CVE-2014-7390

CVE-2014-7390 concerns the Android app “The Enchanted Fashion Crush” (package com.tabtale.springcrushbundleint) version 1.0.0, where SSL TLS server certificate verification is not performed. This enables a man-in-the-middle attacker to spoof the server and obtain sensitive data via a crafted cert...

CVE-2014-7352

The CVE-2014-7352 entry affects the Android app India’s Anthem (appinventor.ai_opalfoxy83.India_Anthem) v1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7422

The CVE records that the HEA Mobile Android app (com.homerelectric.smartapps) version 1.153.0034 does not verify X.509 certificates on SSL connections, causing potential MITM to spoof servers and steal sensitive data via crafted certificates. Root cause: missing server trust verification in the a...

CVE-2014-7321

The CVE-2014-7321 entry concerns the Firenze map (com.wFirenzemap) Android app version 0.1, which does not verify SSL X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documents across NVD, CVE list, and PrIoN...

CVE-2014-7108

The CVE-2014-7108 entry concerns the Android app Stop Headaches and Migraines (com.StopHeadachesandMigraines) version 1.2, which does not verify X.509 certificates when establishing SSL connections. This misconfiguration enables man-in-the-middle attackers to spoof SSL servers and obtain sensitiv...

CVE-2014-7443

The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...

CVE-2014-7367

The TuS 1947 Radis aka com.tus1947radis application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7476

The Healthy Lunch Diet Recipes aka com.best.lunchdietrecipes application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7452

The Shaklee Product Catalog aka com.wProductCatalog application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7445

The LEGEND OF TRANCE aka com.legendoftrance application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7416

The Craft Stamper Magazine aka com.triactivemedia.craftstamper application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7390

The Enchanted Fashion Crush aka com.tabtale.springcrushbundleint application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7417

CVE-2014-7417 affects the Android app Real Academia de Bellas Artes (com.adianteventures.adianteapps.real_academia_de_bellas_artes) version 1.0, where the app does not verify X.509 certificates from SSL servers. This insecure TLS behavior enables man-in-the-middle attackers to spoof servers and o...

CVE-2014-7121

CVE-2014-7121 affects the Android Dhanam app (com.magzter.dhanam) version 3.1, where X.509 certificate validation for SSL/TLS is not performed. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is documented across mult...

CVE-2014-7337

The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7385

The CVE-2014-7385 entry concerns the Aperture Mobile Media Android app (package com.app_aperturemobilemedia.layout), version 1.404, which does not verify X.509 certificates when connecting to SSL servers. Root cause: SSL certificate verification is bypassed, enabling a man‑in‑the‑middle attacker ...

CVE-2014-7379

The CVE-2014-7379 entry concerns the Android app Kiddie Kinderschoenen (nl.eigenwinkelapp.kiddiekinderschoenen) version 1.0, which does not verify X.509 certificates when establishing SSL connections. This creates a vulnerability where a man-in-the-middle attacker could spoof servers and obtain s...

CVE-2014-7432

CVE-2014-7432 affects the CalculatorApp (com.intuit.alm.testandroidapp) on Android 4.0, where the app does not verify X.509 certificates from SSL servers. This config enables passive or active man-in-the-middle attackers to spoof servers and capture sensitive information via a crafted certificate...

CVE-2014-7107

The Human Factor aka com.magzter.thehumanfactor application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7071

The Autocar India aka com.magzter.autocarindia application 3.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...