CVE-2014-7758

The CVE-2014-7758 entry corresponds to the AMKAMAL Science Portfolio Android app (package com.wAMKAMALSciencePortfolio) version 0.1, where the vulnerability is an inability to verify X.509 certificates from SSL servers. The root cause is missing TLS/SSL certificate validation, which can allow man...

CVE-2014-7726

The Golosinas Simpson1 aka com.wGolosinasSimpson1 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7726

Golosinas Simpson1 (com.wGolosinasSimpson1) Android app 0.1 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information. The CVE is documented with CVSS v2 base score 5.4 (Medium) and partial confidentiality/integrity/availability...

CVE-2014-4897

CVE-2014-4897 affects the Touriosity Travelmag Android app (package com.magzter.touriositytravelmag) version 3.1. The vulnerability is an ineffective validation of X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a cra...

CVE-2014-4903

CVE-2014-4903 affects the Android app Kakao Bingo Garden (com.mocoga.bingogarden) version 1.0.14. The underlying issue is that the app does not verify X.509 SSL certificates when connecting to servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2014-7724

CVE-2014-7724 describes a vulnerability in the Android app Chemssou Blink (com.chemssou.blink) 1.0 where SSL/TLS X.509 certificates are not verified by the client. This lack of certificate validation enables man-in-the-middle attacks, allowing attackers to spoof servers and access sensitive infor...

CVE-2014-7743

CVE-2014-7743 concerns the Android app Humor Ironias y Realidades (com.wHumork) version 0.63.13371.13576, where the component fails to verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-7650

The CVE-2014-7650 entry concerns the Android 1.0 JJA app (com.felix.jja), which does not verify X.509 certificates from SSL servers. Root cause: lack of certificate validation enabling MITM-style spoofing of servers and potential exposure of sensitive data. Affected component is the app’s SSL/TLS...

CVE-2014-7628

The CVE-2014-7628 entry concerns the Acorn Comms Android application (version 3.0) that does not verify X.509 certificates from SSL servers. Root cause: missing certificate verification enabling man-in-the-middle attacks to spoof servers and exfiltrate sensitive information via a crafted certific...

CVE-2014-7640

The CVE-2014-7640 entry concerns The Hotel Room (com.wHotelRoom) Android app version 0.1. The affected component is the app’s SSL/TLS certificate verification, which does not verify X.509 certificates from SSL servers. This omission allows man-in-the-middle attackers to impersonate legitimate ser...

CVE-2014-7620

The Authors On Tour - Live! aka com.appmakr.app122286 application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7521

The Anderson Musaamil aka com.appandersonmusaamil.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7533

The NotreDame Seguradora aka br.com.notredame.mobile.NotreDame application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Apparound BLEND aka com.apparound.mobile.catalogo application 4.9.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bowl Expo 2014 aka com.coreapps.android.followme.bowlexpo14 application 6.1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Blood aka com.sheridan.ash application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GES Agri Connect aka com.wAgriConnect application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...