CVE-2014-6681

The Mahabharata Audiocast aka com.wordbox.mahabharataAudiocast application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6673

The CVE-2014-6673 entry concerns the ChallengerTX Android app (package com.zhtiantian.ChallengerTX) version 3.9.12.5. The root cause is the app’s failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information through a...

CVE-2014-6687

The CVE-2014-6687 entry concerns the Android app wSaudichannelAlNasr (com.wSaudichannelAlNasr) version 0.1, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables MITM attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-6675

The Ruta Exacta aka com.rutaexacta.m application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6656

The CVE-2014-6656 entry concerns the Android app drareym (com.drareym) version 0.1 that does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. The available connected sour...

CVE-2014-6661

The CVE-2014-6661 entry concerns the Android app named netease movie (package com.netease.movie) version 4.7.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-6681

The CVE-2014-6681 entry concerns the Mahabharata Audiocast Android app (com.wordbox.mahabharataAudiocast, version 1.0). The vulnerability is due to the app failing to verify SSL/X.509 certificates when establishing TLS connections, enabling MITM attackers to spoof servers and access sensitive inf...

CVE-2014-6022

The Versent Books aka com.versentbooks application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6007

The LikeHero Get Instagram Likes aka com.fraoula.likehero application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5665

The Mzone Login aka com.mr384.MzoneLogin application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The psychology aka com.alek.psychology application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6015

The CVE-2014-6015 entry concerns the TuCarro (com.tucarro) Android app v2.0.5 that does not verify X.509 certificates from SSL servers. This causes potential MITM where an attacker can spoof servers and extract sensitive data via a crafted certificate. Documents confirm the affected software and ...

CVE-2014-5998

CVE-2014-5998 affects SkyDrive Assistant (com.dhh.sky) for Android, version 2.1 . The issue is not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base score is 5.4 (MEDIUM) . N...

CVE-2014-6001

CVE-2014-6001 affects the Android gewara (com.gewara) app version 5.2.3, where the code does not verify X.509 certificates from SSL servers. This root cause allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The entry notes a moderate i...

CVE-2014-6005

The CVE-2014-6005 entry affects the Survey.com Mobile app (com.survey.android) for Android, version 3.2.16, which does not verify X.509 certificates from SSL servers, enabling MITM attacks with crafted certificates. CVSSv2 base score is 5.4 (Medium) with adjacent network attack vector, no authent...

CVE-2014-5979

The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Animal Kaiser Zangetsu aka com.wAnimalKaiserZangetsu application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5986

The CVE-2014-5986 entry concerns the Android app Educational Puzzles - Letters (com.EducationalPuzzlesLetters) version 2, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-5979

CVE-2014-5979 affects the TV Bengali Open Directory (com.TVBengali) Android app version 1.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The...

CVE-2014-5987

The CVE-2014-5987 entry concerns the My3 app (com.my3) on Android, which does not verify X.509 certificates when establishing SSL connections. This behavior allows man-in-the-middle attackers to spoof SSL servers and exfiltrate sensitive information via a crafted certificate. The supplied documen...