Information disclosure

The sahab-alkher.com aka com.tapatalk.sahabalkhercomvb application 2.4.9.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Compassion Satisfaction aka com.wCompassionSatisfactionWorkshopPresentation application 0.75.13440.35155 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The international-arbitration-attorney.com aka com.w0f1d79a1010d819acbee876007d0bebc application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The AJD Bail Bonds aka com.onesolutionapps.ajdbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jambatan PBB Semporna aka com.wJAMBATANPBBSEMPORNA application 13523.82613 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Magic Stamp aka vn.avagame.apotatem application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mr.Sausage aka com.appmrsausage.layout application 1.301 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7360

The How To Boil Eggs aka com.appmakr.app842173 application 251333 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7460

The CVE-2014-7460 entry concerns the Android app Slots Heaven:FREE Slot Machine (com.twelvegigs.heaven.slots) 1.123, which does not verify X.509 certificates when connecting to SSL servers. The underlying vulnerability is improper certificate validation, allowing MITM attackers to spoof servers a...

CVE-2014-7399

The Suzanne Glathar aka com.appsglathar.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7447

The CVE-2014-7447 entry concerns The Dattch – The Lesbian App (com.dattch.dattch.app) for Android, version 0.30, which does not verify X.509 certificates from SSL servers. The root cause is that SSL certificate verification is bypassed, enabling man-in-the-middle attackers to spoof servers and ob...

CVE-2014-7384

The CVE-2014-7384 entry applies to the Android application Joe’s Lawn Service (com.appexpress.joeslawnservice) version 1.5. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cr...

CVE-2014-7387

The ACC Advocacy Action aka com.acc.app.android.ui application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7435

The CVE entry CVE-2014-7435 concerns the Android app AJD Bail Bonds (com.onesolutionapps.ajdbailbondsandroid) version 1.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-7416

The CVE-2014-7416 entry concerns the Craft Stamper Magazine Android app (com.triactivemedia.craftstamper). The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7388

The CVE-2014-7388 entry concerns the Android app The Sunday Indian Oriya (package com.magzter.thesundayindianoriya) version 3.0.1, which does not verify X.509 certificates when establishing TLS connections. This allows man‑in‑the‑middle attackers to spoof SSL servers and potentially obtain sensit...

CVE-2014-7362

CVE-2014-7362 affects the Naranjas Con Tocados Android app (version 0.1). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public records (N...

CVE-2014-7464

CVE-2014-7464 concerns the Android app “The Magic Stamp” (aka vn.avagame.apotatem) version 2.8, where the client fails to verify X.509 certificates from SSL servers. This root cause allows MITM attackers to spoof the server and potentially leak sensitive information via a crafted certificate. The...

CVE-2014-7406

CVE-2014-7406 affects the Deakin University Android application (package com.desire2learn.campuslife.deakin.edu.au.directory, version 1.1.729.1694). The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and obtain sen...