CVE-2014-7782

CVE-2014-7782 affects the Android application “Macedonia Hacienda Hotel” (package appinventor.ai_orolimpio999.HotelMacedonia), version 1.0. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inf...

CVE-2014-7705

The Atkins Diet Free Shopping List aka com.wAtkinsDietFreeShoppingList application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7710

CVE-2014-7710 affects the Android app India Today Telugu (com.magzter.indiatoday.telugu) version 3.02, where SSL certificate validation is not performed. This allows MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Per NVD, the CVSS v2 base score is 5.4 (...

CVE-2014-7727

The CVE-2014-7727 entry concerns the Android application Dj Brad H (com.dreamstep.wDjBradH) version 0.90, which fails to verify X.509 certificates when establishing SSL connections. This certificate validation bypass enables potential man-in-the-middle attackers to spoof servers and steal or eave...

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7781

CVE-2014-7781 affects the Android app The Marijuana Handbook Lite - Weed (com.fallacystudios.marijuanahandbooklite), version 3.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and acces...

CVE-2014-7795

The CVE-2014-7795 entry concerns the Android app Harpers Bazaar Art (package com.itp.harpersart, reference @7F080181) that does not verify X.509 certificates when establishing SSL connections. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7724

The Chemssou Blink aka com.chemssou.blink application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4890

CVE-2014-4890 affects the Android app Nano Digest (com.magzter.nanodigest) v3.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Public sources (NVD and related reco...

CVE-2014-7685

The CVE-2014-7685 entry concerns the Razer Comms (com.razerzone.comms) Android app version 1.3.07, which fails to verify X.509 certificates from SSL servers. This weakens TLS, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The conne...

CVE-2014-7695

CVE-2014-7695 affects the Android app easaa Baoneng (com.easaa.baoneng) 1.0. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected sources confirm ...

CVE-2014-7754

The CVE-2014-7754 entry applies to Condor S.E. (com.app_condorsoutheast.layout) Android app, version 1.399, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in SSL certificate validation, allowing man-in-the-middle attackers to spoof servers and obtain ...

CVE-2014-7764

CVE-2014-7764 affects the Semper Invicta Fitness Android app (package com.semper.invicta.fitness) version 1.1. The connected documents confirm the vulnerability: the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-7772

The MB Tickets Android app (package com.xcr.android.mbtickets) version 3.0.1 is affected by an SSL trust issue: it does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base ...

CVE-2014-7793

The CVE-2014-7793 entry refers to the Android app CB - Calciatori Brutti (com.calciatori.brutti) 1.0, which does not verify X.509 certificates when connecting to SSL servers. This lack of certificate validation can allow man-in-the-middle attackers to spoof servers and obtain sensitive informatio...

CVE-2014-7644

The CVE-2014-7644 entry concerns the Go MSX MLS Android app (com.doapps.android.realestate.RE_16b9c09c4d5b0e174208f35e7c49f9a0), version 2.3.4.MR3, where SSL servers’ X.509 certificates are not verified. This weakens trust in TLS connections, enabling man-in-the-middle attackers to spoof servers ...

CVE-2014-7779

CVE-2014-7779 affects the Android app “Kuran'in Bilimsel Mucizeleri” (package com.wKurannBilimselMucizeleri) v0.1, which does not verify X.509 certificates from SSL servers. The consequence is susceptibility to MITM attackers who can spoof servers and obtain sensitive information through a crafte...

CVE-2014-7785

CVE-2014-7785 affects the Android app “AAAA Discount Bail” (com.onesolutionapps.aaaadiscountbailandroid) version 1.1. The issue is failure to verify X.509 certificates when connecting to SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and extract sensitive information via a cra...

CVE-2014-7797

CVE-2014-7797 concerns the Android app “The Thai food” (package com.foods.thaifood) version 1.0, which does not verify X.509 certificates when connecting to SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and potentially exfiltrate sensitive information via a crafted c...

CVE-2014-4906

The Brisbane & Queensland Alert aka com.queensland.alert application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...