CVE-2014-6795

The Beekeeping Forum aka com.tapatalk.supporttapatalkcomxxxxx application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6800

The Bloom Township 206 aka net.parentlink.bloom application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6788

The Oman News aka com.oman.news.rmtzlnbuooordciw application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6772

The United Educational CU aka com.metova.cuae.uecu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6776

The United Advantage NW Federal Cr aka com.myappengine.uanwfcu application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anaheim Library 2Go! aka com.bredir.boopsie.anaheim application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The INVEX aka com.mobilatolye.keyinternet application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Renny McLean Ministries aka com.subsplash.thechurchapp.sGJQX72 application 2.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The blueeleph aka eg.film.blueeleph application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6798

The McMaster Marauders aka com.weever.marauders application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6778

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6802

The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6795

The Beekeeping Forum aka com.tapatalk.supporttapatalkcomxxxxx application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6795

The CVE-2014-6795 entry affects The Beekeeping Forum Android app (version 3.9.15) and is due to the app not verifying X.509 certificates from SSL servers, enabling MITM-style disclosure of sensitive information. The NVD notes a CVSSv2 base score of 5.4 (MEDIUM) with partial confidentiality/integr...

CVE-2014-6801

CVE-2014-6801 affects the Android app “frank matano” (version 1.0). The root cause is failure to verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public data from NVD lists a CVSS v2 ...

CVE-2014-6799

The Investigation Tool (gov.ca.post.lp.itool) 1.0.0 for Android is affected. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The connected doc...

CVE-2014-6748

The GEMAIRE's HVAC Assist aka com.es.Gemaire application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...