Information disclosure

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Thanodi - Setswana Translator aka com.thanodi.thanodi application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6825

The Teatro Franco Parenti aka com.mintlab.mx.teatroparenti application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6824

The kamkomesan aka com.anek.kamkomesan application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6814

The Sentinels Randomizer aka com.mikehipps.sentinelsrandomizer application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6836

The DS photo+ aka com.synology.dsphoto application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6819

The Lapp Group Catalogue aka com.prinovis.LappKabel application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6822

The Nerdico aka com.nerdico.danielepais application 1.9 Stable for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6807

The OLA School aka com.conduit.app00f9890a4f0145f2aae9d714e20b273a.app application 1.2.7.132 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6829

The Hook aka com.hook.android application 0.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6815

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6818

The OHBM 20th Annual Meeting aka com.coreapps.android.followme.ohbm2014 application 6.0.9.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6831

The Hippo Studio aka com.appgreen.hippostudio application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6816

The WISDOM aka lvtu99.com.nescmxiaoniuniu application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6817

The Cove aka org.covechurch.app application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6832

The Bersa Forum aka com.gcspublishing.bersaforum application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6807

CVE-2014-6807 affects the OLA School Android app (com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) version 1.2.7.132. The root cause is failure to verify X.509 certificates from SSL servers, which can let attackers perform a man-in-the-middle attack to spoof servers and obtain sensitive info...

CVE-2014-6833

The AuctionTrac Dealer aka com.adesa.dealer.phone application 2.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6808

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6806

The Thanodi - Setswana Translator aka com.thanodi.thanodi application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...