CVE-2014-7614

The CVE-2014-7614 entry covers the Android application Warrior Beach Retreat (com.wWarriorBeachRetreat) version 0.1, which does not verify X.509 SSL certificates. The underlying issue is certificate verification failure, enabling MITM attackers to spoof servers and exfiltrate sensitive informatio...

CVE-2014-7562

The Health Advocate SmartHelp (com.healthadvocate.ui) Android app version 3.6 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause: missing certificate validation during TLS. Impact: pa...

CVE-2014-7535

The CVE-2014-7535 entry concerns the Android app Classic Racer (com.triactivemedia.classicracer). The root issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The descri...

CVE-2014-7486

The CVE-2014-7486 entry concerns the Mitsubishi Road Assist (com.agero.mitsubishi) Android app version 1.0. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and glean sensitive information via a cra...

CVE-2014-7613

The CVE-2014-7613 entry concerns the Android app WASPS Official Programmes (com.triactivemedia.wasps) not verifying SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Based on NVD, the vulnerability has a Medium impac...

CVE-2014-7578

The CVE-2014-7578 entry relates to the Bieber News Now Android app (com.jbnews) version 12.0.5, which does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The NVD metrics indicate...

CVE-2014-7485

CVE-2014-7485 concerns the Android app “The Not Lost Just Somewhere Else” (1.6.1) which does not verify X.509 certificates from SSL servers. This vulnerability allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documented impact indicat...

CVE-2014-7542

The CVE-2014-7542 entry concerns the Android application l'Informatiu (com.linformatiu.spm) v2.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Document(s) confirm the...

CVE-2014-7529

The CVE-2014-7529 entry covers the Android app “Bodyguard for Hire” (com.dreamstep.wBodyGuardforHire) version 0.18.13146.42280. The issue is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and extract sensitive data via a crafted cer...

CVE-2014-7550

The CVE-2014-7550 entry concerns the Android application “The basketball news & videos” (package com.basketbal.news.caesar), version 1.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and capture sensitive informatio...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7595

The CVE-2014-7595 entry concerns the devada.co.uk (com.wdevadacouk) Android application 1.2 that does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This is a certificate validation ...

CVE-2014-7560

CVE-2014-7560 affects the Fabasoft Cloud Android client (package com.fabasoft.android.cmis.folio_cloud), version 3.0.1. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and disclose sensitive inform...

CVE-2014-7510

The Graffit It Android app (com.presenttechnologies.graffitit) version 1.1.2 fails to verify SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive data via crafted certificates. This CVE (CVE-2014-7510) is based on publicly available vulnerability deta...

CVE-2014-7516

The CVE-2014-7516 entry concerns the Android app Central East LHIN News (com.wCentralEastLHINNews) version 0.1, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-7565

The CVE-2014-7565 entry concerns the Android app Rando Noeux (com.gmteditions.NoeuxLesMinesDistrib) 1.0.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7568

The CVE-2014-7568 entry concerns the Marcus Butler Unofficial Android app (package com.automon.ay.marcus.butler) version 1.4.0.6. Affected component: TLS/SSL certificate validation logic lacks verification of X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers ...

CVE-2014-7523

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7491

The Short Stories aka com.ireadercity.c48 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7501

The Translation Widget (com.wTranslationGadget) for Android, version 0.1, does not verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and obtain sensitive information via a crafted certificate. According to the CVE-2014-7501 entry, the impact includes partial confi...