Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 24

The Hundred Thousands Kid Book (aka it.tinytap.attsa.thousands) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-21 No fix listed CWE-310
Priority LOW 24

The Not Lost Just Somewhere Else (aka it.tinytap.attsa.notlost) application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-10-20 No fix listed CWE-310
Priority LOW 24

The Math for Kids - Subtraction (aka it.tinytap.attsa.deepsub) application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sens…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00266 Published 2014-09-29 No fix listed CWE-310