CVE-2014-5731

The CVE-2014-5731 entry concerns the Android app Word Search (com.virtuesoft.wordsearch) v2.3.0, which fails to verify X.509 certificates from SSL servers. This behavior enables man‑in‑the‑middle attackers to spoof servers and read confidential data via crafted certificates. The vulnerability is ...

CVE-2014-5779

The CVE-2014-5779 entry concerns The Jack’d - Gay Chat & Dating (aka mobi.jackd.android) Android app version 1.9.0a, where the app does not validate X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information ...

CVE-2014-5830

CVE-2014-5830 affects the Android app Farm Frenzy Gold (com.herocraft.game.farmfrenzy.gold) version 1.0.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5774

CVE-2014-5774 affects the Web Browser & Explorer (internetexplorer.browser.webexplorer) app 4 for Android. The issue is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-5818

CVE-2014-5818 affects the Android app Tiny Tower (com.mobage.ww.a560.tinytower_android) v1.7.0.8. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause:...

CVE-2014-5844

The Alsunna aka com.wAlsunna application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5820

The CVE refers to the OkCupid Dating Android app (package com.okcupid.okcupid) version 3.4.6, where the client does not verify X.509 certificates from SSL servers. This weakens TLS authentication and enables MITM attackers to spoof servers and access sensitive information via a crafted certificat...

CVE-2014-5833

The CVE-2014-5833 entry concerns the FriendCaster Chat app (com.handmark.friendcaster.chat) for Android. The affected component is the SSL/TLS certificate verification in the app, which does not verify X.509 certificates from SSL servers. This behavior can enable a man-in-the-middle (MITM) attack...

CVE-2014-5757

The CVE-2014-5757 entry affects the Android app Buy Tickets (com.xcr.android.buytickets) version 2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5707

The CVE-2014-5707 entry concerns The Bunny Run (com.stargirlgames.google.bunnyrun) Android app version 1.1.2 that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information. Public sources (NVD and CVE databases) corroborate the ...

CVE-2014-5805

The Dating for everyone - Mamba! aka ru.mamba.client application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5760

CVE-2014-5760 affects the Pizza Hut Android app (com.yum.pizzahut) version 2.0.5, where the app does not verify X.509 SSL certificates. This allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. Connected sources confirm the same impact across ref...

CVE-2014-5710

The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5825

The Guess The Movie (com.june.guessthemovie) Android app (version 2.982) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a CVSSv2 base score of 5.4 (MEDIUM) with ...

CVE-2014-5788

CVE-2014-5788 affects the Android app Ninja Chicken Adventure Island (aka mominis.Generic_Android.Ninja_Chicken_Adventure_Island) version 1.1.1. The flaw is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive d...

CVE-2014-5765

The CVE-2014-5765 entry concerns the Paint for Friends (de.lotumlabs.buddypainting) Android app version 1.5.1, which does not verify X.509 certificates when establishing SSL connections. This behavior can allow man-in-the-middle attackers to spoof servers and recover sensitive information via a c...

CVE-2014-5784

CVE-2014-5784 affects the Bouncy Bill Seasons Android app (version 1.3.9). The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The documented impact is info...

CVE-2014-5777

CVE-2014-5777 affects the Android app icon wallpaper dressup-CocoPPa (jp.united.app.cocoppa) version around 2.8.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted c...

CVE-2014-5701

The CVE-2014-5701 entry concerns the Skout: Chats. Friends. Fun. Android app (com.skout.android) version 4.3.3, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD r...

CVE-2014-5772

The CVE-2014-5772 entry concerns the Government Bookstore Android app (version 1.01). The vulnerability is that it does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploita...