CVE-2014-5950

The NOW aka com.smtown.smtownnow.androidapp application 0.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5952

The E-Dziennik aka com.librus.dziennik application 0.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5940

The PocketPC.ch aka com.tapatalk.pocketpcch application 3.9.51 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5927

The CVE covers the FastCustomer Android app (v3) which fails to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted certificate. The provided documents do not specify affected versions beyond Android app 3 or any reme...

CVE-2014-5934

CVE-2014-5934 affects the Flurv Chat app (com.flurv.android) version 4.3.3 on Android, where SSL/TLS connections do not verify X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected sources corroborat...

CVE-2014-5948

CVE-2014-5948 affects the Obama for America Android app (com.barackobama.ofa) v1.02. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a base ...

CVE-2014-5927

The FastCustomer -- Fast Customer aka www.fastcustomer.com application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5951

The CVE-2014-5951 entry concerns the SinoPac app (com.sionpac.app.SinoPac) for Android, version 2.4.2, where the SSL/TLS implementation does not verify X.509 certificates from servers. Root cause: missing certificate verification in the app’s TLS handling. Impact: enables man-in-the-middle attack...

CVE-2014-5954

The State Bank Anywhere aka com.sbi.SBIFreedomPlus application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5917

The Slideshow 365 aka com.Slideshow application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5915

The Tigo Copa Mundial FIFA 2014 aka com.fwc2014.millicom.and application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5909

The watcha aka com.frograms.watcha application 2.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Tigo Copa Mundial FIFA 2014 aka com.fwc2014.millicom.and application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5910

The Dog Whistle aka com.dogwhistle.dogtrainingandroidapp application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5917

The Slideshow 365 aka com.Slideshow application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5899

The Nespresso aka com.nespresso.activities application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Beauty Bible - App for Girls aka com.my.beauty.bible application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Parallel Mafia MMORPG aka com.perblue.pm.client application @7F070000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5894

The AireTalk: Text, Call, & More! aka com.pingshow.amper application 2.0.73 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5886

The iVysilani ceske televize aka cz.motion.ivysilani application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...