CVE-2014-6887

The EXPRESS aka com.gpshopper.express.android application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The NOS Alive aka pt.optimus.optimusalive2011 application 5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6939

The Sketch W Friends FREE -Tablets aka air.com.xlabz.SketchWFriendsFree application 5.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7046

The George Wassouf aka com.devkhr32.georgewassouf application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7290 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.39 and earlier Oracle MySQL Server versions 5.6.20 and earlier Description: The issue allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. This means that...

CVE-2014-6923

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6931

The Treves Dance Center aka com.myapphone.android.myapptrvesdancecenter application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bikers Underground aka hr.ap.n66871172 application 4.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Myanmar Housing : mmHome aka com.mmhome3 application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6916

The mama.cn aka cn.ziipin.mama.ui application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6912

The CVE-2014-6912 entry relates to the Android app for The IRA’s 59th Annual Conference (package com.coreapps.android.followme.ira_14), version 6.0.7.6. The connected documents confirm a root cause: the app does not verify X.509 certificates from SSL servers. Impact stated in the sources is that ...

CVE-2014-6907

The CVE-2014-6907 entry covers the Rakuten Install (co.jp.rakuten.installapp) Android app v1.5.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Public ...

CVE-2014-6913

The Dive The World aka com.paperton.wl.divetheworld application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6929

The AIHce 2014 aka com.coreapps.android.followme.aihce2014 application 6.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6933

The Toraware Takojyou aka ltd.pte.wavea.torawaretakojyou application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6931

CVE-2014-6931 affects the Treves Dance Center Android app (package com.myapphone.android.myapptrvesdancecenter, version 1.0). The flaw is that the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...

Design/Logic Flaw

The Jazeera Airways aka com.winit.jazeeraairways application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6899

The Jazeera Airways aka com.winit.jazeeraairways application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6893

The Pushpins Grocery Coupons aka com.pushpinsapp.pushpins application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...