CVE-2014-6881

The PNC Virtual Wallet aka com.pnc.ecommerce.mobile.vw.android application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6857

The Car Wallpapers HD aka com.arab4x4.gallery.app application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6886

The WePhone - phone calls vs skype aka com.wephoneapp application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6874

The ModSim Connected aka com.concursive.modsim application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6882

The Western Federal Credit Union aka com.kerrata.pulse.western application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6888

The CVE-2014-6888 entry concerns the PennyTalk Mobile Android app (version 2.0.3.0) failing to verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. This mode provides the vulnera...

CVE-2014-6875

CVE-2014-6875 affects the Woodforest Mobile Banking Android app (v3.1); the root cause is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Exploit status and fixes are not detailed...

CVE-2014-6865

The CVE-2014-6865 entry concerns the Android app The Jamal Bates Show (package com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) version 1.3.14.254. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and...

CVE-2014-6884

The Ford Credit Account Manager aka com.fordcredit.accountmanager application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6861

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6859

The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6869

The barcode scanner aka tw.com.books.android.plus application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6883

The CNNMoney Portfolio for stocks aka com.cnn.portfolio application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6877

The Santander Personal Banking aka com.sovereign.santander application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6866

The HomeAdvisor Mobile aka com.servicemagic.consumer application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6863

The Mootorratturid & biker.ee aka ee.digitalfruit.mootorratturid application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6885

The Academy Sports + Outdoors Visa aka com.usbank.icsmobile.academysports application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6878

The RBFCU Mobile aka com.Vertifi.DeposZip.P314089681 application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6872

The TTNET Muzik aka com.ttnet.muzik application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6890

The CVE-2014-6890 entry applies to the CouponCabin - Coupons & Deals Android app (com.couponcabin), version 3.6. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive information via a ...