CVE-2014-6995

The adidas eyewear aka com.adidasep.eyewear application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6984

The CVE-2014-6984 entry affects the Android app The Shots (com.shots.android) version 1.0.8 , where the app does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The NVD entry list...

CVE-2014-7020

CVE-2014-7020 affects the Diabetes Forum Android app (com.tapatalk.diabetescoukdiabetesforum) version 3.9.30. The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

CVE-2014-7021

The Leg Surgery - Kids Games aka com.harriskerioe.legsurgery application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6956

The CVE-2014-6956 entry concerns the Hydrogen Water (com.appzone628) Android app v1.0, where the component fails to verify X.509 certificates from SSL servers. This weakness allows man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificate. The vul...

CVE-2014-7048

The CVE-2014-7048 entry concerns the Android app Bear ID Lock (com.wBearIDLock) , version 0.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2014-7039

CVE-2014-7039 concerns the Wild Women United (com.wildwomenunited) Android app 1.0, which does not verify X.509 certificates from SSL servers. This lack of validation lets a man-in-the-middle spoof a server and capture sensitive information via a crafted certificate. The issue is documented in mu...

CVE-2014-7030

CVE-2014-7030 affects the Android app Dieta Dukan passo a passo (1.0). The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation details are provid...

CVE-2014-6987

Summary: CVE-2014-6987 affects the Mass Gaming TV Android app (1.0) and is due to the app not verifying X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The connected records confirm the s...

CVE-2014-6953

The CVE-2014-6953 entry affects the Android application “AFTERLIFE WITH ARCHIE” (package name com.afterlifewitharchie.afterlifewitharchie) version 2.4.1. The root cause is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and obtain se...

CVE-2014-7024

The CVE-2014-7024 entry affects the Android app “The Hardest Game Collection” (com.lotfun.abuse) v1.5.0. The issue: the app does not verify X.509 certificates when connecting to SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...

CVE-2014-6958

The affected software is the ISMRM-ESMRMB 2014 Android app (com.coreapps.android.followme.ismrm_esmrmb14), version 6.0.8.5. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inform...

CVE-2014-2576

plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPTSSLVERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle MITM attacks...

CVE-2014-6946

CVE-2014-6946 affects the Android app Re:kyu (aka com.appzone619) 1.0. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources in th...

CVE-2014-6947

The Archie Comics aka com.iversecomics.archie.android application 1.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6948

CVE-2014-6948 affects the Android app “TH3 professional Al Mohtarif” (com.th3professional.almohtarif) version 1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and read sensitive information via a crafted cert...

CVE-2014-6949

The CVE-2014-6949 entry concerns the Android app Akne Ernahrung (package com.rareartifact.akneernahrung72010074) 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in TLS/SSL, enabling MITM attackers to spoof servers and obtain sensitive inf...

Mozilla Releases Security Updates for Firefox and Thunderbird

The Mozilla Foundation has released security updates to address multiple vulnerabilities in Firefox and Thunderbird. Exploitation of these vulnerabilities may allow an attacker to obtain sensitive information, bypass same-origin policy and key pinning, cause an exploitable crash, conduct a...

Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2372-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2372-1 advisory. Bobby Holley, Christian Holler, David Bolter, Byron Campen, Jon Coppeard, Carsten Book, Martijn Wargers, Shih-Chiang Chien, Terrence Cole and Jeff Walden...

[ MDVSA-2014:170 ] jakarta-commons-httpclient

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:170 http://www.mandriva.com/en/support/security/ Package : jakarta-commons-httpclient Date : September 2, 2014 Affected: Business Server 1.0 Problem Description: Updated jakarta-commons-httpclient and...