CVE-2014-7721

The President Clicker aka com.flexymind.pclicker application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7737

The FMAC : Federation Culinaire aka com.fmac application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7741

The Healing Bookstore aka com.wHealingBookstore application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7742

The Noticias del Vaticano aka com.wNoticiasdelVaticano application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7748

The Garip Ve Ilginc Olaylar aka com.wGaripveeIlgincOlay application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7750

The Taster Magazine aka com.magazinecloner.taster application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7751

The Recetas de Tragos aka com.wRecetasdeTragos application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7754

The Condor S.E. aka com.appcondorsoutheast.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7763

The Listen up! mirucho aka jp.ameba.kiiteyo.android application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7778

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7779

The Kuran'in Bilimsel Mucizeleri aka com.wKurannBilimselMucizeleri application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4890

CVE-2014-4890 affects the Android app Nano Digest (com.magzter.nanodigest) v3.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Public sources (NVD and related reco...

CVE-2014-4897

CVE-2014-4897 affects the Touriosity Travelmag Android app (package com.magzter.touriositytravelmag) version 3.1. The vulnerability is an ineffective validation of X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a cra...

CVE-2014-7642

Pegasus Airlines (com.wPegasusAirlines) Android app version 0.84.13503.96707 is affected by a flaw where SSL/TLS X.509 certificate validation is not performed, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. This can lead to partial information...

CVE-2014-7643

The CVE-2014-7643 entry concerns the C.R. Group (aka com.c.r.group) Android application version 1.0, which does not verify X.509 certificates from SSL servers. This failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connecte...

CVE-2014-7656

The CVE-2014-7656 entry pertains to the Android app Indian Management (package com.magzter.indianmanagement) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This flaw enables man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive inf...

CVE-2014-7692

The Lent Experience (com.wLentExperience) Android app v0.1 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. Affected component: SSL certificate validation in the app’s network st...

CVE-2014-7726

Golosinas Simpson1 (com.wGolosinasSimpson1) Android app 0.1 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information. The CVE is documented with CVSS v2 base score 5.4 (Medium) and partial confidentiality/integrity/availability...

CVE-2014-7593

The Mr Whippet - Yorkshire Ice aka com.appytimes.ice application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...