Design/Logic Flaw

The FriendCaster Chat aka com.handmark.friendcaster.chat application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PlayScape aka playscape.mominis.gameconsole.com application 9.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Scoutmob local deals & events aka com.scoutmob.ile application 3.0.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Government Best Jobs aka com.wGovernmentBestJobs application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GittiGidiyor aka com.gittigidiyormobil application 1.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The VDM Officiel aka vdm.activities application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The VK Kate Mobile aka com.perm.kate application 9.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The GUNSHIP BATTLE : Helicopter 3D aka com.theonegames.gunshipbattle application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The Solitaire Arena aka com.mavenhut.solitaire application 1.0.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Whisper aka sh.whisper application 4.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5830

CVE-2014-5830 affects the Android app Farm Frenzy Gold (com.herocraft.game.farmfrenzy.gold) version 1.0.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5738

The Garfield's Defense aka com.webprancer.google.garfieldDefense application 1.5.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5719

The CVE concerns the BIKE RACING 2014 Android app (com.timuzsolutions.bikeracing2014) version 1.6, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attacks to spoof servers and access sensitive data via a crafted certificate. The connected records confirm ...

CVE-2014-5762

The CVE-2014-5762 entry concerns the Android app Cut the Rope: Time Travel (com.zeptolab.timetravel.free.google) version 1.3.4. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and exfiltrate sensitive information vi...

CVE-2014-5855

The CJmall aka com.cjoshppingphone application 4.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5822

The VK Kate Mobile aka com.perm.kate application 9.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5850

The Kaave Fali aka com.didilabs.kaavefali application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5808

The CVE-2014-5808 entry concerns The Whisper (aka sh.whisper) Android app version 4.0.6, which does not verify X.509 certificates from SSL servers. This misconfiguration enables MITM attackers to spoof servers and potentially obtain sensitive information via a crafted certificate, with a CVSSv2 b...

CVE-2014-5774

CVE-2014-5774 affects the Web Browser & Explorer (internetexplorer.browser.webexplorer) app 4 for Android. The issue is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-5779

The CVE-2014-5779 entry concerns The Jack’d - Gay Chat & Dating (aka mobi.jackd.android) Android app version 1.9.0a, where the app does not validate X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information ...