CVE-2014-7628

The Acorn Comms aka com.acorncomms.app application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7656

The Indian Management aka com.magzter.indianmanagement application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7782

CVE-2014-7782 affects the Android application “Macedonia Hacienda Hotel” (package appinventor.ai_orolimpio999.HotelMacedonia), version 1.0. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inf...

CVE-2014-7716

The Ultimate Christian Radios aka com.ngg.ultimatechristianradios application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7795

The CVE-2014-7795 entry concerns the Android app Harpers Bazaar Art (package com.itp.harpersart, reference @7F080181) that does not verify X.509 certificates when establishing SSL connections. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7766

The 7 Habits Personal Development aka appinventor.aiingkadjiw.TheCompleteGuideToApplyingThe7HabitsInHolisticPersonalDevelopment application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informati...

CVE-2014-7685

The CVE-2014-7685 entry concerns the Razer Comms (com.razerzone.comms) Android app version 1.3.07, which fails to verify X.509 certificates from SSL servers. This weakens TLS, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The conne...

CVE-2014-7647

The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7741

The Healing Bookstore aka com.wHealingBookstore application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7694

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7693

The JusApp! aka com.tapatalk.jusappcombrforum application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4901

The Bond Trading aka com.appmakr.app613309 application 197705 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7696

The Halftime Magazine aka com.magzter.halftimemagazine application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7776

The Kavita KS aka com.snaplion.kavitaks application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7761

The Ink Cards aka com.sincerely.android.ink application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7719

The BASEBALL MANAGER K aka com.cjenm.yagamkgoogle application 1.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7797

The Thai food aka com.foods.thaifood application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7789

The Zillion Muslims aka com.zillionmuslims.src application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7781

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...