Show filters
247 Total Results
Displaying 161-170 of 247
Sort by:
Attacker Value
Unknown
CVE-2014-7670
Disclosure Date: October 21, 2014 (last updated October 05, 2023)
The Motor Town: Machine Soul Free (aka com.alawar.motortownfree) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-7460
Disclosure Date: October 19, 2014 (last updated October 05, 2023)
The Slots Heaven:FREE Slot Machine (aka com.twelvegigs.heaven.slots) application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-6715
Disclosure Date: September 25, 2014 (last updated October 05, 2023)
The SlotMachine (aka com.popoinnovation.SlotMachine) application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-5847
Disclosure Date: September 09, 2014 (last updated October 05, 2023)
The Big Win Slots - Slot Machines (aka com.gosub60.BigWinSlots) application 1.11.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2013-7235
Disclosure Date: April 29, 2014 (last updated October 05, 2023)
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
0
Attacker Value
Unknown
CVE-2013-7236
Disclosure Date: April 29, 2014 (last updated October 05, 2023)
Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
0
Attacker Value
Unknown
CVE-2013-7234
Disclosure Date: April 29, 2014 (last updated October 05, 2023)
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.
0
Attacker Value
Unknown
CVE-2013-0662
Disclosure Date: April 01, 2014 (last updated October 05, 2023)
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
0
Attacker Value
Unknown
CVE-2014-1439
Disclosure Date: February 05, 2014 (last updated October 05, 2023)
The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml handler, which allows remote attackers to conduct XML External Entity (XXE) attacks.
0
Attacker Value
Unknown
CVE-2013-4465
Disclosure Date: October 25, 2013 (last updated October 05, 2023)
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
0
