Design/Logic Flaw

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Biplane Forum aka com.gcspublishing.biplaneforum application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The InstaTalks aka com.natrobit.instatalks application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The B&H Photo Video Pro Audio aka com.bhphoto application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Tactical Force LLC aka com.conduit.app69f61a8852b046f2846054b30c4032a7.app application 1.9.23.276 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7533

The CVE-2014-7533 vulnerability affects the NotreDame Seguradora Android app (package br.com.notredame.mobile.NotreDame) version 1.2. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensi...

CVE-2014-7607

The Swamiji.tv (org.yidl.SwamijiTV) Android app, version 2.0, does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive data via a crafted certificate. This vulnerability, as documented in CVE-2014-7607 (NVD entry), has a CVSS v2 base ...

CVE-2014-7621

The EIN Lookup aka appinventor.aisiwanuth.EINLookup application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7557

The CVE-2014-7557 entry concerns the zroadster.com Android app (version 2.4.13.17) failing to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. This is the core issue described across NVD/PRION/CVEs; no...

CVE-2014-7538

The CVE-2014-7538 entry concerns The Headlines news India Android app (package com.dreamstep.wHEADLINESNEWSINDIA, version 0.21.13219.95110) failing to verify X.509 certificates when connecting to SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers...

CVE-2014-7603

The CVE-2014-7603 entry is confirmed by connected sources: Gravey Design (com.dreamstep.wGraveyDesign) Android app version 0.58.13357.54919 fails to verify X.509 certificates when connecting to SSL servers, enabling potential MITM attacks and exposure of sensitive data via a crafted certificate. ...

CVE-2014-7527

The Savage Nation Mobile Web aka com.wSavageNation application 0.57.13354.63350 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7569

CVE-2014-7569 affects the Android app “Best Greatness Quotes” (1.0). It does not verify X.509 certificates when connecting to SSL servers, enabling potential man-in-the-middle disclosure of sensitive data via a crafted certificate. The issue is tied to the app’s TLS certificate validation logic (...

CVE-2014-7580

The CVE-2014-7580 entry concerns the Thailand Investor News Android app (1.39s) which does not verify X.509 certificates from SSL servers. This creates vulnerability to MITM attacks allowing an attacker to spoof servers and obtain sensitive information. The connected records (NVD, CVE List, PRION...

CVE-2014-7612

The e-Kiosk aka com.ekioskreader.android.pdfviewer application 1.74 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7516

The CVE-2014-7516 entry concerns the Android app Central East LHIN News (com.wCentralEastLHINNews) version 0.1, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-7533

The NotreDame Seguradora aka br.com.notredame.mobile.NotreDame application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7575

The eBiblio Andalucia aka com.bqreaders.reader.ebiblioandalucia application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7536

The Service Academy Forums aka com.tapatalk.serviceacademyforumscom application 3.6.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7516

The Central East LHIN News aka com.wCentralEastLHINNews application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...