Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Animoca Clear all filters
TI-2014-04810 CVE-2014-5859 · GHSA-3vvm-w3xq-2xq2

The Star Girl: Colors of Spring (aka com.animoca.google.starGirlSpring) application 3.4.1…

Priority LOW 24

The Star Girl: Colors of Spring (aka com.animoca.google.starGirlSpring) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obt…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-10 No fix listed CWE-310
TI-2014-04671 CVE-2014-5717 · GHSA-f24m-4r4g-hxwm

The Fashion Style (aka com.thirtysixyougames.google.starGirlSingapore) application 3.4.1…

Priority LOW 24

The Fashion Style (aka com.thirtysixyougames.google.starGirlSingapore) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obta…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
TI-2014-04661 CVE-2014-5707 · GHSA-382x-f95g-95c7

The Bunny Run (aka com.stargirlgames.google.bunnyrun) application 1.1.2 for Android does…

Priority LOW 24

The Bunny Run (aka com.stargirlgames.google.bunnyrun) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive info…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
TI-2014-04525 CVE-2014-5569 · GHSA-rw2j-797h-3r62

The Star Girl (aka com.animoca.google.starGirl) application 3.4.1 for Android does not…

Priority LOW 24

The Star Girl (aka com.animoca.google.starGirl) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-09 No fix listed CWE-310