CVE-2014-7796

The CVE-2014-7796 entry concerns House365 Radio (Android, com.nobexinc.wls_27853803.rc) v3.2.3 where the app does not verify X.509 certificates from SSL servers. This implementation flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...

CVE-2014-7731

The CVE-2014-7731 entry concerns the Radio de la Cato (aka com.radio.de.la.cato) Android app version 2.0 failing to verify SSL/X.509 certificates. The root cause is improper certificate verification in TLS/SSL handling, allowing MITM attackers to spoof servers and obtain sensitive data via a craf...

CVE-2014-4895

CVE-2014-4895 affects the Android app Herpin Time Radio (com.herpin.time.radio) version 2.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-4887

The Joint Radio Blues aka com.nobexinc.wls69685189.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7796

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4887

The CVE-2014-4887 entry applies to the Android app Joint Radio Blues (com.nobexinc.wls_69685189.rc) version 3.2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and retrieve sensitive information via ...

CVE-2014-4895

The Herpin Time Radio aka com.herpin.time.radio application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4895: Undefined Security Weakness

The Herpin Time Radio aka com.herpin.time.radio application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7731: Undefined Security Weakness

The Radio de la Cato aka com.radio.de.la.cato application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8279

Name of the Vulnerable Software and Affected Versions The House365 Radio aka com.nobexinc.wls 27853803.rc version 3.2.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.50...

CVE-2014-7759: Undefined Security Weakness

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6197

Name of the Vulnerable Software and Affected Versions The Herpin Time Radio aka com.herpin.time.radio application version 2.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-4887: Undefined Security Weakness

The Joint Radio Blues aka com.nobexinc.wls69685189.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7796: Undefined Security Weakness

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8244

Name of the Vulnerable Software and Affected Versions The Jazz Lovers Radio aka com.nobexinc.wls 99273254.rc version 3.2.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

CVE-2014-7523

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7523

The CVE-2014-7523 entry concerns the Radio Bethlehem RB2000 Android app (package com.Abuhadbah.rbl2000v2), version 1.0, which does not verify X.509 certificates from SSL servers. Root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and obtain sensiti...

CVE-2014-7523: Undefined Security Weakness

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...