PT-2014-8152

Name of the Vulnerable Software and Affected Versions com.united12thman application version 2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-8272

Name of the Vulnerable Software and Affected Versions iShuttle aka com.synapse.ishuttle user version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...

PT-2014-8214

Name of the Vulnerable Software and Affected Versions edu.cmu.sv.mobile application version 0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-8189

Name of the Vulnerable Software and Affected Versions JusApp! aka com.tapatalk.jusappcombrforum version 3.7.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

PT-2014-8197

Name of the Vulnerable Software and Affected Versions ahtty aka com.crevation.babylon.ahtty version 1.97.16 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

PT-2014-8239

Name of the Vulnerable Software and Affected Versions The Condor S.E. aka com.app condorsoutheast.layout version 1.399 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-8274

Name of the Vulnerable Software and Affected Versions com.zillionmuslims.src version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...

PT-2014-8202

Name of the Vulnerable Software and Affected Versions India Today Telugu application version 3.02 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SS...

PT-2014-8169

Name of the Vulnerable Software and Affected Versions com.wGoNittyGritty application version 0.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to spoof servers and obtain sensitive...

PT-2014-8194

Name of the Vulnerable Software and Affected Versions Xinhua International application version 5.5.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

CVE-2014-7630: Undefined Security Weakness

The Fling Gold aka com.mbgames.fling.gold application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7686: Undefined Security Weakness

The So. Co. Business Partnership aka com.ChamberMe.SCBPSOUTHERNCO application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8154

Name of the Vulnerable Software and Affected Versions com.wHotelRoom aka The Hotel Room application version 0.1 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...

PT-2014-8190

Name of the Vulnerable Software and Affected Versions com.app corvettemuseum.layout version 1.399 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SS...

PT-2014-8168

Name of the Vulnerable Software and Affected Versions com.wmasquito The Masquito Blogger application version 0.1 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...

PT-2014-8182

Name of the Vulnerable Software and Affected Versions Razer Comms - Gaming Messenger version 1.3.07 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-8164

Name of the Vulnerable Software and Affected Versions de.appack.project.vmd The Dresden Transport Museum version 2.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

[slackware-security] openssh

New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssh-6.7p1-i486-1slack14.1.txz: Upgraded. This update fixes a security issue that allows remote servers...

CVE-2014-7592

The FOL aka com.desire2learn.fol.mobile.app.campuslife.directory application 3.0.729.1459 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7578

The Bieber News Now aka com.jbnews application 12.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...