CVE-2014-5772

The CVE-2014-5772 entry concerns the Government Bookstore Android app (version 1.01). The vulnerability is that it does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploita...

CVE-2014-5813

The CVE-2014-5813 entry covers the Lostword Android app (package: lostword) version 5.9, which does not verify X.509 certificates when establishing SSL/TLS connections. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information by presenting cra...

CVE-2014-5701

The CVE-2014-5701 entry concerns the Skout: Chats. Friends. Fun. Android app (com.skout.android) version 4.3.3, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD r...

CVE-2014-5810

The SGK Hizmet Dokumu 4a (tr.gov.sgk.hizmetDokumu4a) Android app, version 1.103, does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Exploit details, affected components beyond the Android app, a...

CVE-2014-5770

The CVE-2014-5770 entry concerns the Web Browser for Android (aka explore.web.browser) version 1.2 for Android, which does not verify X.509 certificates from SSL servers. This lets attackers perform a man‑in‑the‑middle attack to spoof servers and access sensitive information via a crafted certifi...

CVE-2014-5799

The CVE-2014-5799 entry concerns the Android smart.card (nh.smart.card) application version 3.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive information via a crafted certificate. Th...

CVE-2014-5777

CVE-2014-5777 affects the Android app icon wallpaper dressup-CocoPPa (jp.united.app.cocoppa) version around 2.8.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted c...

CVE-2014-5805

The vulnerability CVE-2014-5805 affects the Android app Dating for everyone - Mamba! (ru.mamba.client) , version 3.5. It arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5682

The Retale - Weekly Ads & Deals aka com.retale.android application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5688

The Runtastic Pedometer aka com.runtastic.android.pedometer.lite application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5622

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5582

The Ingress Intel Helper aka com.bb.ingressintel application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5543

The Hidden Object - Alice Free aka air.com.differencegames.hovisionsofalicefree application 1.0.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5534

The Princess Shopping aka air.android.PrincessShopping application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5529

The Gameloft library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Huntington Mobile aka com.huntington.m application 2.1.222 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The PopU 2: Get Likes on Instagram aka com.popuapp.popu application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Open redirect

The Runtastic Road Bike aka com.runtastic.android.roadbike.lite application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Piano Teacher aka com.rubycell.pianisthd application 20140730 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...