CVE-2014-6943

The NVD/NVD-linked records identify CVE-2014-6943: the Konigsleiten (com.knigsleiten) Android app 1.0 does not verify X.509 certificates from SSL servers, so TLS connections can be intercepted by MITM attackers who present a crafted certificate to obtain sensitive data. Root cause: missing X.509 ...

CVE-2014-6950

The Mt. Airy News aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148 application 1.0069.b0069 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6952

The Manga Facts aka app.mangafacts.ar application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6948

The TH3 professional Al Mohtarif aka com.th3professional.almohtarif application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EXPRESS aka com.gpshopper.express.android application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6937

The China CITIC Bank Credit Card aka com.citiccard.mobilebank application 3.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6936

The IDS 2013 aka de.mobileeventguide.ids2013 application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6925

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Toraware Takojyou aka ltd.pte.wavea.torawaretakojyou application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6919

The CVE-2014-6919 entry concerns the Android app Metalcasting Newsstand (air.com.yudu.ReaderAIR3017071) , version 3.12.0 . The vulnerability is that the application does not verify X.509 certificates when connecting to SSL servers, enabling a man-in-the-middle (MITM) attacker to spoof servers and...

CVE-2014-6921

The CVE-2014-6921 entry affects the Buckhorn Grill (com.orderingapps.buckhorn) Android app version 2.8. It describes a failure to verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and access sensitive data via a crafted certificate. The NVD entry provi...

CVE-2014-6909

CVE-2014-6909 affects the Coca-Cola FM Peru Android app (com.enyetech.radio.coca_cola.fm_pe) version 2.0.41716, which does not verify X.509 certificates from SSL servers. This allows Man‑in‑the‑Middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The base ...

CVE-2014-6919

The Metalcasting Newsstand aka air.com.yudu.ReaderAIR3017071 application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6908

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6913

The Dive The World aka com.paperton.wl.divetheworld application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6925

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...