CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Books aka com.wBooksForSale application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Tickets aka com.xcr.android.buytickets application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5735

The Buy A Gift (com.wBuyAGift) Android app version 13529.90084 does not verify SSL/X.509 certificates, allowing MITM attackers to spoof servers and capture sensitive data via crafted certificates. This is CVE-2014-5735; supported by NVD/NIST and related records in connected documents. No exploit ...

CVE-2014-5736

The CVE-2014-5736 entry concerns the Android app Buy Coins (com.wBuyCoins) version 0.62.13364.24150. The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, allowing MITM attackers to spoof SSL servers and read sensitive information via a crafted ce...

CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5757

The CVE-2014-5757 entry affects the Android app Buy Tickets (com.xcr.android.buytickets) version 2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5757

The Buy Tickets aka com.xcr.android.buytickets application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5756

The CVE-2014-5756 entry concerns the Android app “Buy 99 Cents Only Products” (com.ww99CentsOnlyStores) version 0.1, which does not validate X.509 certificates when connecting to SSL servers. This creates a susceptibility to man-in-the-middle attacks where a crafted certificate can spoof servers ...

CVE-2014-5756

The Buy 99 Cents Only Products aka com.ww99CentsOnlyStores application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5734

The CVE-2014-5734 entry concerns the Android app Buy Books (com.wBooksForSale) version 0.1, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

CVE-2014-5635

The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5577

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5635

The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...