CVE-2014-7360

The How To Boil Eggs aka com.appmakr.app842173 application 251333 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7470

The CVE-2014-7470 entry concerns the I Know the Movie Android app (com.guilardi.jesaislefilm2), specifically jesais_film_android_1.1. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate...

CVE-2014-7461

The CVE-2014-7461 entry identifies the Android app “A King Sperm” (com.wKingSperm) 0.63.13384.23020 as vulnerable because it does not verify X.509 certificates from SSL servers, enabling MitM where an attacker could obtain sensitive information via a crafted certificate. The NVD metrics indicate ...

CVE-2014-7334

The Where Dallas aka com.magzter.wheredallas application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7087

The Top Roller Coasters Europe 1 aka com.appaapps.top10tallesteuropeanrollercoasters1 application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7026

The LIFE TIME FITNESS aka com.lifetimefitness.ltfmobile application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7017

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bust Out Bail aka com.onesolutionapps.bustoutbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SudaniNet aka com.sudaninet.wtwqiqbegqbtwlda application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6955

The Le Grand Bleu aka com.appzone468 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6971

The Easy Video Downloader aka com.simon.padillar.EasyVideo application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mt. Airy News aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148 application 1.0069.b0069 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6923

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6913

The Dive The World aka com.paperton.wl.divetheworld application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6931

CVE-2014-6931 affects the Treves Dance Center Android app (package com.myapphone.android.myapptrvesdancecenter, version 1.0). The flaw is that the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...

Design/Logic Flaw

The TTNET Muzik aka com.ttnet.muzik application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6893

The Pushpins Grocery Coupons aka com.pushpinsapp.pushpins application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The New Beginnings CFC aka com.goodbarber.nbcfc application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Groupama toujours la aka com.groupama.toujoursla application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6840

The My Wedding Planner aka app.wedding application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...