CVE-2014-6802

The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6795

The CVE-2014-6795 entry affects The Beekeeping Forum Android app (version 3.9.15) and is due to the app not verifying X.509 certificates from SSL servers, enabling MITM-style disclosure of sensitive information. The NVD notes a CVSSv2 base score of 5.4 (MEDIUM) with partial confidentiality/integr...

CVE-2014-6795

The Beekeeping Forum aka com.tapatalk.supporttapatalkcomxxxxx application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6799

The Investigation Tool (gov.ca.post.lp.itool) 1.0.0 for Android is affected. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The connected doc...

CVE-2014-6801

CVE-2014-6801 affects the Android app “frank matano” (version 1.0). The root cause is failure to verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public data from NVD lists a CVSS v2 ...

CVE-2014-6748

The GEMAIRE's HVAC Assist aka com.es.Gemaire application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Meteo Belgique aka com.mobilesoft.belgiumweather application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6763

The CVE-2014-6763 entry applies to the Android app Codename Birdgame (package com.devsecondfictioncom.devsecondfictioncom.birdadhoc) version 1.0, where the component fails to verify X.509 certificates for SSL connections. Root cause: lack of certificate validation allows MITM attackers to spoof s...

CVE-2014-6764

The Assyrian aka com.b2.assyrian.activity application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6754

The Vector Outage Manager aka nz.co.vector.outagemanager application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6758

The Qin Story aka com.kongzhong.tjmammoth.android.cqqslengp application 1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6740

The XD Forum aka com.tapatalk.xdforumcomforum application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6743

The Hearsay: A Social Party Game aka air.com.lip.per application 1.7.000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6747

The SeeOn aka com.seeon application 4.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6746

The Infiniti Roadside Assistance aka com.ccas.rsa.common.infiniti application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Well-Being Connect Mobile aka com.healthways.wellbeinggo application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SeeOn aka com.seeon application 4.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6746

The Infiniti Roadside Assistance aka com.ccas.rsa.common.infiniti application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6724

The Soap Making aka com.tapatalk.soapmakingforumcom application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...