CVE-2014-6761

The Aprende a Meditar aka com.rareartifact.aprendeameditar544CB0A2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The United Heritage Mobile aka FiMobile.UHCU application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6752

The CVE-2014-6752 entry concerns the Mindless Behavior Fan Base app (com.mindless.behavior.fan.base) for Android, version 1.0, which does not verify X.509 certificates when establishing SSL connections. This weakness enables man-in-the-middle attackers to spoof servers and obtain sensitive inform...

CVE-2014-6763

The Codename Birdgame aka com.devsecondfictioncom.devsecondfictioncom.birdadhoc application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6746

The Infiniti Roadside Assistance aka com.ccas.rsa.common.infiniti application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Infiniti Roadside Assistance aka com.ccas.rsa.common.infiniti application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6722

The CVE-2014-6722 entry affects the Android app “Pescuit Crap Lite” (ro.aventurilapescui.pescuitcrap.lite), version 1.0. The vulnerability stems from the app not verifying X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and obtain sensitive ...

CVE-2014-6724

The Soap Making aka com.tapatalk.soapmakingforumcom application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The StarSat International aka com.conduit.appb15a1814d2d840198e70e3c235af5e8b.app application 1.41.54.9222 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6702

The StarSat International aka com.conduit.appb15a1814d2d840198e70e3c235af5e8b.app application 1.41.54.9222 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 5SOS Family Planet aka uk.co.pixelkicks.fivesos application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The ChallengerTX aka com.zhtiantian.ChallengerTX application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Forum Krstarice aka com.tapatalk.forumkrstaricacom application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6684

The MOL bringaPONT aka hu.mol.bringapont application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6653

The Afghan Radio aka com.wordbox.afghanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6649

The MyBroadband Tapatalk aka com.tapatalk.mybroadbandcozavb application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Celluloid aka com.eurisko.celluloid application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The eWUS mobile aka pl.dreryk.ewustest application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5971

The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...