CVE-2014-6704

The CVE-2014-6704 entry affects the Android app Utah Jazz (package com.sportinginnovations.jazz) version 2.0.0. The vulnerability is a failure to verify X.509 SSL certificates when establishing TLS connections, which enables man-in-the-middle attackers to spoof servers and potentially leak sensit...

CVE-2014-6702

The CVE-2014-6702 entry concerns the StarSat International Android app (package com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app), version 1.41.54.9222, which does not verify X.509 certificates from SSL servers. This implementation flaw allows man-in-the-middle attackers to spoof trusted serv...

CVE-2014-6717

The CVE-2014-6717 vulnerability affects the iTriage Health Android app (package com.healthagen.iTriage) version 5.29. The issue is that the app does not verify X.509 certificates from SSL servers, creating a trust flaw that can enable man-in-the-middle attackers to spoof servers and obtain sensit...

CVE-2014-6714

The WebMD aka com.webmd.android application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6702

The StarSat International aka com.conduit.appb15a1814d2d840198e70e3c235af5e8b.app application 1.41.54.9222 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6716

The fastin aka moda.azyae.fastin.net application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6694

The 5SOS Family Planet aka uk.co.pixelkicks.fivesos application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6694

The CVE-2014-6694 issue affects the Android app “5SOS Family Planet” (package uk.co.pixelkicks.fivesos) version 2.3.4, where the app does not verify X.509 certificates from SSL servers. This pluggable weakness enables man-in-the-middle attackers to spoof servers and obtain sensitive information v...

CVE-2014-6693

The Juiker aka org.itri application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6699

The Weather Channel aka com.weather.Weather application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6688

The Voices.com aka com.voices.voices application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6680

The superheroquiz aka com.davidhey.superheroquiz application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6651

The Planet of the Vapes Forum aka com.tapatalk.planetofthevapescoukforums application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6670

The SingaporeMotherhood Forum aka com.tapatalk.singaporemotherhoodcomforum application 3.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6657

The Leadership Newspapers aka com.LeadershipNewspapers application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6652

The Wizaz Forum aka com.tapatalk.wizazplforum application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6662

The Forum Krstarice aka com.tapatalk.forumkrstaricacom application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6659

The Defence.pk aka com.tapatalk.defencepkforums application 2.4.13.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6654

The wTrootrooTvIzle aka com.wTrootrooTvIzle application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Inside Crochet aka com.magazinecloner.insidecrochet application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...