Priority LOW 24
The House365 Radio (aka com.nobexinc.wls_27853803.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive info…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-21 · No fix listed CWE-310
Priority LOW 24
The Jazz Lovers Radio (aka com.nobexinc.wls_99273254.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-21 · No fix listed CWE-310
Priority LOW 24
The Fabuestereo 88.1 FM (aka com.nobexinc.wls_27892411.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-21 · No fix listed CWE-310
Priority LOW 24
The Asylum! (aka com.nobexinc.wls_96362255.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-19 · No fix listed CWE-310
Priority LOW 24
The Amnesia Groove (aka com.nobexinc.wls_88552576.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive info…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-19 · No fix listed CWE-310
Priority LOW 24
The Talk Radio Europe (aka com.nobexinc.wls_31251464.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-19 · No fix listed CWE-310
Priority LOW 24
The musica de barrios sonideros (aka com.nobexinc.wls_93155702.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-19 · No fix listed CWE-310
Priority LOW 24
The Master Mix (aka com.nobexinc.wls_24832536.rc) application 3.3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-16 · No fix listed CWE-310
Priority LOW 24
The Abram Radio Groove! (aka com.nobexinc.wls_79226887.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-04 · No fix listed CWE-310
Priority LOW 24
The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-03 · No fix listed CWE-310
Priority LOW 24
The ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitiv…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-09-25 · No fix listed CWE-310
Priority LOW 24
The Joint Radio Blues (aka com.nobexinc.wls_69685189.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00266 · Published 2014-10-21 · No fix listed CWE-310