Design/Logic Flaw

The Tigo Copa Mundial FIFA 2014 aka com.fwc2014.millicom.and application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5916

The Minha Oi aka br.com.mobicare.minhaoi application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5910

The Dog Whistle aka com.dogwhistle.dogtrainingandroidapp application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5911

The Free App Icons & Icon Packs aka com.jellytap.cooliconfinder application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5908

The Kmart aka com.kmart.android application @7F0C00EF for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5907

The Pet Salon aka com.libiitech.petsalon application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5917

The Slideshow 365 aka com.Slideshow application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5913

The CVE-2014-5913 entry concerns The Allies in War (aka com.gamelion.aiw) Android app 1.3.2 failing to verify SSL server X.509 certificates, enabling MITM attackers to spoof servers and obtain sensitive data. Affected component: Android app networking/SSL validation; root cause: lack of certifica...

CVE-2014-5908

CVE-2014-5908 affects the Kmart Android app (com.kmart.android). The affected component is the SSL/TLS certificate validation logic, where the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive data via a crafted...

CVE-2014-5905

The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5895

The ShopYourWay aka com.sears.shopyourway application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5901

The Beauty Bible - App for Girls aka com.my.beauty.bible application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5904

The MiniInTheBox Online Shopping aka com.miniinthebox.android application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5900

The myHomework Student Planner aka com.myhomeowork application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5903

The Mobile@Work aka com.mobileiron application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5890

The KBO sports2i 2014 aka com.sports2i application 5.1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5891

The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5893

The froyo aka com.shinsegae.mobile.froyo application 5.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Nespresso aka com.nespresso.activities application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...