CVE-2014-5760

CVE-2014-5760 affects the Pizza Hut Android app (com.yum.pizzahut) version 2.0.5, where the app does not verify X.509 SSL certificates. This allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. Connected sources confirm the same impact across ref...

CVE-2014-5833

The CVE-2014-5833 entry concerns the FriendCaster Chat app (com.handmark.friendcaster.chat) for Android. The affected component is the SSL/TLS certificate verification in the app, which does not verify X.509 certificates from SSL servers. This behavior can enable a man-in-the-middle (MITM) attack...

CVE-2014-5757

The CVE-2014-5757 entry affects the Android app Buy Tickets (com.xcr.android.buytickets) version 2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5820

The CVE refers to the OkCupid Dating Android app (package com.okcupid.okcupid) version 3.4.6, where the client does not verify X.509 certificates from SSL servers. This weakens TLS authentication and enables MITM attackers to spoof servers and access sensitive information via a crafted certificat...

CVE-2014-5765

The CVE-2014-5765 entry concerns the Paint for Friends (de.lotumlabs.buddypainting) Android app version 1.5.1, which does not verify X.509 certificates when establishing SSL connections. This behavior can allow man-in-the-middle attackers to spoof servers and recover sensitive information via a c...

CVE-2014-5788

CVE-2014-5788 affects the Android app Ninja Chicken Adventure Island (aka mominis.Generic_Android.Ninja_Chicken_Adventure_Island) version 1.1.1. The flaw is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive d...

CVE-2014-5799

The CVE-2014-5799 entry concerns the Android smart.card (nh.smart.card) application version 3.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive information via a crafted certificate. Th...

CVE-2014-5777

CVE-2014-5777 affects the Android app icon wallpaper dressup-CocoPPa (jp.united.app.cocoppa) version around 2.8.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted c...

CVE-2014-5701

The CVE-2014-5701 entry concerns the Skout: Chats. Friends. Fun. Android app (com.skout.android) version 4.3.3, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD r...

CVE-2014-5841

The CVE-2014-5841 entry concerns the Android app Girls Calendar Period&Weight (jp.co.cybird.apps.lifestyle.cal) version 3.2.2, which fails to verify X.509 certificates from SSL servers. This improper certificate validation allows a man-in-the-middle to spoof servers and obtain sensitive informati...

CVE-2014-5770

The CVE-2014-5770 entry concerns the Web Browser for Android (aka explore.web.browser) version 1.2 for Android, which does not verify X.509 certificates from SSL servers. This lets attackers perform a man‑in‑the‑middle attack to spoof servers and access sensitive information via a crafted certifi...

CVE-2014-5756

The CVE-2014-5756 entry concerns the Android app “Buy 99 Cents Only Products” (com.ww99CentsOnlyStores) version 0.1, which does not validate X.509 certificates when connecting to SSL servers. This creates a susceptibility to man-in-the-middle attacks where a crafted certificate can spoof servers ...

CVE-2014-5813

The CVE-2014-5813 entry covers the Lostword Android app (package: lostword) version 5.9, which does not verify X.509 certificates when establishing SSL/TLS connections. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information by presenting cra...

CVE-2014-5810

The SGK Hizmet Dokumu 4a (tr.gov.sgk.hizmetDokumu4a) Android app, version 1.103, does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploit details, affected components beyond the Android app, a...

CVE-2014-5817

The CVE-2014-5817 entry concerns the Android app Mini Pets (com.miniclip.animalshelter) v2.0.3, where SSL/TLS does not verify X.509 certificates. This causes MITM risk, allowing an attacker to spoof servers and extract sensitive data via a crafted certificate. The description, as provided in the ...

CVE-2014-5772

The CVE-2014-5772 entry concerns the Government Bookstore Android app (version 1.01). The vulnerability is that it does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploita...

CVE-2014-5805

The vulnerability CVE-2014-5805 affects the Android app Dating for everyone - Mamba! (ru.mamba.client) , version 3.5. It arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5682

The Retale - Weekly Ads & Deals aka com.retale.android application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5688

The Runtastic Pedometer aka com.runtastic.android.pedometer.lite application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...