CVE-2014-7432

CVE-2014-7432 affects the CalculatorApp (com.intuit.alm.testandroidapp) on Android 4.0, where the app does not verify X.509 certificates from SSL servers. This config enables passive or active man-in-the-middle attackers to spoof servers and capture sensitive information via a crafted certificate...

CVE-2014-7416

The Craft Stamper Magazine aka com.triactivemedia.craftstamper application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7417

CVE-2014-7417 affects the Android app Real Academia de Bellas Artes (com.adianteventures.adianteapps.real_academia_de_bellas_artes) version 1.0, where the app does not verify X.509 certificates from SSL servers. This insecure TLS behavior enables man-in-the-middle attackers to spoof servers and o...

CVE-2014-7121

CVE-2014-7121 affects the Android Dhanam app (com.magzter.dhanam) version 3.1, where X.509 certificate validation for SSL/TLS is not performed. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is documented across mult...

CVE-2014-7379

The CVE-2014-7379 entry concerns the Android app Kiddie Kinderschoenen (nl.eigenwinkelapp.kiddiekinderschoenen) version 1.0, which does not verify X.509 certificates when establishing SSL connections. This creates a vulnerability where a man-in-the-middle attacker could spoof servers and obtain s...

CVE-2014-7337

The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7107

The Human Factor aka com.magzter.thehumanfactor application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7071

The Autocar India aka com.magzter.autocarindia application 3.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Hong Kong Tatler Society aka com.magzter.hongkongtatlersociety application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The No Disturb aka com.blogspot.imapp.imnodisturb application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The musica de barrios sonideros aka com.nobexinc.wls93155702.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7061

The MODSIM World 2014 Android app (version 2.0.0) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is described across multiple sources as a lack of proper TLS certificate validation...

CVE-2014-7058

The Efendimizin Sunnetleri aka com.wEfendimizinSunnetleri application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7085

The CVE-2014-7085 entry concerns the Android app i Newspaper (com.independent.thei, package @7F080184). The vulnerability is that it does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...

CVE-2014-7071

CVE-2014-7071 concerns the Autocar India Android app (package com.magzter.autocarindia) version 3.03 failing to verify X.509 certificates when establishing SSL connections. This trust omission allows man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive information via ...

CVE-2014-7099

The CVE-2014-7099 entry concerns the Woodcraft Magazine Android app (package com.magzter.woodcraftmagazine, version 3.0). The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a craf...

CVE-2014-7069

The CVE-2014-7069 entry concerns the Aventino Brand Android app (com.AventinoBrand), version 2.2. The vulnerability is due to failure to verify X.509 certificates when connecting to SSL servers, which enables man-in-the-middle attackers to spoof servers and access sensitive data via a crafted cer...

CVE-2014-7086

The CVE-2014-7086 entry concerns the Android app Killer Screen lock (com.cc.theme.shashou) version 0.5, where the SSL/TLS client does not verify X.509 certificates. This root cause enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerabilit...

CVE-2014-7093

The CVE-2014-7093 entry concerns the Android app Superbike Magazine (package com.triactivemedia.superbike). The connected documents confirm the issue: the app does not verify X.509 certificates from SSL servers, which can allow man‑in‑the‑middle attackers to spoof servers and access sensitive inf...

CVE-2014-7054

The musica de barrios sonideros aka com.nobexinc.wls93155702.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...