CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Toraware Takojyou aka ltd.pte.wavea.torawaretakojyou application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

CVE-2014-6909 affects the Coca-Cola FM Peru Android app (com.enyetech.radio.coca_cola.fm_pe) version 2.0.41716, which does not verify X.509 certificates from SSL servers. This allows Man‑in‑the‑Middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The base ...

CVE-2014-6919

The CVE-2014-6919 entry concerns the Android app Metalcasting Newsstand (air.com.yudu.ReaderAIR3017071) , version 3.12.0 . The vulnerability is that the application does not verify X.509 certificates when connecting to SSL servers, enabling a man-in-the-middle (MITM) attacker to spoof servers and...

CVE-2014-6921

The CVE-2014-6921 entry affects the Buckhorn Grill (com.orderingapps.buckhorn) Android app version 2.8. It describes a failure to verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and access sensitive data via a crafted certificate. The NVD entry provi...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6919

The Metalcasting Newsstand aka air.com.yudu.ReaderAIR3017071 application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6913

The Dive The World aka com.paperton.wl.divetheworld application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6908

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6925

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6927

The Myanmar Housing : mmHome aka com.mmhome3 application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6896

The Yik Yak aka com.yik.yak application 2.0.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6894

The Lucktastic aka com.lucktastic.scratch application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Jazeera Airways aka com.winit.jazeeraairways application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EAGE Amsterdam 2014 aka com.coreapps.android.followme.eage2014 application 6.1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6895

The CVE-2014-6895 entry affects the Android app Throne Rush (package com.progrestar.bft) version 2.3.10. The issue is that the application does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-6890

The CouponCabin - Coupons & Deals aka com.couponcabin application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6882

The Western Federal Credit Union aka com.kerrata.pulse.western application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...