Information disclosure

The Kiss Kiss Office aka com.girlsgames123.kisskissoffice application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The mirror photo shape aka com.baiwang.styleinstamirror application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Able Remote aka com.entertailion.android.remote application 2.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Counting & Addition Kids Games aka air.com.tribalnova.ilearnwith.ipad.PokoAddEn application 1.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Memory corruption

The Hidden Memory - Aladdin FREE! aka air.com.differencegames.hmaladdinfree application 1.0.31 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5611

The CVE-2014-5611 entry concerns the Android app com.ebay.kleinanzeigen (Germany) version 5.0.2, which does not verify X.509 certificates from SSL servers. This creates a risk of MITM disclosure of sensitive information via crafted certificates. The available connected documents corroborate that ...

CVE-2014-5653

The CVE-2014-5653 entry concerns the Android app Unblock Me FREE (com.kiragames.unblockmefree) version 1.4.4.2, which does not verify X.509 certificates from SSL servers. This causes potential MITM risk where an attacker could spoof the server and obtain sensitive information via a crafted certif...

CVE-2014-5578

The CVE-2014-5578 entry describes the Trading 212 FOREX Android app prior to version 2.0.9 failing to verify X.509 certificates from SSL servers. Root cause: improper SSL/TLS certificate validation, enabling MITM attackers to spoof servers and extract sensitive information through a crafted certi...

CVE-2014-5601

The CVE-2014-5601 issue affects the Android app 1800CONTACTS (com.contacts1800.ecomapp) version 2.7.0, where the app does not verify SSL/TLS X.509 certificates when establishing HTTPS connections. Root cause: missing/incorrect certificate validation logic allows MITM attackers to spoof servers an...

CVE-2014-5547

CVE-2014-5547 affects the Mahjong Galaxy Space Lite app (Android, package air.com.permadi.mahjongIris) version 2.5. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert...

CVE-2014-5643

The Instachat -Instagram Messenger aka com.instachat.android application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5682

The Retale - Weekly Ads & Deals aka com.retale.android application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5531

The Abode aka abode.webview application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5538

The Westmoreland Water FCU aka air.com.creditunionhomebanking.mb115 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5574

The Ask.fm - Social Q&A Network aka com.askfm application 1.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5686

The Runtastic Me aka com.runtastic.android.me.lite application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5597

CVE-2014-5597 affects the Android game “The 9 Innings: 2014 Pro Baseball” (package com.com2us.nipb2013.normal.freefull.google.global.android.common), version 4.0.3. Root cause: the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MITM attackers to spoof th...

CVE-2014-5611

The eBay Kleinanzeigen for Germany aka com.ebay.kleinanzeigen application 5.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5561

The Word Search Free aka air.wordSearchFree application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...