CVE-2014-7515

The Bail Bonds aka com.onesolutionapps.chadlewisbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7505

The CVE-2014-7505 entry concerns the AppTalk (com.chatatami.apptalk) Android app version 1.4.8, which does not verify X.509 SSL certificates. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate. The initial data indicates partial impact to confid...

CVE-2014-7533

The CVE-2014-7533 vulnerability affects the NotreDame Seguradora Android app (package br.com.notredame.mobile.NotreDame) version 1.2. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensi...

CVE-2014-7485

The Not Lost Just Somewhere Else aka it.tinytap.attsa.notlost application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7621

The EIN Lookup aka appinventor.aisiwanuth.EINLookup application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7502

The Escucha elDiario.es aka es.lacabradev.escuchaeldiario application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7595

The devada.co.uk aka com.wdevadacouk application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7516

The CVE-2014-7516 entry concerns the Android app Central East LHIN News (com.wCentralEastLHINNews) version 0.1, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-7518

The Bowl Expo 2014 aka com.coreapps.android.followme.bowlexpo14 application 6.1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7602

The FRONT aka com.magazinecloner.front application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7493

The 100 Books aka com.ireadercity.c20 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7538

The CVE-2014-7538 entry concerns The Headlines news India Android app (package com.dreamstep.wHEADLINESNEWSINDIA, version 0.21.13219.95110) failing to verify X.509 certificates when connecting to SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers...

CVE-2014-7485

CVE-2014-7485 concerns the Android app “The Not Lost Just Somewhere Else” (1.6.1) which does not verify X.509 certificates from SSL servers. This vulnerability allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documented impact indicat...

CVE-2014-7603

The CVE-2014-7603 entry is confirmed by connected sources: Gravey Design (com.dreamstep.wGraveyDesign) Android app version 0.58.13357.54919 fails to verify X.509 certificates when connecting to SSL servers, enabling potential MITM attacks and exposure of sensitive data via a crafted certificate. ...

CVE-2014-7577

The B&H Photo Video Pro Audio aka com.bhphoto application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7569

CVE-2014-7569 affects the Android app “Best Greatness Quotes” (1.0). It does not verify X.509 certificates when connecting to SSL servers, enabling potential man-in-the-middle disclosure of sensitive data via a crafted certificate. The issue is tied to the app’s TLS certificate validation logic (...

CVE-2014-7528

The Horsepower aka com.apptive.android.apps.horsepower application 2.10.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7555

The Apparound BLEND aka com.apparound.mobile.catalogo application 4.9.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7622

The Affinity Mobile ATM Locator aka com.collegemobile.affinity.locator application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7572

The Stoner's Handbook L- Bud Guide aka fallacystudios.stonershandbooklite application 7.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...