CVE-2014-5558

The Hard Time Prison Sim aka air.HardTime application 1.111 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5611

The CVE-2014-5611 entry concerns the Android app com.ebay.kleinanzeigen (Germany) version 5.0.2, which does not verify X.509 certificates from SSL servers. This creates a risk of MITM disclosure of sensitive information via crafted certificates. The available connected documents corroborate that ...

CVE-2014-5591

The Frankly Chat aka com.chatfrankly.android application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5550

The Animals! Kids Preschool Games aka air.com.tribalnova.Animals application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5571

The Appeak Poker aka com.appeak.poker application 2.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5535

CVE-2014-5535 affects The Baby Get Up - Kids Care (aka air.brown.jordansa.getup) Android app, version 1.0.3. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MITM attackers to spoof servers and access sensitive data via a crafted cert...

CVE-2014-5661

The Anger of Stick 3 aka com.miniclip.angerofstick3 application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5626

The CVE-2014-5626 entry concerns the Android app Brothers In Arms 2 Free+ (com.gameloft.android.ANMP.GloftB2HM) version 1.2.0b, where the SSL/TLS layer does not verify X.509 certificates from servers. This insecure behavior enables man-in-the-middle attackers to spoof legitimate servers and extra...

CVE-2014-5653

The CVE-2014-5653 entry concerns the Android app Unblock Me FREE (com.kiragames.unblockmefree) version 1.4.4.2, which does not verify X.509 certificates from SSL servers. This causes potential MITM risk where an attacker could spoof the server and obtain sensitive information via a crafted certif...

CVE-2014-5589

The Now Browser Material aka com.browser.nowbasic 2.8.1 application Material for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5568

The Las Vegas Lottery Scratch Off aka com.androkera.lottery application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5598

The Puzzle Family aka com.com2us.puzzlefamily.up.freefull.google.global.android.common application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5538

The Westmoreland Water FCU aka air.com.creditunionhomebanking.mb115 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5536

The Bingo Bash - Free Bingo Casino aka air.com.bitrhymes.bingo application 1.31.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5616

The Web Browser & Explorer aka com.explore.web.browser application 2.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5601

The 1800CONTACTS App aka com.contacts1800.ecomapp application 2.7.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5682

The CVE-2014-5682 entry refers to The Retale - Weekly Ads & Deals (com.retale.android) for Android v2.1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Connec...

CVE-2014-5567

The hasbehaal aka com.anawaz.hasbehaal application 1.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5594

The CVE-2014-5594 entry applies to the CIBC Mobile Banking Android app (com.cibc.android.mobi) version 3.2. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificates. The...

CVE-2014-5639

The ADT Taxis aka com.icabbi.adttaxisApp application 6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...