Information disclosure

The e-Kiosk aka com.ekioskreader.android.pdfviewer application 1.74 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7490

The CVE-2014-7490 entry concerns the Android app Menaka - Marathi (com.magzter.menakamarathi) 3.0, which does not verify X.509 certificates from SSL servers. This missing certificate validation can allow a man-in-the-middle to spoof servers and steal sensitive information via crafted certificates...

CVE-2014-7502

The CVE-2014-7502 entry describes an Android app issue: Escucha elDiario.es (aka es.lacabradev.escuchaeldiario) 1.2.3 does not verify X.509 SSL certificates, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is missing SSL certificate ...

CVE-2014-7566

The CVE concerns the Stift Neuburg (aka de.appack.project.neuburg) Android application version 1.1, which does not verify X.509 certificates from SSL servers. This creates a vulnerability to man-in-the-middle attacks, allowing an attacker to spoof servers and access sensitive information via a cr...

CVE-2014-7336

The Taking Your Company Public aka biz.app4mobile.app016e43d03ee54d1facd6c9532a00e724.app application 1.28.44.441 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Just Bureaucracy aka com.magzter.justbureaucracy application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7382

The CVE-2014-7382 entry describes a vulnerability in The Alternative Connection (com.wAlternativeConnection) app version 0.1 for Android where SSL X.509 certificates are not verified. This allows man-in-the-middle attackers to spoof servers and potentially obtain sensitive information via a craft...

CVE-2014-7452

The Shaklee Product Catalog aka com.wProductCatalog application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7367

The TuS 1947 Radis aka com.tus1947radis application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7447

The CVE-2014-7447 entry concerns The Dattch – The Lesbian App (com.dattch.dattch.app) for Android, version 0.30, which does not verify X.509 certificates from SSL servers. The root cause is that SSL certificate verification is bypassed, enabling man-in-the-middle attackers to spoof servers and ob...

CVE-2014-7380

The Cedar Kiosk aka com.apps2you.cedarkiosk application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7403

The NZHondas.com aka com.tapatalk.nzhondascom application 3.6.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7443

The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...

CVE-2014-7346

The CVE-2014-7346 entry concerns the Bespoke Android app (com.magzter.bespoke) version 3.0, which does not verify X.509 certificates when establishing SSL connections. The root cause is missing certificate validation, enabling potential man‑in‑the‑middle attackers to spoof servers and extract sen...

CVE-2014-7107

The Human Factor aka com.magzter.thehumanfactor application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Twin Lin aka com.twinlin.twmo application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6971

The CVE-2014-6971 entry affects the Android app Easy Video Downloader (com.simon.padillar.EasyVideo), version 4.4.1, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and steal sensitive information via a crafted certificate. The ...

CVE-2014-6986

CVE-2014-6986 affects the Android app “The Pregnancy Tips” (package com.rareartifact.tipsforpregnant71C80129) version 1.0. The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2014-7009

The HKBN My Account aka com.hkbn.myaccount application @7F070015 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6960

The CVE-2014-6960 entry concerns the Multitrac (com.multitrac) Android app version 1.04, which does not verify X.509 certificates when connecting to SSL servers. This enables man-in-the-middle attackers to spoof legitimate servers and access sensitive information via a crafted certificate. The av...