Okazawa Yoshihiro

Researcher fromCryptography Laboratory, Information and Communication Engineering, Graduate School of Engineering, Tokyo Denki University
#22596of 56,330
11.7Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2022-19647
4.3
2022-06-14
Unknown · Mobaoku-Auction&Flea Market App · CVE-2022-29482
**Name of the Vulnerable Software and Affected Versions** Mobaoku-Auction&Flea Market App for iOS versions prior to 5.5.16 **Description** The issue is related to improper server certificate verification, which may allow an attacker to eavesdrop on encrypted communication via a man-in-the-middle attack. **Recommendations** For Mobaoku-Auction&Flea Market App for iOS versions prior to 5.5.16, update to version 5.5.16 or later to resolve the issue.
PT-2021-14277
7.4
2021-10-13
Unknown · Snkrdunk Market Place App · CVE-2021-20833
Name of the Vulnerable Software and Affected Versions: SNKRDUNK Market Place App for iOS versions prior to 2.2.0 Description: The issue allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate, due to improper server certificate verification. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue.