47:32.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://themeforest.net/item/enfold-responsive-multipurpose-theme/4519990 - https://wpvulndb.com/vulnerabilities/9809
CVE ID: CVE-2014-7298 State: PUBLISHED Published: 2014-10-24T10:00:00 Last Updated: 2024-08-06T12:47:32.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality. Additional Analyst Notes: - CVE Program Container: References: - https://exploithub.com/centrify-data-leakage.html - http://twitter.com/travemme/statuses/525298393971564544 - http://www.centrify.com/support/announcements.asp#20141014
CVE ID: CVE-2014-7299 State: PUBLISHED Published: 2014-10-08T01:00:00 Last Updated: 2024-08-06T12:47:32.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-10072014.txt
CVE ID: CVE-2014-7300 State: PUBLISHED Published: 2014-12-25T21:00:00 Last Updated: 2024-08-06T12:47:32.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/gnome-shell/commit/?id=a72dc
ditional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/gnome-shell/commit/?id=a72dca361080ffc9f45ff90188a7cf013c3c4013 - http://rhn.redhat.com/errata/RHSA-2015-0535.html - https://git.gnome.org/browse/gnome-shell/commit/?id=f02b007337e61436aaa0e81a86ad707b6d277378 - https://bugzilla.gnome.org/show_bug.cgi?id=737456 - http://openwall.com/lists/oss-security/2014/09/29/17
CVE ID: CVE-2014-7301 State: PUBLISHED Published: 2020-01-27T17:23:29 Last Updated: 2024-08-06T12:47:32.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/129466/SGI-Tempo-Database-Password-Disclosure.html - https://labs.f-secure.com/advisories/sgi-tempo-system-database-password-exposure/
CVE ID: CVE-2014-7302 State: PUBLISHED Published: 2020-01-27T17:23:32 Last Updated: 2024-08-06T12:47:32.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129465/SGI-Tempo-vx-Setuid-Privilege-Escalation.html - https://labs.mwrinfosecurity.com/advisories/2014/12/02/sgi-suid-root-privilege-escalation/
CVE ID: CVE-2014-7303 State: PUBLISHED Published: 2020-01-27T17:23:36 Last Updated: 2024-08-06T12:47:32.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/129467/SGI-Tempo-Database-Exposure.html - https://labs.f-secure.com/advisories/sgi-tempo-system-database-exposure/
CVE ID: CVE-2014-7307 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ForoSocuellamos (aka com.forosocuellamos.tlcttbeukajwpeqreg) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/159657 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7308 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7309 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Where2Stop-Cardlocks-Free (aka appinventor.ai_kidatheart99.Where2Stop_Cardlocks) application 6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/245985 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7310 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ali Visual (aka com.ali.visual) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/976033 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7311 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7312 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7313 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The One You Fitness (aka com.app_oneyou.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/831977 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7314 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intelligent SME (aka com.magzter.intelligentsme) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/991521 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7315 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Where Atlanta (aka com.magzter.whereatlanta) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/247217 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7316 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Safe Arrival (aka com.synrevoice.safearrival) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/987297
CVE ID: CVE-2014-7317 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aloha Bail Bonds (aka com.onesolutionapps.alohabailbondsandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/153673 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7318 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7319 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7320 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SHIRAKABA (aka com.SHIRAKABA) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/586633 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7321 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Firenze map (aka com.wFirenzemap) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/408433 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7322 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7323 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dignity Dialogue (aka com.magzter.dignitydialogue) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/942769 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7324 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-7325 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Business Intelligence (aka com.magzter.businessintelligence) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/456393 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7326 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ETA Mobile (aka com.en2grate.etamobile) application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/554865 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7327 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Macau Business (aka com.magzter.macaubusiness) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/656329 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-7328 State: PUBLISHED Published: 2014-10-19T10:00:00 Last Updated: 2024-08-06T12:47:32.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The brain abundance info (aka com.wbrainabundance) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/556361 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing