Information disclosure

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The RIMS 2014 Annual Conference aka com.coreapps.android.followme.rims2014 application 6.0.7.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6835

The Herbal Guide Android app (com.pocket.herbal.guide) version 1.0 is affected by CVE-2014-6835 due to failing to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available sources con...

CVE-2014-6812

The Aloha Guide aka com.aloha.guide.english application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6795

The Beekeeping Forum aka com.tapatalk.supporttapatalkcomxxxxx application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6800

The Bloom Township 206 aka net.parentlink.bloom application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6788

The Oman News aka com.oman.news.rmtzlnbuooordciw application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6772

The United Educational CU aka com.metova.cuae.uecu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6776

The United Advantage NW Federal Cr aka com.myappengine.uanwfcu application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anaheim Library 2Go! aka com.bredir.boopsie.anaheim application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Renny McLean Ministries aka com.subsplash.thechurchapp.sGJQX72 application 2.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The INVEX aka com.mobilatolye.keyinternet application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The blueeleph aka eg.film.blueeleph application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6802

The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6795

The CVE-2014-6795 entry affects The Beekeeping Forum Android app (version 3.9.15) and is due to the app not verifying X.509 certificates from SSL servers, enabling MITM-style disclosure of sensitive information. The NVD notes a CVSSv2 base score of 5.4 (MEDIUM) with partial confidentiality/integr...

CVE-2014-6801

CVE-2014-6801 affects the Android app “frank matano” (version 1.0). The root cause is failure to verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public data from NVD lists a CVSS v2 ...

CVE-2014-6795

The Beekeeping Forum aka com.tapatalk.supporttapatalkcomxxxxx application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...