CVE-2014-5980

The Genertel aka com.genertel application 2.6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5987

The CVE-2014-5987 entry concerns the My3 app (com.my3) on Android, which does not verify X.509 certificates when establishing SSL connections. This behavior allows man-in-the-middle attackers to spoof SSL servers and exfiltrate sensitive information via a crafted certificate. The supplied documen...

CVE-2014-5960

The BundesArztsuche aka de.kbv.bas application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cross site request forgery (csrf)

The Designs Nail Arts aka com.decoracionesnailart.flickr application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The russiananime aka com.rareartifact.russiananime68A5CCFE application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The BabyBus aka com.sinyee.babybus.concert.ru application 3.91 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dreamland Super Theme GO Gold aka com.gau.go.launcherex.viptheme.dreamland.gold application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5961

The CVE-2014-5961 entry details that the Android app RussianAnime (package com.rareartifact.russiananime68A5CCFE) ||version 1|| does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Affected compon...

CVE-2014-5968

The iGolf - Golf GPS aka com.igolf application 20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5949

The TICKET APP - Concerts & Sports aka com.xcr.android.ticketapp application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5933

The Coke Studio 7 aka com.cokeshare.pakistan application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Monster Makeup aka com.bearhugmedia.androidmonster application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SinoPac aka com.sionpac.app.SinoPac application 2.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5940

The PocketPC.ch aka com.tapatalk.pocketpcch application 3.9.51 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5950

The NOW aka com.smtown.smtownnow.androidapp application 0.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5952

The E-Dziennik aka com.librus.dziennik application 0.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5927

The CVE covers the FastCustomer Android app (v3) which fails to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted certificate. The provided documents do not specify affected versions beyond Android app 3 or any reme...

CVE-2014-5934

CVE-2014-5934 affects the Flurv Chat app (com.flurv.android) version 4.3.3 on Android, where SSL/TLS connections do not verify X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected sources corroborat...

CVE-2014-5927

The FastCustomer -- Fast Customer aka www.fastcustomer.com application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5948

CVE-2014-5948 affects the Obama for America Android app (com.barackobama.ofa) v1.02. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a base ...