Design/Logic Flaw

The Free Canadian Author Previews aka com.booksellerscanada.authorpreview application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7703

The Terrorizer Magazine aka com.triactivemedia.terrorizer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Villa Antonia aka com.appbuilder.u7p5019 application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The news revolution - bahrain aka com.news.revolution.BH application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4885

The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4891

CVE-2014-4891 affects the CT iHub Android app (package com.concursive.ctihub). The root cause: the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle scenarios to spoof servers and capture sensitive information via crafted certificates. The connected sources confi...

CVE-2014-7705

The Atkins Diet Free Shopping List aka com.wAtkinsDietFreeShoppingList application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7695

CVE-2014-7695 affects the Android app easaa Baoneng (com.easaa.baoneng) 1.0. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected sources confirm ...

CVE-2014-7754

The CVE-2014-7754 entry applies to Condor S.E. (com.app_condorsoutheast.layout) Android app, version 1.399, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in SSL certificate validation, allowing man-in-the-middle attackers to spoof servers and obtain ...

CVE-2014-7685

The CVE-2014-7685 entry concerns the Razer Comms (com.razerzone.comms) Android app version 1.3.07, which fails to verify X.509 certificates from SSL servers. This weakens TLS, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The conne...

CVE-2014-7710

CVE-2014-7710 affects the Android app India Today Telugu (com.magzter.indiatoday.telugu) version 3.02, where SSL certificate validation is not performed. This allows MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Per NVD, the CVSS v2 base score is 5.4 (...

CVE-2014-7724

The Chemssou Blink aka com.chemssou.blink application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7781

CVE-2014-7781 affects the Android app The Marijuana Handbook Lite - Weed (com.fallacystudios.marijuanahandbooklite), version 3.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and acces...

CVE-2014-4898

The CVE-2014-4898 entry concerns the Harivijay Android app (package com.upasanhar.marathi.harivijay) version 4.0, which does not verify X.509 certificates when connecting to SSL servers. This enables man-in-the-middle attackers to spoof servers and access sensitive information via crafted certifi...

CVE-2014-7694

The CVE-2014-7694 entry concerns the Corvette Museum Android app (com.app_corvettemuseum.layout) version 1.399, which does not verify SSL/TLS X.509 certificates. This weakness enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Documented impact is par...

CVE-2014-7727

The CVE-2014-7727 entry concerns the Android application Dj Brad H (com.dreamstep.wDjBradH) version 0.90, which fails to verify X.509 certificates when establishing SSL connections. This certificate validation bypass enables potential man-in-the-middle attackers to spoof servers and steal or eave...

CVE-2014-4890

CVE-2014-4890 affects the Android app Nano Digest (com.magzter.nanodigest) v3.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Public sources (NVD and related reco...

CVE-2014-7782

CVE-2014-7782 affects the Android application “Macedonia Hacienda Hotel” (package appinventor.ai_orolimpio999.HotelMacedonia), version 1.0. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inf...

CVE-2014-7795

The CVE-2014-7795 entry concerns the Android app Harpers Bazaar Art (package com.itp.harpersart, reference @7F080181) that does not verify X.509 certificates when establishing SSL connections. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7785

CVE-2014-7785 affects the Android app “AAAA Discount Bail” (com.onesolutionapps.aaaadiscountbailandroid) version 1.1. The issue is failure to verify X.509 certificates when connecting to SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and extract sensitive information via a cra...