CVE-2014-7475

The Ionic View aka com.ionic.viewapp application 0.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7119

The CVE-2014-7119 entry concerns the GNAM 2013 Android app (com.beepeers.gndam) version 1.0 that fails to verify X.509 certificates when connecting to SSL servers. The root cause is lack of certificate validation, which can enable man-in-the-middle attackers to spoof servers and exfiltrate sensit...

CVE-2014-7352

The CVE-2014-7352 entry affects the Android app India’s Anthem (appinventor.ai_opalfoxy83.India_Anthem) v1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7394

CVE-2014-7394 affects the Android app www.alaaliwat.com (com.alaliwat.marsa) v4.9: it does not verify X.509 certificates from SSL servers, allowing MITM via crafted certificates and enabling exposure of sensitive data. Remediation details are not provided in the documents; no exploit status is st...

CVE-2014-7390

CVE-2014-7390 concerns the Android app “The Enchanted Fashion Crush” (package com.tabtale.springcrushbundleint) version 1.0.0, where SSL TLS server certificate verification is not performed. This enables a man-in-the-middle attacker to spoof the server and obtain sensitive data via a crafted cert...

CVE-2014-7461

The A King Sperm by Dr. Seema Rao aka com.wKingSperm application 0.63.13384.23020 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7108

The Stop Headaches and Migraines aka com.StopHeadachesandMigraines application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7307

The ForoSocuellamos aka com.forosocuellamos.tlcttbeukajwpeqreg application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7100

The www.sm3ny.com aka sm3ny.com application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7471

The international-arbitration-attorney.com aka com.w0f1d79a1010d819acbee876007d0bebc application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7439

The bene+ odmeny a slevy aka cz.gemoney.bene.android application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7080

The Sigong ebook aka com.sigongsa.sigonggenre application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7483

The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7455

The Zoella Unofficial aka com.automon.ay.zoella application 1.4.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7313

The One You Fitness aka com.apponeyou.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7348

The HOT CARS aka com.magzter.hotcars application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7079

The Romeo and Juliet aka jp.co.cybird.appli.android.rjs application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7124

The IP Alarm aka com.cosesy.gadget.alarm application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7454

The Detox Juicing Diet Recipes aka com.wDetoxJuicingDietRecipes application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7436

The CVE-2014-7436 vulnerability affects the SOS Recette Android app (1.0). The root issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Effective impact is information...