CVE-2014-5689

The Runtastic Road Bike aka com.runtastic.android.roadbike.lite application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5611

The CVE-2014-5611 entry concerns the Android app com.ebay.kleinanzeigen (Germany) version 5.0.2, which does not verify X.509 certificates from SSL servers. This creates a risk of MITM disclosure of sensitive information via crafted certificates. The available connected documents corroborate that ...

CVE-2014-5594

The CVE-2014-5594 entry applies to the CIBC Mobile Banking Android app (com.cibc.android.mobi) version 3.2. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificates. The...

CVE-2014-5656

The TRA Auctions for Buyers aka com.manheim.tra application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5660

The TN Members 1st FCU-RDC aka com.metova.cuae.tmffcu application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5582

The Ingress Intel Helper aka com.bb.ingressintel application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5667

The Vault-Hide SMS, Pics & Videos aka com.netqin.ps application 5.0.14.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5580

The BackgroundCheckProTool aka com.BackgroundCheckProTool application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5616

The Web Browser & Explorer aka com.explore.web.browser application 2.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5605

The QQ Copy aka com.digimobistudio.qqcopy application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5653

The CVE-2014-5653 entry concerns the Android app Unblock Me FREE (com.kiragames.unblockmefree) version 1.4.4.2, which does not verify X.509 certificates from SSL servers. This causes potential MITM risk where an attacker could spoof the server and obtain sensitive information via a crafted certif...

CVE-2014-5674

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5606

The Where's My Perry? Free aka com.disney.WMPLite application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5639

The ADT Taxis aka com.icabbi.adttaxisApp application 6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5598

The Puzzle Family aka com.com2us.puzzlefamily.up.freefull.google.global.android.common application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5583

The Most Popular Ringtones aka com.bbs.mostpopularringtones application 32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5588

The Free eBooks aka com.bmfapps.freekindlebooks application 14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5663

The FreeCell Solitaire aka com.mobilityware.freecell application 2.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5595

The actionpuzzlefamily for Kakao aka com.com2us.actionpuzzlefamily.kakao.freefull.google.global.android.common application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-5620

The Office Jerk Free aka com.fluik.OfficeJerkFree application 1.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...