CVE-2014-5812

The CVE-2014-5812 vulnerability affects the VDM Officiel (aka vdm.activities) Android app (version 5). The issue is that the app does not verify SSL/X.509 certificates, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The available referenc...

CVE-2014-5818

CVE-2014-5818 affects the Android app Tiny Tower (com.mobage.ww.a560.tinytower_android) v1.7.0.8. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause:...

CVE-2014-5774

CVE-2014-5774 affects the Web Browser & Explorer (internetexplorer.browser.webexplorer) app 4 for Android. The issue is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-5748

The wK12olslogin aka com.wK12olslogin application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5746

The Government Best Jobs aka com.wGovernmentBestJobs application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5729

The Viddy aka com.viddy.Viddy application 1.3.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5714

The Text Me! Free Texting & Call aka com.textmeinc.textme application 2.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5855

The CJmall aka com.cjoshppingphone application 4.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5808

The CVE-2014-5808 entry concerns The Whisper (aka sh.whisper) Android app version 4.0.6, which does not verify X.509 certificates from SSL servers. This misconfiguration enables MITM attackers to spoof servers and potentially obtain sensitive information via a crafted certificate, with a CVSSv2 b...

CVE-2014-5830

CVE-2014-5830 affects the Android app Farm Frenzy Gold (com.herocraft.game.farmfrenzy.gold) version 1.0.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5788

The Ninja Chicken Adventure Island aka mominis.GenericAndroid.NinjaChickenAdventureIsland application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5779

The CVE-2014-5779 entry concerns The Jack’d - Gay Chat & Dating (aka mobi.jackd.android) Android app version 1.9.0a, where the app does not validate X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information ...

CVE-2014-5773

The CVE-2014-5773 entry affects the Android app RegisteredAssistant (Icr.RegisteredAssistant) version 0.2.3 . The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information...

CVE-2014-5719

The CVE concerns the BIKE RACING 2014 Android app (com.timuzsolutions.bikeracing2014) version 1.6, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attacks to spoof servers and access sensitive data via a crafted certificate. The connected records confirm ...

CVE-2014-5784

CVE-2014-5784 affects the Bouncy Bill Seasons Android app (version 1.3.9). The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The documented impact is info...

CVE-2014-5825

The Guess The Movie (com.june.guessthemovie) Android app (version 2.982) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a CVSSv2 base score of 5.4 (MEDIUM) with ...

CVE-2014-5844

The Alsunna aka com.wAlsunna application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5710

The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5805

The Dating for everyone - Mamba! aka ru.mamba.client application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5707

The CVE-2014-5707 entry concerns The Bunny Run (com.stargirlgames.google.bunnyrun) Android app version 1.1.2 that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information. Public sources (NVD and CVE databases) corroborate the ...