Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 24

The Demon (aka com.ireadercity.c24) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craf…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The A Very Short History of Japan (aka com.ireadercity.c51) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitiv…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The Sword (aka com.ireadercity.c25) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craf…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The 100 Books (aka com.ireadercity.c20) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The Short Stories (aka com.ireadercity.c48) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The Hesheng 80 (aka com.ireadercity.c29) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-19 No fix listed CWE-310