CVE-2014-7521

The Anderson Musaamil aka com.appandersonmusaamil.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7533

The NotreDame Seguradora aka br.com.notredame.mobile.NotreDame application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Apparound BLEND aka com.apparound.mobile.catalogo application 4.9.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Blood aka com.sheridan.ash application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bowl Expo 2014 aka com.coreapps.android.followme.bowlexpo14 application 6.1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GES Agri Connect aka com.wAgriConnect application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Secret City - Motion Comic aka me.narr8.android.serial.thesecretcity application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The InstaTalks aka com.natrobit.instatalks application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anderson Musaamil aka com.appandersonmusaamil.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7596

The Paramore aka uk.co.pixelkicks.paramore application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7614

The CVE-2014-7614 entry covers the Android application Warrior Beach Retreat (com.wWarriorBeachRetreat) version 0.1, which does not verify X.509 SSL certificates. The underlying issue is certificate verification failure, enabling MITM attackers to spoof servers and exfiltrate sensitive informatio...

CVE-2014-7621

The EIN Lookup aka appinventor.aisiwanuth.EINLookup application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7535

The CVE-2014-7535 entry concerns the Android app Classic Racer (com.triactivemedia.classicracer). The root issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The descri...

CVE-2014-7509

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7592

The FOL aka com.desire2learn.fol.mobile.app.campuslife.directory application 3.0.729.1459 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7532

The GES Agri Connect aka com.wAgriConnect application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...