CVE-2014-5766

The CVE-2014-5766 entry concerns the Uber B2B Android application version 1.9, which does not verify X.509 certificates from SSL servers. This misconfiguration enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. The available...

CVE-2014-5822

The VK Kate Mobile aka com.perm.kate application 9.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5792

The Reign of Dragons: Build-Battle aka net.gree.android.pf.greeapp57501 application 2.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5855

The CJmall aka com.cjoshppingphone application 4.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5833

The CVE-2014-5833 entry concerns the FriendCaster Chat app (com.handmark.friendcaster.chat) for Android. The affected component is the SSL/TLS certificate verification in the app, which does not verify X.509 certificates from SSL servers. This behavior can enable a man-in-the-middle (MITM) attack...

CVE-2014-5836

The CVE-2014-5836 entry concerns the GittiGidiyor Android app (package com.gittigidiyormobil) version 1.4.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

CVE-2014-5716

The GUNSHIP BATTLE : Helicopter 3D aka com.theonegames.gunshipbattle application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5846

The CVE-2014-5846 entry affects the Android app The Fairy Princess Makeover Salon (package com.mobgams.dressup.fairy.princess.makeover) version 1.7 . The vulnerability is that the app does not verify X.509 SSL certificates , enabling a Man‑in‑the‑Middle attacker to spoof servers and obtain sensit...

CVE-2014-5752

The wTradersActivity aka com.wTradersActivity application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5844

The Alsunna aka com.wAlsunna application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5739

The Garfield's Diner aka com.webprancer.google.GarfieldsDiner application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5823

CVE-2014-5823 concerns The Cleaner - Speed up & Clean (com.liquidum.thecleaner) for Android v1.4.2, where SSL servers are not verified against X.509 certificates. This models a classic MITM risk: an attacker could spoof a trusted server and read or alter sensitive data transmitted over TLS. The c...

CVE-2014-5827

The Ibotta - Better than Coupons. aka com.ibotta.android application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5777

CVE-2014-5777 affects the Android app icon wallpaper dressup-CocoPPa (jp.united.app.cocoppa) version around 2.8.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted c...

CVE-2014-5849

The CVE-2014-5849 entry concerns the Maleficent Free Fall Android app (package com.disney.maleficent_goo) v1.2.0. The vulnerability is failure to verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate....

CVE-2014-5689

The Runtastic Road Bike aka com.runtastic.android.roadbike.lite application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5676

The Township aka com.playrix.township application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5660

The TN Members 1st FCU-RDC aka com.metova.cuae.tmffcu application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5635

The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5594

The CIBC Mobile Banking aka com.cibc.android.mobi application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...