Information disclosure

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Digit Magazine aka com.magzter.digitmagazine application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Old Bike Mart aka com.magazinecloner.oldbike application @7F08017E for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Argus Leader Print Edition aka com.argusleader.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Russian Federation Traffic Rules aka com.russia.pdd application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PROF. USMAN ALI AWHEELA aka com.wPROFUAAWHEELA application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7460

The CVE-2014-7460 entry concerns the Android app Slots Heaven:FREE Slot Machine (com.twelvegigs.heaven.slots) 1.123, which does not verify X.509 certificates when connecting to SSL servers. The underlying vulnerability is improper certificate validation, allowing MITM attackers to spoof servers a...

CVE-2014-7339

The Cuanto Conoces A un Amigo aka com.makeitpossible.CuantoConocesAunAmigo application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7340

The Old Bike Mart aka com.magazinecloner.oldbike application @7F08017E for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7345

The CVE-2014-7345 entry concerns the DIYChatroom Android app (package com.tapatalk.diychatroomcom) version 3.4.0. Affected component: SSL/TLS certificate verification is missing when validating server certificates, allowing a man-in-the-middle to spoof servers and reveal sensitive information via...

CVE-2014-7444

The Baidu Navigation aka com.baidu.navi application 3.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7331

The TodaysSeniorsNetwork aka com.wTodaysSeniorsNetwork application 0.21.13245.84038 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7116

The NRA Journal aka com.magazinecloner.nationalrifleassociationjournal application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7360

The How To Boil Eggs aka com.appmakr.app842173 application 251333 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7056

The Yeast Infection aka com.wyeastinfectionapp application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7128

The Toyota OC aka com.tapatalk.toyotaownersclubcomforums application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7413

The Rajendra Suriji aka com.rajendrasuriji.nakodabhairav.com application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7408

The CVE-2014-7408 entry applies to the Gary Johnson for President ’12 Android app (package com.GaryJohnson2012, version 0.75.13439.53899). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensit...

CVE-2014-7472

The CSApp - Colegio San Agustin aka com.goodbarber.csapp application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...