CVE-2014-7772

The MB Tickets Android app (package com.xcr.android.mbtickets) version 3.0.1 is affected by an SSL trust issue: it does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base ...

CVE-2014-7748

CVE-2014-7748 affects the Android app Garip Ve Ilginc Olaylar (0.1). The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available documents con...

CVE-2014-4906

The Brisbane & Queensland Alert aka com.queensland.alert application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7779

CVE-2014-7779 affects the Android app “Kuran'in Bilimsel Mucizeleri” (package com.wKurannBilimselMucizeleri) v0.1, which does not verify X.509 certificates from SSL servers. The consequence is susceptibility to MITM attackers who can spoof servers and obtain sensitive information through a crafte...

CVE-2014-7797

CVE-2014-7797 concerns the Android app “The Thai food” (package com.foods.thaifood) version 1.0, which does not verify X.509 certificates when connecting to SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and potentially exfiltrate sensitive information via a crafted c...

CVE-2014-7793

The CVE-2014-7793 entry refers to the Android app CB - Calciatori Brutti (com.calciatori.brutti) 1.0, which does not verify X.509 certificates when connecting to SSL servers. This lack of certificate validation can allow man-in-the-middle attackers to spoof servers and obtain sensitive informatio...

CVE-2014-7644

The CVE-2014-7644 entry concerns the Go MSX MLS Android app (com.doapps.android.realestate.RE_16b9c09c4d5b0e174208f35e7c49f9a0), version 2.3.4.MR3, where SSL servers’ X.509 certificates are not verified. This weakens trust in TLS connections, enabling man-in-the-middle attackers to spoof servers ...

CVE-2014-7764

CVE-2014-7764 affects the Semper Invicta Fitness Android app (package com.semper.invicta.fitness) version 1.1. The connected documents confirm the vulnerability: the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-7724

CVE-2014-7724 describes a vulnerability in the Android app Chemssou Blink (com.chemssou.blink) 1.0 where SSL/TLS X.509 certificates are not verified by the client. This lack of certificate validation enables man-in-the-middle attacks, allowing attackers to spoof servers and access sensitive infor...

CVE-2014-7650

The CVE-2014-7650 entry concerns the Android 1.0 JJA app (com.felix.jja), which does not verify X.509 certificates from SSL servers. Root cause: lack of certificate validation enabling MITM-style spoofing of servers and potential exposure of sensitive data. Affected component is the app’s SSL/TLS...

CVE-2014-7726

The Golosinas Simpson1 aka com.wGolosinasSimpson1 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4897

CVE-2014-4897 affects the Touriosity Travelmag Android app (package com.magzter.touriositytravelmag) version 3.1. The vulnerability is an ineffective validation of X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a cra...

CVE-2014-7758

The CVE-2014-7758 entry corresponds to the AMKAMAL Science Portfolio Android app (package com.wAMKAMALSciencePortfolio) version 0.1, where the vulnerability is an inability to verify X.509 certificates from SSL servers. The root cause is missing TLS/SSL certificate validation, which can allow man...

CVE-2014-4903

CVE-2014-4903 affects the Android app Kakao Bingo Garden (com.mocoga.bingogarden) version 1.0.14. The underlying issue is that the app does not verify X.509 SSL certificates when connecting to servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-7640

The CVE-2014-7640 entry concerns The Hotel Room (com.wHotelRoom) Android app version 0.1. The affected component is the app’s SSL/TLS certificate verification, which does not verify X.509 certificates from SSL servers. This omission allows man-in-the-middle attackers to impersonate legitimate ser...

CVE-2014-7743

CVE-2014-7743 concerns the Android app Humor Ironias y Realidades (com.wHumork) version 0.63.13371.13576, where the component fails to verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2014-7726

Golosinas Simpson1 (com.wGolosinasSimpson1) Android app 0.1 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information. The CVE is documented with CVSS v2 base score 5.4 (Medium) and partial confidentiality/integrity/availability...

CVE-2014-7628

The CVE-2014-7628 entry concerns the Acorn Comms Android application (version 3.0) that does not verify X.509 certificates from SSL servers. Root cause: missing certificate verification enabling man-in-the-middle attacks to spoof servers and exfiltrate sensitive information via a crafted certific...

CVE-2014-7620

The Authors On Tour - Live! aka com.appmakr.app122286 application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...