CVE-2014-7028

The Ibis pau centre aka com.myapphone.android.myappibispaucentre application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7003

The Goodwin aka com.goodwin.Goodwin application 1.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6977

The eLearn aka com.desire2learn.campuslife.chattanoogastate.edu.directory application 1.0.649.1194 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6967

The Albion College aka com.vivomobile.albioncollege application 2.1.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6974

The MifaShow Hairstyles aka com.mifashow application 3.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6967

The CVE-2014-6967 entry concerns the Albion College Android app (package com.vivomobile.albioncollege) at version 2.1.16 that does not verify X.509 certificates when establishing TLS connections. This flaw enables man-in-the-middle attackers to spoof SSL servers and harvest sensitive information ...

CVE-2014-6999

The Questoes OAB aka com.pedefeijao.questoesoab application oabandroid1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7023

The Find Color aka com.chudong.color application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7001

The Jian Ren aka cn.sh.scustom.janren application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7000

The Paul Alexander Campaign aka hr.apps.n51261427 application 4.5.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7018

The LOVE DANCE aka com.efunfun.ddianle.lovedance application 1.2.0626 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7012

The Coffee Inn aka lt.lemonlabs.android.coffeeinn application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6963

The feiron aka es.sw.feironmobile.app application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7004

The PETA aka com.peta.android application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7048

The CVE-2014-7048 entry concerns the Android app Bear ID Lock (com.wBearIDLock) , version 0.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2014-6958

The affected software is the ISMRM-ESMRMB 2014 Android app (com.coreapps.android.followme.ismrm_esmrmb14), version 6.0.8.5. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inform...

CVE-2014-6969

The Deltin Suites aka com.DeltinSuites application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6957

The scottcolibmn aka com.bredir.boopsie.scottlib application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7040

The UniCredit Investors aka eu.unicreditgroup.brand.ucinvestors application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7002

The Sopexa Pavillon France aka com.goomeoevents.pavillonfrance application 3.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...