CVE-2014-6988

CVE-2014-6988 concerns the Android application Quotes in Images (pt.lumberapps.imagensfrases) version 3.7.5, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof HTTPS servers and obtain sensitive information via a crafted certifica...

CVE-2014-6967

The CVE-2014-6967 entry concerns the Albion College Android app (package com.vivomobile.albioncollege) at version 2.1.16 that does not verify X.509 certificates when establishing TLS connections. This flaw enables man-in-the-middle attackers to spoof SSL servers and harvest sensitive information ...

CVE-2014-6998

The PinkFong TV Android app (package kr.co.smartstudy.pinkfongtv_android_googlemarket, version 4) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The root cause is improper certificate valida...

CVE-2014-6952

The Manga Facts aka app.mangafacts.ar application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6945

The Neeku Naaku Dash Dash aka com.dakshaa.nndd application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Manga Facts aka app.mangafacts.ar application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6950

The Mt. Airy News aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148 application 1.0069.b0069 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6952

The Manga Facts aka app.mangafacts.ar application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6943

The NVD/NVD-linked records identify CVE-2014-6943: the Konigsleiten (com.knigsleiten) Android app 1.0 does not verify X.509 certificates from SSL servers, so TLS connections can be intercepted by MITM attackers who present a crafted certificate to obtain sensitive data. Root cause: missing X.509 ...

CVE-2014-6948

The TH3 professional Al Mohtarif aka com.th3professional.almohtarif application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EXPRESS aka com.gpshopper.express.android application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6937

The China CITIC Bank Credit Card aka com.citiccard.mobilebank application 3.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6936

The IDS 2013 aka de.mobileeventguide.ids2013 application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6925

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Toraware Takojyou aka ltd.pte.wavea.torawaretakojyou application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

CVE-2014-6909 affects the Coca-Cola FM Peru Android app (com.enyetech.radio.coca_cola.fm_pe) version 2.0.41716, which does not verify X.509 certificates from SSL servers. This allows Man‑in‑the‑Middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The base ...

CVE-2014-6919

The CVE-2014-6919 entry concerns the Android app Metalcasting Newsstand (air.com.yudu.ReaderAIR3017071) , version 3.12.0 . The vulnerability is that the application does not verify X.509 certificates when connecting to SSL servers, enabling a man-in-the-middle (MITM) attacker to spoof servers and...