CVE-2014-7455

Affected software : Zoella Unofficial Android app (package com.automon.ay.zoella), version 1.4.0.5. Root cause : the implementation does not verify X.509 certificates from SSL servers, enabling MITM spoofing via crafted certificates. Impact : confidentiality, integrity, and possibly availability ...

CVE-2014-7107

The Human Factor aka com.magzter.thehumanfactor application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7102

The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7091

The Sacramento Kings aka com.tibco.gse.sports application 6.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7071

The Autocar India aka com.magzter.autocarindia application 3.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7076

The Sanctuary Asia aka com.magzter.sanctuaryasia application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7077

The Gulf Coast Educators FCU aka com.metova.cuae.gcefcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7059

The TheDevildogGamer aka com.wTheDevildogGamer application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Ubooly aka com.ubooly.ubooly application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Hong Kong Tatler Society aka com.magzter.hongkongtatlersociety application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7087

The Top Roller Coasters Europe 1 aka com.appaapps.top10tallesteuropeanrollercoasters1 application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7092

The Ubooly aka com.ubooly.ubooly application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7076

The CVE-2014-7076 entry applies to the Sanctuary Asia Android app (3.0), where the component does not verify X.509 certificates from SSL servers. This vulnerability enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The accepted root cause is SSL trus...

CVE-2014-7059

The CVE-2014-7059 entry concerns TheDevildogGamer Android app (package com.wTheDevildogGamer) v1.0, which does not verify X.509 certificates from SSL servers. This root cause enables MITM attackers to spoof servers and access sensitive information via a crafted certificate. Public references in t...

CVE-2014-7059

The TheDevildogGamer aka com.wTheDevildogGamer application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7063

CVE-2014-7063 affects the Bikers Romagna (com.bikers.romagna) Android app (version 1.0). The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provid...

CVE-2014-7091

The Sacramento Kings aka com.tibco.gse.sports application 6.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7035

The Harmonizers Planet aka uk.co.pixelkicks.fifthharmony application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7040

The UniCredit Investors aka eu.unicreditgroup.brand.ucinvestors application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6990

The Albasit artes y danza aka com.adianteventures.adianteapps.albasitartesydanza application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...