CVE-2014-7435

The CVE entry CVE-2014-7435 concerns the Android app AJD Bail Bonds (com.onesolutionapps.ajdbailbondsandroid) version 1.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-7388

The CVE-2014-7388 entry concerns the Android app The Sunday Indian Oriya (package com.magzter.thesundayindianoriya) version 3.0.1, which does not verify X.509 certificates when establishing TLS connections. This allows man‑in‑the‑middle attackers to spoof SSL servers and potentially obtain sensit...

CVE-2014-7458

The CVE-2014-7458 entry concerns the BloomYou Valentine Android app (package com.bloomyouteam.bloomyou.valentine, version 2.4). The vulnerability is failed TLS/SSL certificate validation: the app does not verify X.509 certificates from SSL servers. This allows an attacker to perform man-in-the-mi...

CVE-2014-7399

The Suzanne Glathar aka com.appsglathar.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7384

The CVE-2014-7384 entry applies to the Android application Joe’s Lawn Service (com.appexpress.joeslawnservice) version 1.5. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cr...

CVE-2014-7360

The How To Boil Eggs aka com.appmakr.app842173 application 251333 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7387

The ACC Advocacy Action aka com.acc.app.android.ui application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7416

The CVE-2014-7416 entry concerns the Craft Stamper Magazine Android app (com.triactivemedia.craftstamper). The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7462

CVE-2014-7462 affects the Android app “The Fashion Story: Neon 90’s” (package com.teamlava.fashionstory39), version 1.5.6.5. The root cause is failure to verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2014-7449

CVE-2014-7449 affects the My NGEMC Account Android app (package com.ngemc.smartapps), version 1.153.0034. The root cause is that the app does not verify X.509 certificates from SSL servers, which can allow a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-7447

The CVE-2014-7447 entry concerns The Dattch – The Lesbian App (com.dattch.dattch.app) for Android, version 0.30, which does not verify X.509 certificates from SSL servers. The root cause is that SSL certificate verification is bypassed, enabling man-in-the-middle attackers to spoof servers and ob...

CVE-2014-7362

CVE-2014-7362 affects the Naranjas Con Tocados Android app (version 0.1). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public records (N...

CVE-2014-7307

CVE-2014-7307 affects the ForoSocuellamos Android app (version 1.1). The root cause is that the application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected document...

CVE-2014-7406

CVE-2014-7406 affects the Deakin University Android application (package com.desire2learn.campuslife.deakin.edu.au.directory, version 1.1.729.1694). The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and obtain sen...

CVE-2014-7460

The CVE-2014-7460 entry concerns the Android app Slots Heaven:FREE Slot Machine (com.twelvegigs.heaven.slots) 1.123, which does not verify X.509 certificates when connecting to SSL servers. The underlying vulnerability is improper certificate validation, allowing MITM attackers to spoof servers a...

CVE-2014-7464

CVE-2014-7464 concerns the Android app “The Magic Stamp” (aka vn.avagame.apotatem) version 2.8, where the client fails to verify X.509 certificates from SSL servers. This root cause allows MITM attackers to spoof the server and potentially leak sensitive information via a crafted certificate. The...

CVE-2014-7469

The CVE-2014-7469 entry concerns The Best Beginning (com.bbbeta) Android app v2.0 that does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability is rooted in...

CVE-2014-7399

The CVE-2014-7399 entry affects the Android app “Suzanne Glathar” (package com.app_sglathar.layout, version 1.399). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via...

CVE-2014-7359

The MAPA DA MINA aka com.wMAPADAMINA application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7461

The A King Sperm by Dr. Seema Rao aka com.wKingSperm application 0.63.13384.23020 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...