CVE-2014-7038

The CVE-2014-7038 entry describes a vulnerability in the Al Jazeera Android app (package com.Al.Jazeera.net) version 6.0 where SSL certificate validation is not performed. The underlying issue is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof ...

CVE-2014-6982

The Arabic Troll Football aka com.hamoosh.ArabicTrollFootball application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6985

The Georgia Packing aka com.tapatalk.georgiapackingorg application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7027

CVE-2014-7027 affects the Android app “Esercizi per le donne” (com.rareartifact.eserciziperledonne6D5578C6) version 1.0. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attacks to intercept sensitive information with crafted...

CVE-2014-7045

CVE-2014-7045 affects the Bust Out Bail Android app (package com.onesolutionapps.bustoutbailandroid, version 1.1). The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

CVE-2014-6993

The CVE-2014-6993 entry concerns the Codeeta Coupons (com.codeeta.promos) Android app version 1.0.5, which does not verify X.509 SSL certificates. This weakness enables a man‑in‑the‑middle attacker to spoof the server and exfiltrate sensitive information via a crafted certificate. The vulnerabili...

CVE-2014-7022

The CVE-2014-7022 entry concerns the Modelisme.com forum/portail Android app (package com.tapatalk.modelismecomforum) version 3.6.9. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive infor...

CVE-2014-7018

The CVE-2014-7018 entry concerns the Android app LOVE DANCE (com.efunfun.ddianle.lovedance) version 1.2.0626, which does not verify X.509 certificates from SSL servers. This lack of certificate validation can enable man-in-the-middle attacks to spoof servers and exfiltrate sensitive information v...

CVE-2014-6955

The Le Grand Bleu aka com.appzone468 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6981

The Taiwan Business Bank aka com.mitake.TBB application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6971

The Easy Video Downloader aka com.simon.padillar.EasyVideo application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6995

The adidas eyewear aka com.adidasep.eyewear application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6984

The CVE-2014-6984 entry affects the Android app The Shots (com.shots.android) version 1.0.8 , where the app does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The NVD entry list...

CVE-2014-7020

CVE-2014-7020 affects the Diabetes Forum Android app (com.tapatalk.diabetescoukdiabetesforum) version 3.9.30. The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

CVE-2014-7021

The Leg Surgery - Kids Games aka com.harriskerioe.legsurgery application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7040

CVE-2014-7040 affects the UniCredit Investors Android app (version 1.0). The connected sources confirm the root cause: the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The N...

CVE-2014-6953

The CVE-2014-6953 entry affects the Android application “AFTERLIFE WITH ARCHIE” (package name com.afterlifewitharchie.afterlifewitharchie) version 2.4.1. The root cause is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and obtain se...

CVE-2014-6956

The CVE-2014-6956 entry concerns the Hydrogen Water (com.appzone628) Android app v1.0, where the component fails to verify X.509 certificates from SSL servers. This weakness allows man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificate. The vul...

CVE-2014-7024

The CVE-2014-7024 entry affects the Android app “The Hardest Game Collection” (com.lotfun.abuse) v1.5.0. The issue: the app does not verify X.509 certificates when connecting to SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...

CVE-2014-7030

CVE-2014-7030 affects the Android app Dieta Dukan passo a passo (1.0). The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation details are provid...