CVE-2014-5799

The CVE-2014-5799 entry concerns the Android smart.card (nh.smart.card) application version 3.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive information via a crafted certificate. Th...

CVE-2014-5810

The SGK Hizmet Dokumu 4a (tr.gov.sgk.hizmetDokumu4a) Android app, version 1.103, does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploit details, affected components beyond the Android app, a...

CVE-2014-5813

The CVE-2014-5813 entry covers the Lostword Android app (package: lostword) version 5.9, which does not verify X.509 certificates when establishing SSL/TLS connections. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information by presenting cra...

CVE-2014-5756

The CVE-2014-5756 entry concerns the Android app “Buy 99 Cents Only Products” (com.ww99CentsOnlyStores) version 0.1, which does not validate X.509 certificates when connecting to SSL servers. This creates a susceptibility to man-in-the-middle attacks where a crafted certificate can spoof servers ...

CVE-2014-5817

The CVE-2014-5817 entry concerns the Android app Mini Pets (com.miniclip.animalshelter) v2.0.3, where SSL/TLS does not verify X.509 certificates. This causes MITM risk, allowing an attacker to spoof servers and extract sensitive data via a crafted certificate. The description, as provided in the ...

CVE-2014-5841

The CVE-2014-5841 entry concerns the Android app Girls Calendar Period&Weight (jp.co.cybird.apps.lifestyle.cal) version 3.2.2, which fails to verify X.509 certificates from SSL servers. This improper certificate validation allows a man-in-the-middle to spoof servers and obtain sensitive informati...

CVE-2014-5770

The CVE-2014-5770 entry concerns the Web Browser for Android (aka explore.web.browser) version 1.2 for Android, which does not verify X.509 certificates from SSL servers. This lets attackers perform a man‑in‑the‑middle attack to spoof servers and access sensitive information via a crafted certifi...

CVE-2014-5805

The vulnerability CVE-2014-5805 affects the Android app Dating for everyone - Mamba! (ru.mamba.client) , version 3.5. It arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5682

The Retale - Weekly Ads & Deals aka com.retale.android application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5688

The Runtastic Pedometer aka com.runtastic.android.pedometer.lite application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5622

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5582

The Ingress Intel Helper aka com.bb.ingressintel application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5543

The Hidden Object - Alice Free aka air.com.differencegames.hovisionsofalicefree application 1.0.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5534

The Princess Shopping aka air.android.PrincessShopping application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5529

The Gameloft library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The PopU 2: Get Likes on Instagram aka com.popuapp.popu application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Huntington Mobile aka com.huntington.m application 2.1.222 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Kiss Kiss Office aka com.girlsgames123.kisskissoffice application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Piano Teacher aka com.rubycell.pianisthd application 20140730 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...