CVE-2014-7731

The Radio de la Cato aka com.radio.de.la.cato application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7751

The Recetas de Tragos aka com.wRecetasdeTragos application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7751

The Recetas de Tragos aka com.wRecetasdeTragos application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7751

The CVE-2014-7751 entry concerns the Android app Recetas de Tragos (com.wRecetasdeTragos) 0.1, which fails to verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate, with partial impacts to confidentiality...

CVE-2014-7731

The CVE-2014-7731 entry concerns the Radio de la Cato (aka com.radio.de.la.cato) Android app version 2.0 failing to verify SSL/X.509 certificates. The root cause is improper certificate verification in TLS/SSL handling, allowing MITM attackers to spoof servers and obtain sensitive data via a craf...

Information disclosure

The Secretos de belleza aka com.rareartifact.secretosdebelleza83A55CB8 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7492

The Secretos de belleza aka com.rareartifact.secretosdebelleza83A55CB8 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7492

CVE-2014-7492 affects the Android application Secretos de belleza (com.rareartifact.secretosdebelleza83A55CB8) version 1.0. The issue is inadequate validation of X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and access sensitive inform...

CVE-2014-7417

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7135

The Ayuntamiento de Coana aka com.wInfoCoa application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Ayuntamiento de Coana aka com.wInfoCoa application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7417

The Real Academia de Bellas Artes aka com.adianteventures.adianteapps.realacademiadebellasartes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7417

CVE-2014-7417 affects the Android app Real Academia de Bellas Artes (com.adianteventures.adianteapps.real_academia_de_bellas_artes) version 1.0, where the app does not verify X.509 certificates from SSL servers. This insecure TLS behavior enables man-in-the-middle attackers to spoof servers and o...

CVE-2014-7135

The CVE concerns the Android app Ayuntamiento de Coana (com.wInfoCoa) version 0.2. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificate. This is t...

CVE-2014-7054

Summary of CVE-2014-7054 : The Android app musica de barrios sonideros (package com.nobexinc.wls_93155702.rc), version 3.3.10, does not verify X.509 certificates when connecting to SSL servers. This allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...

CVE-2014-8068

CVE-2014-8068 affects Adobe Digital Editions 4.x. The issue is information disclosure: DE 4 does not encrypt data transmitted to adelogs.adobe.com, enabling network sniffing of sensitive information (e.g., book-navigation data). Affected platforms include Windows and macOS; older than 4.0.1 build...

CVE-2014-6928

The CVE-2014-6928 entry concerns the Rastreador de Celulares (com.mobincube.android.sc_9KTH8) Android app version 5.0.0 that does not verify X.509 certificates from SSL servers, enabling potential MITM disclosure of sensitive data via a crafted certificate. The connected documents confirm the aff...

melin.sv-de Open Redirect vulnerability

Open Bug Bounty ID: OBB-50517 Description| Value ---|--- Affected Website:| melin.sv-de Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...