Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-6617 State: PUBLISHED Published: 2018-03-09T20:00:00 Last Updated: 2024-08-06T12:24:34.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98512 - http://www.securityfocus.com/archive/1/533902/100/0/threaded - https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2014-005_softring_backdoor
2/100/0/threaded - https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2014-005_softring_backdoor_account.txt - http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.html
CVE ID: CVE-2014-6618 State: PUBLISHED Published: 2014-09-30T16:00:00 Last Updated: 2024-08-06T12:24:35.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Your Online Shop allows remote attackers to inject arbitrary web script or HTML via the products_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96163 - http://packetstormsecurity.com/files/128336/Your-Online-Shop-Cross-Site-Scripting.html
CVE ID: CVE-2014-6619 State: PUBLISHED Published: 2014-09-30T16:00:00 Last Updated: 2024-08-06T12:24:35.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fname, (2) lname, or (3) login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/34760 - http://packetstormsecurity.com/files/128337 - http://osvdb.org/show/osvdb/112019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96159
CVE ID: CVE-2014-6620 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T12:24:34.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6621 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T12:24:35.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6622 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T12:24:35.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine the validity of filenames via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6623 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T12:24:35.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6624 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T12:24:35.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98877 - http://www.securityfocus.com/bid/71215 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6625 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T12:24:35.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6626 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T12:24:35.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6627 State: PUBLISHED Published: 2014-11-19T18:00:00 Last Updated: 2024-08-06T12:24:34.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-5342. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61916 - http://www.arubanetworks.com/support/alerts/aid-10282014.txt
CVE ID: CVE-2014-6628 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T12:24:35.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE ID: CVE-2014-6631 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:24:35.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in com_media in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/593-20140901-core-xss-vulnerability.html - http://secunia.com/advisories/61606
CVE ID: CVE-2014-6632 State: PUBLISHED Published: 2014-10-08T19:00:00 Last Updated: 2024-08-06T12:24:35.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/594-20140902-core-unauthorised-logins.html - http://secunia.com/advisories/61638 - http://secunia.com/advisories/61606
CVE ID: CVE-2014-6633 State: PUBLISHED Published: 2018-04-12T15:00:00 Last Updated: 2024-08-06T12:24:35.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module. Additional Analyst Notes: - CVE Program Container: References: - http://www.tryton.org/posts/security-release-for-issue4155.html - https://bugs.tryton.org/issue4155
CVE ID: CVE-2014-6635 State: PUBLISHED Published: 2014-10-26T20:00:00 Last Updated: 2024-08-06T12:24:35.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the src parameter in the search action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96158 - http://packetstormsecurity.com/files/128335/Exponent-CMS-2.3.0-Cross-Site-Scripting.html
CVE ID: CVE-2014-6636 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/858553 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6637 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:34.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Facebook Facts (aka com.wFacebookFacts) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/308465 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6638 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/394617 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6639 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIO MobilePay - Bill Payments (aka com.tionetworks.mobile.android.tioclient) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/417937 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6640 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNB Trade (aka lt.dnb.mobiletrade) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - http://www.kb.cert.org/vuls/id/395409 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6641 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Homesteading Today (aka com.tapatalk.homesteadingtodaycom) application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/205417
CVE ID: CVE-2014-6642 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mark's Daily Apple Forum (aka com.tapatalk.marksdailyapplecomforum) application 2.4.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/238329 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6643 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FIAT Forum (aka com.tapatalk.fiatforumcom) application 3.8.41 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/331169
CVE ID: CVE-2014-6644 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-6645 State: PUBLISHED Published: 2014-09-22T10:00:00 Last Updated: 2024-08-06T12:24:35.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/438881 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6646 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bellyhoodcom (aka com.tapatalk.bellyhoodcom) application 3.4.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/188257 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6647 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ElForro.com (aka com.tapatalk.elforrocom) application 2.4.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/675161 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6648 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iPhone4.TW (aka com.tapatalk.iPhone4TWforums) application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/758497
CVE ID: CVE-2014-6649 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MyBroadband Tapatalk (aka com.tapatalk.mybroadbandcozavb) application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/916369
CVE ID: CVE-2014-6650 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NextGenUpdate (aka com.tapatalk.nextgenupdatecomforums) application 3.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/976209 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6651 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Planet of the Vapes Forum (aka com.tapatalk.planetofthevapescoukforums) application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/886537 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6652 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:34.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wizaz Forum (aka com.tapatalk.wizazplforum) application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/215185 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6653 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Afghan Radio (aka com.wordbox.afghanRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/222577 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6654 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wTrootrooTvIzle (aka com.wTrootrooTvIzle) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/900529 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6655 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tortoise Forum (aka org.tortoiseforum.android.forumrunner) application 3.5.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/991257
CVE ID: CVE-2014-6656 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:34.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drareym (aka com.drareym) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/856441 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6657 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Leadership Newspapers (aka com.LeadershipNewspapers) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/655009 - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
CVE ID: CVE-2014-6658 State: PUBLISHED Published: 2014-09-23T10:00:00 Last Updated: 2024-08-06T12:24:35.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apploi Job Search- Find Jobs (aka com.apploi) application 4.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/582497 - https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing - http://www.kb.cert.org/vuls/id/975681