|
277401
|
- |
|
wtmdesktop_project
|
wtmdesktop
|
The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive infor…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6638
|
2024-11-21 11:14 |
2014-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277402
|
- |
|
praninc
|
facebook_facts
|
The Facebook Facts (aka com.wFacebookFacts) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensi…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6637
|
2024-11-21 11:14 |
2014-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277403
|
- |
|
rsupport
|
lg_telepresence
|
The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers a…
|
CWE-310
Cryptographic Issues
|
CVE-2014-6636
|
2024-11-21 11:14 |
2014-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277404
|
- |
|
microsoft
|
nokia_asha_501_software nokia_asha_501
|
Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or d…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-6602
|
2024-11-21 11:14 |
2014-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277405
|
- |
|
wireshark
|
wireshark
|
The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operation…
|
CWE-399
Resource Management Errors
|
CVE-2014-6432
|
2024-11-21 11:14 |
2014-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277406
|
- |
|
wireshark
|
wireshark
|
Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-6431
|
2024-11-21 11:14 |
2014-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277407
|
- |
|
wireshark
|
wireshark
|
The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote at…
|
CWE-20
Improper Input Validation
|
CVE-2014-6430
|
2024-11-21 11:14 |
2014-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277408
|
- |
|
wireshark
|
wireshark
|
The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allow…
|
CWE-20
Improper Input Validation
|
CVE-2014-6429
|
2024-11-21 11:14 |
2014-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277409
|
- |
|
wireshark
|
wireshark
|
The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-6428
|
2024-11-21 11:14 |
2014-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277410
|
- |
|
wireshark
|
wireshark
|
Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-6427
|
2024-11-21 11:14 |
2014-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|