CVE-2014-7121

The Dhanam aka com.magzter.dhanam application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7418

The CVE-2014-7418 entry corresponds to the BBC Knowledge Magazine app (Android, version 3.01). Multiple connected sources confirm the vulnerability: the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat...

CVE-2014-7330

The XtendCU Mobile aka com.metova.cuae.xtend application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7307

CVE-2014-7307 affects the ForoSocuellamos Android app (version 1.1). The root cause is that the application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected document...

CVE-2014-7434

The RTSinfo aka ch.rts.rtsinfo application 1.4.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7394

CVE-2014-7394 affects the Android app www.alaaliwat.com (com.alaliwat.marsa) v4.9: it does not verify X.509 certificates from SSL servers, allowing MITM via crafted certificates and enabling exposure of sensitive data. Remediation details are not provided in the documents; no exploit status is st...

CVE-2014-7352

The CVE-2014-7352 entry affects the Android app India’s Anthem (appinventor.ai_opalfoxy83.India_Anthem) v1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7316

The Safe Arrival aka com.synrevoice.safearrival application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7371

The Magic Balloonman Marty Boone aka com.appmartyboone.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7454

The Detox Juicing Diet Recipes aka com.wDetoxJuicingDietRecipes application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7483

The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7119

The GNAM 2013 aka com.beepeers.gndam application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7354

The CVE-2014-7354 entry affects the Penumbra eMag (com.magzter.penumbraemag) Android app (version 3.0). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2014-7452

The Shaklee Product Catalog aka com.wProductCatalog application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7455

Affected software : Zoella Unofficial Android app (package com.automon.ay.zoella), version 1.4.0.5. Root cause : the implementation does not verify X.509 certificates from SSL servers, enabling MITM spoofing via crafted certificates. Impact : confidentiality, integrity, and possibly availability ...

CVE-2014-7414

CVE-2014-7414 affects the Android app CLEO Malaysia (com.magzter.cleomalaysia) version 3.01. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. CVSS metrics ...

CVE-2014-7353

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7367

The TuS 1947 Radis aka com.tus1947radis application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7314

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7427

The Hunting Trophy Whitetails aka com.wHuntingTrophyWhitetails application 0.75.13441.88885 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...