CVE-2014-7335

The Liver Health - Hepatitis C aka gov.nyc.dohmh.HepC application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7340

The Old Bike Mart aka com.magazinecloner.oldbike application @7F08017E for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7331

The TodaysSeniorsNetwork aka com.wTodaysSeniorsNetwork application 0.21.13245.84038 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7135

The Ayuntamiento de Coana aka com.wInfoCoa application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7323

The Dignity Dialogue aka com.magzter.dignitydialogue application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7125

The Motor aka com.magzter.motorhwpublishing application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The BBC Knowledge Magazine aka com.magzter.bbcknowledge application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Enchanted Fashion Crush aka com.tabtale.springcrushbundleint application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 7725.com Three Kingdoms aka com.platform7725.youai.jiejian application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Gary Johnson for President '12 aka com.GaryJohnson2012 application 0.75.13439.53899 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Football Espana magazine aka com.triactivemedia.footballespana application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Digit Magazine aka com.magzter.digitmagazine application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Argus Leader Print Edition aka com.argusleader.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Russian Federation Traffic Rules aka com.russia.pdd application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PROF. USMAN ALI AWHEELA aka com.wPROFUAAWHEELA application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Old Bike Mart aka com.magazinecloner.oldbike application @7F08017E for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7460

The CVE-2014-7460 entry concerns the Android app Slots Heaven:FREE Slot Machine (com.twelvegigs.heaven.slots) 1.123, which does not verify X.509 certificates when connecting to SSL servers. The underlying vulnerability is improper certificate validation, allowing MITM attackers to spoof servers a...

CVE-2014-7345

The CVE-2014-7345 entry concerns the DIYChatroom Android app (package com.tapatalk.diychatroomcom) version 3.4.0. Affected component: SSL/TLS certificate verification is missing when validating server certificates, allowing a man-in-the-middle to spoof servers and reveal sensitive information via...