Information disclosure

The GES Agri Connect aka com.wAgriConnect application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anderson Musaamil aka com.appandersonmusaamil.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Secret City - Motion Comic aka me.narr8.android.serial.thesecretcity application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The InstaTalks aka com.natrobit.instatalks application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7535

The CVE-2014-7535 entry concerns the Android app Classic Racer (com.triactivemedia.classicracer). The root issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The descri...

CVE-2014-7509

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7532

The GES Agri Connect aka com.wAgriConnect application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7596

The Paramore aka uk.co.pixelkicks.paramore application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7592

The FOL aka com.desire2learn.fol.mobile.app.campuslife.directory application 3.0.729.1459 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7621

The EIN Lookup aka appinventor.aisiwanuth.EINLookup application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7562

The Health Advocate SmartHelp (com.healthadvocate.ui) Android app version 3.6 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause: missing certificate validation during TLS. Impact: pa...

CVE-2014-7563

Summary: CVE-2014-7563 applies to the Tactical Force LLC Android app (package com.conduit.app_69f61a8852b046f2846054b30c4032a7.app) version 1.9.23.276. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and ...

CVE-2014-7614

The CVE-2014-7614 entry covers the Android application Warrior Beach Retreat (com.wWarriorBeachRetreat) version 0.1, which does not verify X.509 SSL certificates. The underlying issue is certificate verification failure, enabling MITM attackers to spoof servers and exfiltrate sensitive informatio...

CVE-2014-7611

The Lost Temple Android app (package com.crazy.game.good.mengchenglu.templeI) version 1.6 does not verify SSL server X.509 certificates, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is disabled certificate validation; impact is pa...

CVE-2014-7550

The CVE-2014-7550 entry concerns the Android application “The basketball news & videos” (package com.basketbal.news.caesar), version 1.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and capture sensitive informatio...

CVE-2014-7542

The CVE-2014-7542 entry concerns the Android application l'Informatiu (com.linformatiu.spm) v2.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Document(s) confirm the...

CVE-2014-7565

The CVE-2014-7565 entry concerns the Android app Rando Noeux (com.gmteditions.NoeuxLesMinesDistrib) 1.0.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7560

CVE-2014-7560 affects the Fabasoft Cloud Android client (package com.fabasoft.android.cmis.folio_cloud), version 3.0.1. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and disclose sensitive inform...