CVE-2014-5812

The CVE-2014-5812 vulnerability affects the VDM Officiel (aka vdm.activities) Android app (version 5). The issue is that the app does not verify SSL/X.509 certificates, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The available referenc...

CVE-2014-5855

The CJmall aka com.cjoshppingphone application 4.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5808

The CVE-2014-5808 entry concerns The Whisper (aka sh.whisper) Android app version 4.0.6, which does not verify X.509 certificates from SSL servers. This misconfiguration enables MITM attackers to spoof servers and potentially obtain sensitive information via a crafted certificate, with a CVSSv2 b...

CVE-2014-5774

CVE-2014-5774 affects the Web Browser & Explorer (internetexplorer.browser.webexplorer) app 4 for Android. The issue is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-5779

The CVE-2014-5779 entry concerns The Jack’d - Gay Chat & Dating (aka mobi.jackd.android) Android app version 1.9.0a, where the app does not validate X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information ...

CVE-2014-5710

The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5844

The Alsunna aka com.wAlsunna application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5833

The CVE-2014-5833 entry concerns the FriendCaster Chat app (com.handmark.friendcaster.chat) for Android. The affected component is the SSL/TLS certificate verification in the app, which does not verify X.509 certificates from SSL servers. This behavior can enable a man-in-the-middle (MITM) attack...

CVE-2014-5757

The CVE-2014-5757 entry affects the Android app Buy Tickets (com.xcr.android.buytickets) version 2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5784

CVE-2014-5784 affects the Bouncy Bill Seasons Android app (version 1.3.9). The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The documented impact is info...

CVE-2014-5765

The CVE-2014-5765 entry concerns the Paint for Friends (de.lotumlabs.buddypainting) Android app version 1.5.1, which does not verify X.509 certificates when establishing SSL connections. This behavior can allow man-in-the-middle attackers to spoof servers and recover sensitive information via a c...

CVE-2014-5820

The CVE refers to the OkCupid Dating Android app (package com.okcupid.okcupid) version 3.4.6, where the client does not verify X.509 certificates from SSL servers. This weakens TLS authentication and enables MITM attackers to spoof servers and access sensitive information via a crafted certificat...

CVE-2014-5760

CVE-2014-5760 affects the Pizza Hut Android app (com.yum.pizzahut) version 2.0.5, where the app does not verify X.509 SSL certificates. This allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. Connected sources confirm the same impact across ref...

CVE-2014-5788

CVE-2014-5788 affects the Android app Ninja Chicken Adventure Island (aka mominis.Generic_Android.Ninja_Chicken_Adventure_Island) version 1.1.1. The flaw is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive d...

CVE-2014-5707

The CVE-2014-5707 entry concerns The Bunny Run (com.stargirlgames.google.bunnyrun) Android app version 1.1.2 that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information. Public sources (NVD and CVE databases) corroborate the ...

CVE-2014-5825

The Guess The Movie (com.june.guessthemovie) Android app (version 2.982) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a CVSSv2 base score of 5.4 (MEDIUM) with ...

CVE-2014-5805

The Dating for everyone - Mamba! aka ru.mamba.client application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5756

The CVE-2014-5756 entry concerns the Android app “Buy 99 Cents Only Products” (com.ww99CentsOnlyStores) version 0.1, which does not validate X.509 certificates when connecting to SSL servers. This creates a susceptibility to man-in-the-middle attacks where a crafted certificate can spoof servers ...

CVE-2014-5841

The CVE-2014-5841 entry concerns the Android app Girls Calendar Period&Weight (jp.co.cybird.apps.lifestyle.cal) version 3.2.2, which fails to verify X.509 certificates from SSL servers. This improper certificate validation allows a man-in-the-middle to spoof servers and obtain sensitive informati...

CVE-2014-5817

The CVE-2014-5817 entry concerns the Android app Mini Pets (com.miniclip.animalshelter) v2.0.3, where SSL/TLS does not verify X.509 certificates. This causes MITM risk, allowing an attacker to spoof servers and extract sensitive data via a crafted certificate. The description, as provided in the ...