CVE-2014-5998

CVE-2014-5998 affects SkyDrive Assistant (com.dhh.sky) for Android, version 2.1 . The issue is not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base score is 5.4 (MEDIUM) . N...

CVE-2014-6019

The CVE-2014-6019 issue affects the Android app “The psychology” (com.alek.psychology) version 1.0.2, where SSL certificate verification is not performed. This enables man-in-the-middle attackers to spoof HTTPS servers and access sensitive information via a crafted certificate. The NVD record lis...

CVE-2014-6641

The Homesteading Today aka com.tapatalk.homesteadingtodaycom application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5993

The MLB Preplay aka com.preplay.android.mlb application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5992

The successsecrets aka com.alek.successsecrets application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6008

The Blitz Bingo aka com.appMobi.sbbingo.app application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6017

The Doodle Drop aka net.lazyer.DoodleDrop application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6016

The Celluloid aka com.eurisko.celluloid application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6006

The Gratta & Vinci? aka com.dreamstep.wGrattaevinci application 0.21.13167.93474 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6636

The LG Telepresence aka com.rsupport.rtc.lge application 2.0.12 Build 63 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6014

The Conquest Of Fantasia aka air.com.ingen.studios.cof.sg application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6003

CVE-2014-6003 affects the Belas Frases de Amor (aka com.goodbarber.frasesdeamor) Android app 1. The vendor’s implementation does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The av...

CVE-2014-6642

The CVE concerns the Android app for The Mark’s Daily Apple Forum (com.tapatalk.marksdailyapplecomforum) v2.4.9.3, where the implementation does not verify X.509 certificates from SSL servers. This lack of certificate verification enables man-in-the-middle attackers to spoof servers and exfiltrat...

CVE-2014-6011

The cutprice aka kr.co.wedoit.cutprice application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6009

The Zombie Detector aka com.jimmybolstad.zombiedetector application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6022

The Versent Books aka com.versentbooks application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5979

The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5981

The MoWeather aka com.moji.moweather application 1.40.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5987

The My3 - by 3HK aka com.my3 application @7F0A0001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5990

The cookbible aka net.bookjam.cookbible application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...