CVE-2014-5615

The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5617

The Exsoul Web Browser aka com.exsoul application 3.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5618

The Cartoon Camera aka com.fingersoft.cartooncamera application 1.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5627

The Ice Age Village aka com.gameloft.android.ANMP.GloftIAHM application 2.8.0m for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5628

The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5641

The Cloud Manager aka com.ileaf.cloudmanager application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5644

The Brightest LED Flashlight aka com.intellectualflame.ledflashlight.washer application 1.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5647

The ISL Light Remote Desktop aka com.islonline.isllight.mobile.android application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5652

The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5657

The CA Lottery Results aka com.matcho0.calotto application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5668

The BAND -Group sharing & planning aka com.nhn.android.band application 3.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5681

The XDA-Developers aka com.quoord.tapatalkxda.activity application 3.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5688

The Runtastic Pedometer aka com.runtastic.android.pedometer.lite application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5567

The hasbehaal aka com.anawaz.hasbehaal application 1.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5633

The Kiss Kiss Office aka com.girlsgames123.kisskissoffice application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5682

The CVE-2014-5682 entry refers to The Retale - Weekly Ads & Deals (com.retale.android) for Android v2.1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Connec...

CVE-2014-5547

CVE-2014-5547 affects the Mahjong Galaxy Space Lite app (Android, package air.com.permadi.mahjongIris) version 2.5. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert...

CVE-2014-5555

The CVE-2014-5555 issue affects the Android app Counting & Addition Kids Games (package air.com.tribalnova.ilearnwith.ipad.PokoAddEn) version 1.8.1. Root cause: the app does not verify X.509 certificates for TLS connections, allowing MITM attackers to spoof SSL servers and access sensitive inform...

CVE-2014-5562

The Coles Credit Card App (au.com.colesfinancialservices.mobile) for Android, version 1.0.0, does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation or expl...

CVE-2014-5577

AVON Buy & Sell (com.AVONBeautyntheRep) Android app version 0.3 is affected by an SSL certificate validation flaw: it does not verify X.509 server certificates, enabling MITM with crafted certs. Root cause: missing/improper SSL certificate validation in the app’s network stack. CVSSv2 base score ...