CVE-2014-6870

The BGEnergy aka com.bluegrass.smartapps application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6861

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6864

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PNC Virtual Wallet aka com.pnc.ecommerce.mobile.vw.android application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Mootorratturid & biker.ee aka ee.digitalfruit.mootorratturid application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6858

CVE-2014-6858 affects The Mostafa Shemeas Android app (1.0). The vulnerability is that it does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. According to the sources, this le...

CVE-2014-6861

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6871

The CVE-2014-6871 entry concerns the Android app Hogs Fly Crazy (com.pedrojayme.hogsflycrazy) version 1.0.0, which does not verify X.509 certificates from SSL servers. This configuration flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...

CVE-2014-6876

The CVE-2014-6876 entry concerns the American Express Serve Android app (com.serve.mobile). Affected component: SSL/TLS certificate validation in the app; root cause: the application does not verify X.509 certificates from SSL servers. Impact: enables man-in-the-middle attackers to spoof servers ...

CVE-2014-6862

The ArtAcces aka cat.gencat.mobi.artacces application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6854

CVE-2014-6854 affects the EyeXam Android app (com.globaleyeventures.eyexam) version 1.4. The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. Root cause is mi...

CVE-2014-6848

The DS file aka com.synology.DSfile application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6846

The Four Seasons Beverly Hills aka com.intelitycorp.FourSeasons.android.ice application @7F050007 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6841

The CVE-2014-6841 entry relates to the RTI INDIA app (package com.vbulletin.build_890), version 3.8.21 for Android, which does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof HTTPS servers and extract sensitive information via a crafted c...

CVE-2014-6839

CVE-2014-6839 affects the Alma Corinthiana (com.alma.corinthiana) Android app 1.0, where the app does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected sources confirm the vulnerabi...

CVE-2014-6831

The Hippo Studio aka com.appgreen.hippostudio application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6836

The DS photo+ aka com.synology.dsphoto application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6817

The Cove aka org.covechurch.app application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6814

The Sentinels Randomizer aka com.mikehipps.sentinelsrandomizer application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...