CVE-2014-6673

The CVE-2014-6673 entry concerns the ChallengerTX Android app (package com.zhtiantian.ChallengerTX) version 3.9.12.5. The root cause is the app’s failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information through a...

CVE-2014-6681

The Mahabharata Audiocast aka com.wordbox.mahabharataAudiocast application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6675

The Ruta Exacta aka com.rutaexacta.m application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6661

The netease movie aka com.netease.movie application 4.7.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6691

The UC Browser HD aka com.uc.browser.hd application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6686

The Zoho Books - Accounting App aka com.zoho.books application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6019

The psychology aka com.alek.psychology application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5971

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DNB Trade aka lt.dnb.mobiletrade application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Conquest Of Fantasia aka air.com.ingen.studios.cof.sg application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The psychology aka com.alek.psychology application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The TuCarro aka com.tucarro application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Threadflip : Buy, Sell Fashion aka com.threadflip.android application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Doodle Drop aka net.lazyer.DoodleDrop application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6015

The CVE-2014-6015 entry concerns the TuCarro (com.tucarro) Android app v2.0.5 that does not verify X.509 certificates from SSL servers. This causes potential MITM where an attacker can spoof servers and extract sensitive data via a crafted certificate. Documents confirm the affected software and ...

CVE-2014-6014

The CVE-2014-6014 entry affects the Android app “The Conquest Of Fantasia” (package air.com.ingen.studios.cof.sg) v1.0.1. Root cause: the app fails to verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive data via a craf...

CVE-2014-5998

The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...