CVE-2014-4895

CVE-2014-4895 affects the Android app Herpin Time Radio (com.herpin.time.radio) version 2.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-7523

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7523

The CVE-2014-7523 entry concerns the Radio Bethlehem RB2000 Android app (package com.Abuhadbah.rbl2000v2), version 1.0, which does not verify X.509 certificates from SSL servers. Root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and obtain sensiti...

CVE-2014-7101

The Talk Radio Europe aka com.nobexinc.wls31251464.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7101

CVE-2014-7101 affects the Talk Radio Europe Android app (com.nobexinc.wls_31251464.rc) version 3.3.10, where the app does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause is missing s...

CVE-2014-7101

The Talk Radio Europe aka com.nobexinc.wls31251464.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6972

The Kazakhstan Radio aka com.wordbox.kazakhstanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Kazakhstan Radio aka com.wordbox.kazakhstanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6972

The Kazakhstan Radio aka com.wordbox.kazakhstanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6972

The CVE-2014-6972 entry concerns the Android app Kazakhstan Radio (com.wordbox.kazakhstanRadio) version 2.5, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The ...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6922

The CVE-2014-6922 entry refers to the KFAI Community Radio (Android app, package com.skyblue.pra.kfai) version 2.0.4, which does not verify X.509 certificates when connecting to SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information vi...

CVE-2014-6930

The CVE-2014-6930 issue affects the Android app “The Abram Radio Groove!” (com.nobexinc.wls_79226887.rc) version 3.2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-6792

The Suriname Radio aka com.wordbox.surinameRadio application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Suriname Radio aka com.wordbox.surinameRadio application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6792

The CVE-2014-6792 entry concerns the Suriname Radio (com.wordbox.surinameRadio) Android application, version 1.5. The linked documents confirm that the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle disclosure of sensitive data via crafted certificat...

CVE-2014-6678

The Algeria Radio aka com.wordbox.algeriaRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...