CVE-2014-7123

The Brevir Harian V2 aka com.brevir.harian.v application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Xxe

The NRA Journal aka com.magazinecloner.nationalrifleassociationjournal application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Sigong ebook aka com.sigongsa.sigonggenre application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bespoke aka com.magzter.bespoke application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Russian Federation Traffic Rules aka com.russia.pdd application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Old Bike Mart aka com.magazinecloner.oldbike application @7F08017E for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Safe Arrival aka com.synrevoice.safearrival application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PROF. USMAN ALI AWHEELA aka com.wPROFUAAWHEELA application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The brain abundance info aka com.wbrainabundance application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7369

The Il Brillo Parlante aka com.wIlBrilloParlante application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7376

CVE-2014-7376 concerns the Android app Facebook Profits on Steroids (com.wFacebookProfitsonSteroids) version 0.1, which fails to validate X.509 certificates when connecting to SSL servers. This weakens transport security by enabling MITM attackers to spoof servers and obtain sensitive information...

CVE-2014-7413

The Rajendra Suriji aka com.rajendrasuriji.nakodabhairav.com application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7121

The Dhanam aka com.magzter.dhanam application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7080

The Sigong ebook aka com.sigongsa.sigonggenre application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7052

The sahab-alkher.com aka com.tapatalk.sahabalkhercomvb application 2.4.9.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7483

The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7100

The CVE-2014-7100 entry concerns the Android application sm3ny.com (version 1.0) which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-7458

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...