EUVD-2014-7329

Malware in sbrugna...

CVE-2014-7458

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7458

The CVE-2014-7458 entry concerns the BloomYou Valentine Android app (package com.bloomyouteam.bloomyou.valentine, version 2.4). The vulnerability is failed TLS/SSL certificate validation: the app does not verify X.509 certificates from SSL servers. This allows an attacker to perform man-in-the-mi...

CVE-2014-7458

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...