Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Candy Girl Party Makeover Project Clear all filters
TI-2014-05535 CVE-2014-6696 · GHSA-qr5v-8q9r-729f

The Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application…

Priority LOW 24

The Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers a…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-24 No fix listed CWE-310