Search vulnerabilities

Results 2

Export CSV
CVE-2014-6862

The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2019-12837

The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors