CVE-2014-7529

The CVE-2014-7529 entry covers the Android app “Bodyguard for Hire” (com.dreamstep.wBodyGuardforHire) version 0.18.13146.42280. The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and extract sensitive data via a crafted cer...

CVE-2014-7486

The CVE-2014-7486 entry concerns the Mitsubishi Road Assist (com.agero.mitsubishi) Android app version 1.0. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and glean sensitive information via a cra...

CVE-2014-7613

The CVE-2014-7613 entry concerns the Android app WASPS Official Programmes (com.triactivemedia.wasps) not verifying SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Based on NVD, the vulnerability has a Medium impac...

CVE-2014-7565

The CVE-2014-7565 entry concerns the Android app Rando Noeux (com.gmteditions.NoeuxLesMinesDistrib) 1.0.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7510

The Graffit It Android app (com.presenttechnologies.graffitit) version 1.1.2 fails to verify SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive data via crafted certificates. This CVE (CVE-2014-7510) is based on publicly available vulnerability deta...

CVE-2014-7550

The CVE-2014-7550 entry concerns the Android application “The basketball news & videos” (package com.basketbal.news.caesar), version 1.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and capture sensitive informatio...

CVE-2014-7516

The CVE-2014-7516 entry concerns the Android app Central East LHIN News (com.wCentralEastLHINNews) version 0.1, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-7542

The CVE-2014-7542 entry concerns the Android application l'Informatiu (com.linformatiu.spm) v2.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Document(s) confirm the...

CVE-2014-7486

The Mitsubishi Road Assist aka com.agero.mitsubishi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7558

The Everest Poker aka com.wEverestPoker application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7523

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7491

The Short Stories aka com.ireadercity.c48 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7501

The Translation Widget (com.wTranslationGadget) for Android, version 0.1, does not verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and obtain sensitive information via a crafted certificate. According to the CVE-2014-7501 entry, the impact includes partial confi...

CVE-2014-7568

The CVE-2014-7568 entry concerns the Marcus Butler Unofficial Android app (package com.automon.ay.marcus.butler) version 1.4.0.6. Affected component: TLS/SSL certificate validation logic lacks verification of X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers ...

CVE-2014-7522

CVE-2014-7522 affects the Android app Maccabi Pakal (package com.ideomobile.pakalmaccabi) version 1.2. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificat...

CVE-2014-7507

CVE-2014-7507 affects the Hector Leal Android app (ad.hector.leal.com, compiled 13/08/14). The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted certificate. Public sources (NV...

CVE-2014-7525

The CVE-2014-7525 entry concerns the Android app “Domain Name Search & Web Host” (aka com.wDomainNameSearchandRegistration), version 0.64.13398.55733. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof...

CVE-2014-7478

The nashaplaneta.su aka com.wNashaPlaneta application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7463

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7467

The HoneyBee Mag aka com.magzter.honeybeemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...