CVE-2014-7447

The CVE-2014-7447 entry concerns The Dattch – The Lesbian App (com.dattch.dattch.app) for Android, version 0.30, which does not verify X.509 certificates from SSL servers. The root cause is that SSL certificate verification is bypassed, enabling man-in-the-middle attackers to spoof servers and ob...

CVE-2014-7388

The CVE-2014-7388 entry concerns the Android app The Sunday Indian Oriya (package com.magzter.thesundayindianoriya) version 3.0.1, which does not verify X.509 certificates when establishing TLS connections. This allows man‑in‑the‑middle attackers to spoof SSL servers and potentially obtain sensit...

CVE-2014-7384

The CVE-2014-7384 entry applies to the Android application Joe’s Lawn Service (com.appexpress.joeslawnservice) version 1.5. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cr...

CVE-2014-7449

CVE-2014-7449 affects the My NGEMC Account Android app (package com.ngemc.smartapps), version 1.153.0034. The root cause is that the app does not verify X.509 certificates from SSL servers, which can allow a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-7469

The CVE-2014-7469 entry concerns The Best Beginning (com.bbbeta) Android app v2.0 that does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability is rooted in...

CVE-2014-7390

CVE-2014-7390 concerns the Android app “The Enchanted Fashion Crush” (package com.tabtale.springcrushbundleint) version 1.0.0, where SSL TLS server certificate verification is not performed. This enables a man-in-the-middle attacker to spoof the server and obtain sensitive data via a crafted cert...

CVE-2014-7321

The CVE-2014-7321 entry concerns the Firenze map (com.wFirenzemap) Android app version 0.1, which does not verify SSL X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documents across NVD, CVE list, and PrIoN...

CVE-2014-7422

The CVE records that the HEA Mobile Android app (com.homerelectric.smartapps) version 1.153.0034 does not verify X.509 certificates on SSL connections, causing potential MITM to spoof servers and steal sensitive data via crafted certificates. Root cause: missing server trust verification in the a...

CVE-2014-7108

The CVE-2014-7108 entry concerns the Android app Stop Headaches and Migraines (com.StopHeadachesandMigraines) version 1.2, which does not verify X.509 certificates when establishing SSL connections. This misconfiguration enables man-in-the-middle attackers to spoof SSL servers and obtain sensitiv...

CVE-2014-7359

The MAPA DA MINA aka com.wMAPADAMINA application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7461

The A King Sperm by Dr. Seema Rao aka com.wKingSperm application 0.63.13384.23020 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7352

The CVE-2014-7352 entry affects the Android app India’s Anthem (appinventor.ai_opalfoxy83.India_Anthem) v1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7443

The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...

CVE-2014-7399

The CVE-2014-7399 entry affects the Android app “Suzanne Glathar” (package com.app_sglathar.layout, version 1.399). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via...

CVE-2014-7445

The LEGEND OF TRANCE aka com.legendoftrance application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7476

The Healthy Lunch Diet Recipes aka com.best.lunchdietrecipes application 3.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7416

The Craft Stamper Magazine aka com.triactivemedia.craftstamper application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7452

The Shaklee Product Catalog aka com.wProductCatalog application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7367

The TuS 1947 Radis aka com.tus1947radis application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7390

The Enchanted Fashion Crush aka com.tabtale.springcrushbundleint application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...