CVE-2014-7339

The Cuanto Conoces A un Amigo aka com.makeitpossible.CuantoConocesAunAmigo application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7368

The Compassion Satisfaction aka com.wCompassionSatisfactionWorkshopPresentation application 0.75.13440.35155 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7460

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7447

The Dattch - The Lesbian App aka com.dattch.dattch.app application 0.30 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7121

The Dhanam aka com.magzter.dhanam application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7384

The CVE-2014-7384 entry applies to the Android application Joe’s Lawn Service (com.appexpress.joeslawnservice) version 1.5. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cr...

CVE-2014-7364

The Promotional Items aka com.wPromotionalItems application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7369

The Il Brillo Parlante aka com.wIlBrilloParlante application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7459

The Press-Leader aka com.soln.S95309F65AD59F99CFC2C710A517B0B7E application 1.0011.b0011 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7435

The CVE entry CVE-2014-7435 concerns the Android app AJD Bail Bonds (com.onesolutionapps.ajdbailbondsandroid) version 1.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-7316

The CVE-2014-7316 entry concerns the Safe Arrival (com.synrevoice.safearrival) Android app (version 1.2) that does not verify X.509 certificates when connecting to SSL servers. This certificate validation failure enables man-in-the-middle attackers to spoof servers and intercept or obtain sensiti...

CVE-2014-7406

CVE-2014-7406 affects the Deakin University Android application (package com.desire2learn.campuslife.deakin.edu.au.directory, version 1.1.729.1694). The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and obtain sen...

CVE-2014-7127

The Football Espana magazine aka com.triactivemedia.footballespana application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7100

The CVE-2014-7100 entry concerns the Android application sm3ny.com (version 1.0) which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-7052

The sahab-alkher.com aka com.tapatalk.sahabalkhercomvb application 2.4.9.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7344

CVE-2014-7344 affects the Android app Classic Arms & Militaria (package com.magazinecloner.classicarmsandm). The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-7448

The CVE-2014-7448 entry applies to the DealSide Institutional Android app (version 3.1) and is caused by not verifying X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and access sensitive information via crafted certificates. Affected software: DealSide Ins...

CVE-2014-7382

The Alternative Connection aka com.wAlternativeConnection application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7418

The BBC Knowledge Magazine aka com.magzter.bbcknowledge application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7368

The CVE-2014-7368 entry affects the Android application Compassion Satisfaction (com.wCompassionSatisfactionWorkshopPresentation) version 0.75.13440.35155. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain ...