VUMETRIC
CYBER PORTAL
Dashboard
Security News
Latest Vulnerabilities
Browse Vulnerabilities
by Vendors
by Products
by Categories
Weekly Reports
Vulnerabilities
>
Gratta Vinci Project
>
Gratta Vinci
> Medium
Exclude new CVEs:
DATE
CVE
VULNERABILITY TITLE
RISK
2014-09-22
CVE-2014-6006
The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
gratta-vinci-project
CWE-310
5.4
5.4