Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 24

The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-09-29 No fix listed CWE-310
Priority LOW 24

The Renny McLean Ministries (aka com.subsplash.thechurchapp.s_GJQX72) application 2.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtai…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-09-29 No fix listed CWE-310