CVE-2014-7354

The Penumbra eMag aka com.magzter.penumbraemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7107

The Human Factor aka com.magzter.thehumanfactor application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7102

The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7091

The Sacramento Kings aka com.tibco.gse.sports application 6.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7071

The Autocar India aka com.magzter.autocarindia application 3.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7076

The Sanctuary Asia aka com.magzter.sanctuaryasia application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7077

The Gulf Coast Educators FCU aka com.metova.cuae.gcefcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7059

The TheDevildogGamer aka com.wTheDevildogGamer application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Ubooly aka com.ubooly.ubooly application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Hong Kong Tatler Society aka com.magzter.hongkongtatlersociety application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7087

The Top Roller Coasters Europe 1 aka com.appaapps.top10tallesteuropeanrollercoasters1 application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7092

The Ubooly aka com.ubooly.ubooly application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7059

The CVE-2014-7059 entry concerns TheDevildogGamer Android app (package com.wTheDevildogGamer) v1.0, which does not verify X.509 certificates from SSL servers. This root cause enables MITM attackers to spoof servers and access sensitive information via a crafted certificate. Public references in t...

CVE-2014-7076

The CVE-2014-7076 entry applies to the Sanctuary Asia Android app (3.0), where the component does not verify X.509 certificates from SSL servers. This vulnerability enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The accepted root cause is SSL trus...

CVE-2014-7059

The TheDevildogGamer aka com.wTheDevildogGamer application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7091

The Sacramento Kings aka com.tibco.gse.sports application 6.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7063

CVE-2014-7063 affects the Bikers Romagna (com.bikers.romagna) Android app (version 1.0). The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provid...

CVE-2014-7040

The UniCredit Investors aka eu.unicreditgroup.brand.ucinvestors application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7035

The Harmonizers Planet aka uk.co.pixelkicks.fifthharmony application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6996

The Martial Arts Battle Card aka com.tapenjoy.zjh.tw application 1.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...