CVE-2014-7562

The Health Advocate SmartHelp (com.healthadvocate.ui) Android app version 3.6 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause: missing certificate validation during TLS. Impact: pa...

CVE-2014-7611

The Lost Temple Android app (package com.crazy.game.good.mengchenglu.templeI) version 1.6 does not verify SSL server X.509 certificates, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is disabled certificate validation; impact is pa...

CVE-2014-7563

Summary: CVE-2014-7563 applies to the Tactical Force LLC Android app (package com.conduit.app_69f61a8852b046f2846054b30c4032a7.app) version 1.9.23.276. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and ...

CVE-2014-7486

The CVE-2014-7486 entry concerns the Mitsubishi Road Assist (com.agero.mitsubishi) Android app version 1.0. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and glean sensitive information via a cra...

CVE-2014-7578

The CVE-2014-7578 entry relates to the Bieber News Now Android app (com.jbnews) version 12.0.5, which does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The NVD metrics indicate...

CVE-2014-7613

The CVE-2014-7613 entry concerns the Android app WASPS Official Programmes (com.triactivemedia.wasps) not verifying SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Based on NVD, the vulnerability has a Medium impac...

CVE-2014-7565

The CVE-2014-7565 entry concerns the Android app Rando Noeux (com.gmteditions.NoeuxLesMinesDistrib) 1.0.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7510

The Graffit It Android app (com.presenttechnologies.graffitit) version 1.1.2 fails to verify SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive data via crafted certificates. This CVE (CVE-2014-7510) is based on publicly available vulnerability deta...

CVE-2014-7516

The CVE-2014-7516 entry concerns the Android app Central East LHIN News (com.wCentralEastLHINNews) version 0.1, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-7595

The CVE-2014-7595 entry concerns the devada.co.uk (com.wdevadacouk) Android application 1.2 that does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This is a certificate validation ...

CVE-2014-7560

CVE-2014-7560 affects the Fabasoft Cloud Android client (package com.fabasoft.android.cmis.folio_cloud), version 3.0.1. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and disclose sensitive inform...

CVE-2014-7542

The CVE-2014-7542 entry concerns the Android application l'Informatiu (com.linformatiu.spm) v2.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Document(s) confirm the...

CVE-2014-7485

CVE-2014-7485 concerns the Android app “The Not Lost Just Somewhere Else” (1.6.1) which does not verify X.509 certificates from SSL servers. This vulnerability allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documented impact indicat...

CVE-2014-7529

The CVE-2014-7529 entry covers the Android app “Bodyguard for Hire” (com.dreamstep.wBodyGuardforHire) version 0.18.13146.42280. The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and extract sensitive data via a crafted cer...

CVE-2014-7550

The CVE-2014-7550 entry concerns the Android application “The basketball news & videos” (package com.basketbal.news.caesar), version 1.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and capture sensitive informatio...

CVE-2014-7523

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7558

The Everest Poker aka com.wEverestPoker application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7491

The Short Stories aka com.ireadercity.c48 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7522

CVE-2014-7522 affects the Android app Maccabi Pakal (package com.ideomobile.pakalmaccabi) version 1.2. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificat...