CVE-2014-7659

The ExpeditersOnline.com Forum aka com.quoord.tapatalkeo.activity application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Slingshot Forum aka com.tapatalk.theslingshotforumcom application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7777

The CVE-2014-7777 entry concerns The Slingshot Forum Android app (version 3.9.14, package com.tapatalk.theslingshotforumcom). According to NVD/NVD-related records, the vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to s...

CVE-2014-7659

CVE-2014-7659 affects the Android app ExpeditersOnline.com Forum (com.quoord.tapatalkeo.activity) 3.7.13. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The ...

CVE-2014-7659

The ExpeditersOnline.com Forum aka com.quoord.tapatalkeo.activity application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7777

The Slingshot Forum aka com.tapatalk.theslingshotforumcom application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7585

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7585

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7585

The CVE affects the Android app Biplane Forum (com.gcspublishing.biplaneforum) version 3.7.14, which does not verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The p...

CVE-2014-7008

The Forum FrAndroid beta aka com.tapatalk.forumfrandroidcom application 3.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7020

The Diabetes Forum aka com.tapatalk.diabetescoukdiabetesforum application 3.9.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7022

The Modelisme.com forum/portail aka com.tapatalk.modelismecomforum application 3.6.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Modelisme.com forum/portail aka com.tapatalk.modelismecomforum application 3.6.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Forum FrAndroid beta aka com.tapatalk.forumfrandroidcom application 3.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7022

The CVE-2014-7022 entry concerns the Modelisme.com forum/portail Android app (package com.tapatalk.modelismecomforum) version 3.6.9. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive infor...

CVE-2014-7020

The Diabetes Forum aka com.tapatalk.diabetescoukdiabetesforum application 3.9.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7022

The Modelisme.com forum/portail aka com.tapatalk.modelismecomforum application 3.6.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7020

CVE-2014-7020 affects the Diabetes Forum Android app (com.tapatalk.diabetescoukdiabetesforum) version 3.9.30. The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

CVE-2014-7008

The Forum FrAndroid beta aka com.tapatalk.forumfrandroidcom application 3.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...