CVE-2014-7421

The Revel in the Rideau Lakes aka com.mytoursapp.android.app326 application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7115

The Letters to God - soc. network aka com.wPismakBoguLetterstoGod application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7414

CVE-2014-7414 affects the Android app CLEO Malaysia (com.magzter.cleomalaysia) version 3.01. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. CVSS metrics ...

CVE-2014-7457

The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7314

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7417

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7385

The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7374

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7463

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7357

The Grandparenting is Great aka com.appgig.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7115

CVE-2014-7115 concerns the Android app “The Letters to God - soc. network” (package com.wPismakBoguLetterstoGod) version 0.1, where SSL certificate validation is not performed. This allows a man-in-the-middle to spoof servers and potentially access sensitive information via a crafted certificate....

CVE-2014-7120

The CVE-2014-7120 entry concerns the Android app Model Laboratory (com.magazinecloner.modellaboratory). The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and potentially obtain sensitive information. NVD notes th...

CVE-2014-7099

The Woodcraft Magazine aka com.magzter.woodcraftmagazine application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7101

The Talk Radio Europe aka com.nobexinc.wls31251464.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7102

The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7092

The Ubooly aka com.ubooly.ubooly application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7093

The Superbike Magazine aka com.triactivemedia.superbike application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7091

The Sacramento Kings aka com.tibco.gse.sports application 6.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7088

The JDM Lifestyle aka com.hondatech application 6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7098

The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...