CVE-2014-7759

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Authentication flaw

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Open redirect

The Joint Radio Blues aka com.nobexinc.wls69685189.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7731

The Radio de la Cato aka com.radio.de.la.cato application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4895

The Herpin Time Radio aka com.herpin.time.radio application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4887

The Joint Radio Blues aka com.nobexinc.wls69685189.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4887

The CVE-2014-4887 entry applies to the Android app Joint Radio Blues (com.nobexinc.wls_69685189.rc) version 3.2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and retrieve sensitive information via ...

CVE-2014-7796

The CVE-2014-7796 entry concerns House365 Radio (Android, com.nobexinc.wls_27853803.rc) v3.2.3 where the app does not verify X.509 certificates from SSL servers. This implementation flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...

CVE-2014-7731

The CVE-2014-7731 entry concerns the Radio de la Cato (aka com.radio.de.la.cato) Android app version 2.0 failing to verify SSL/X.509 certificates. The root cause is improper certificate verification in TLS/SSL handling, allowing MITM attackers to spoof servers and obtain sensitive data via a craf...

CVE-2014-7796

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7759

The CVE-2014-7759 entry concerns the Jazz Lovers Radio Android app (com.nobexinc.wls_99273254.rc), version 3.2.3, which does not verify SSL/X.509 certificates when connecting to TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-4895

CVE-2014-4895 affects the Android app Herpin Time Radio (com.herpin.time.radio) version 2.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Th...

CVE-2014-7523

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Radio Bethlehem RB2000 aka com.Abuhadbah.rbl2000v2 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7523

The CVE-2014-7523 entry concerns the Radio Bethlehem RB2000 Android app (package com.Abuhadbah.rbl2000v2), version 1.0, which does not verify X.509 certificates from SSL servers. Root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and obtain sensiti...

CVE-2014-7101

The Talk Radio Europe aka com.nobexinc.wls31251464.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7101

CVE-2014-7101 affects the Talk Radio Europe Android app (com.nobexinc.wls_31251464.rc) version 3.3.10, where the app does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate. Root cause is missing s...

CVE-2014-7101

The Talk Radio Europe aka com.nobexinc.wls31251464.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6972

The Kazakhstan Radio aka com.wordbox.kazakhstanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...