CVE-2014-5323

The Yuko Yuko aka jp.co.yukoyuko.android.yukoyukoandroid application 1.0.5 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6684

The MOL bringaPONT aka hu.mol.bringapont application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6649

The MyBroadband Tapatalk aka com.tapatalk.mybroadbandcozavb application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Latin Angels Music HD aka com.applizards.lafreetj application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The ElForro.com aka com.tapatalk.elforrocom application 2.4.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Tsushima Travel Guide aka com.netjapan.ntsushima application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The Apploi Job Search- Find Jobs aka com.apploi application 4.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6676

The CVE-2014-6676 entry concerns the Android application Exercitii pentru abdomen (com.rareartifact.exercitiipentruabdomen41E29322) version 1.0, where SSL/TLS certificate validation is not performed when connecting to servers. Root cause: lack of X.509 certificate verification enables man-in-the-...

CVE-2014-6682

The CVE-2014-6682 case is supported by multiple connected records indicating that the Android application com.w88235ff7bdc2fb574f1789750ea99ed6 (package name w88235ff7bdc2fb574f1789750ea99ed6) version 0.1 fails to verify X.509 certificates when connecting to SSL servers. Root cause: missing certi...

CVE-2014-6684

The CVE-2014-6684 entry concerns the MOL bringaPONT (aka hu.mol.bringapont) Android app version 1.1, which does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate,...

CVE-2014-6673

The CVE-2014-6673 entry concerns the ChallengerTX Android app (package com.zhtiantian.ChallengerTX) version 3.9.12.5. The root cause is the app’s failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information through a...

CVE-2014-6687

The CVE-2014-6687 entry concerns the Android app wSaudichannelAlNasr (com.wSaudichannelAlNasr) version 0.1, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables MITM attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-6681

The Mahabharata Audiocast aka com.wordbox.mahabharataAudiocast application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6675

The Ruta Exacta aka com.rutaexacta.m application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6681

The CVE-2014-6681 entry concerns the Mahabharata Audiocast Android app (com.wordbox.mahabharataAudiocast, version 1.0). The vulnerability is due to the app failing to verify SSL/X.509 certificates when establishing TLS connections, enabling MITM attackers to spoof servers and access sensitive inf...

CVE-2014-6656

The CVE-2014-6656 entry concerns the Android app drareym (com.drareym) version 0.1 that does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. The available connected sour...

CVE-2014-6661

The CVE-2014-6661 entry concerns the Android app named netease movie (package com.netease.movie) version 4.7.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-6022

The Versent Books aka com.versentbooks application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6007

The LikeHero Get Instagram Likes aka com.fraoula.likehero application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5665

The Mzone Login aka com.mr384.MzoneLogin application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...