CVE-2014-6688

The Voices.com aka com.voices.voices application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6658

The Apploi Job Search- Find Jobs aka com.apploi application 4.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6684

The MOL bringaPONT aka hu.mol.bringapont application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6648

The iPhone4.TW aka com.tapatalk.iPhone4TWforums application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6676

The Exercitii pentru abdomen aka com.rareartifact.exercitiipentruabdomen41E29322 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6659

The Defence.pk aka com.tapatalk.defencepkforums application 2.4.13.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6682

The w88235ff7bdc2fb574f1789750ea99ed6 aka com.w88235ff7bdc2fb574f1789750ea99ed6 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6673

The ChallengerTX aka com.zhtiantian.ChallengerTX application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6657

The Leadership Newspapers aka com.LeadershipNewspapers application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6672

The Friendcaster aka uk.co.senab.blueNotifyFree application 5.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6670

CVE-2014-6670 affects the Android app “SingaporeMotherhood Forum” (com.tapatalk.singaporemotherhoodcomforum) version 3.6.6. The root cause is that the application does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a c...

CVE-2014-6647

The ElForro.com aka com.tapatalk.elforrocom application 2.4.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6649

The MyBroadband Tapatalk aka com.tapatalk.mybroadbandcozavb application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6648

CVE-2014-6648 concerns the Android version of the iPhone4.TW (com.tapatalk.iPhone4TWforums) app, v3.3.20, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted ...

CVE-2014-6668

The African Radios Live aka com.nana.africanradioslive application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6652

The Wizaz Forum aka com.tapatalk.wizazplforum application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

[SECURITY] Fedora 21 Update: curl-7.37.0-7.fc21

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2014-6021

The Harley-Davidson Visa aka com.usbank.icsmobile.harleydavidson application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6023

The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6637

The Facebook Facts aka com.wFacebookFacts application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...