CVE-2014-5556

The Fly Fishing & Fly Tying aka air.com.yudu.ReaderAIR3209899 application 3.21.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5668

The BAND -Group sharing & planning aka com.nhn.android.band application 3.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5577

AVON Buy & Sell (com.AVONBeautyntheRep) Android app version 0.3 is affected by an SSL certificate validation flaw: it does not verify X.509 server certificates, enabling MITM with crafted certs. Root cause: missing/improper SSL certificate validation in the app’s network stack. CVSSv2 base score ...

CVE-2014-5553

The Kids Preschool Learning Games aka air.com.tribalnova.ilearnwith.ipad.App3En application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5562

The Coles Credit Card App (au.com.colesfinancialservices.mobile) for Android, version 1.0.0, does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation or expl...

CVE-2014-5634

The Madipass Martinique aka com.goodbarber.madipassmartinique application 1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5669

The 9GAG - Funny pics and videos aka com.ninegag.android.app application 2.4.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5552

The Numbers & Addition! Math games aka air.com.tribalnova.ilearnwith.ipad.App2En application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5628

The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5678

The IQ Test aka com.pophub.androidiqtest.free application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5674

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5561

The Word Search Free aka air.wordSearchFree application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5534

The Princess Shopping aka air.android.PrincessShopping application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5614

The Love Collage - Photo Editor aka com.etoolkit.lovecollage application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5532

The Honolulu aka adidas.jp.android.running.honolulu application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5580

The BackgroundCheckProTool aka com.BackgroundCheckProTool application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5548

The Christmas Words aka air.com.sevenBulls.summerWords application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5620

The Office Jerk Free aka com.fluik.OfficeJerkFree application 1.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5681

The XDA-Developers aka com.quoord.tapatalkxda.activity application 3.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5557

The CVE-2014-5557 entry refers to the Android app “America’s Economy for Phone” (air.gov.census.mobile.phone.americaseconomy) version 1.5.2, which does not verify SSL X.509 certificates. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Multip...