CVE-2014-7578

The Bieber News Now aka com.jbnews application 12.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7542

The l'Informatiu aka com.linformatiu.spm application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7528

The Horsepower aka com.apptive.android.apps.horsepower application 2.10.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7515

The Bail Bonds aka com.onesolutionapps.chadlewisbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7505

The AppTalk aka com.chatatami.apptalk application 1.4.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bowl Expo 2014 aka com.coreapps.android.followme.bowlexpo14 application 6.1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PRIX IMPORT aka com.myapphone.android.myapppriximport application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bieber News Now aka com.jbnews application 12.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Marcus Butler Unofficial aka com.automon.ay.marcus.butler application 1.4.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Noticias Bebes Beybies aka com.beybies application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7487

The ADT Aesthetic Dentistry Today aka com.magazinecloner.aestheticdentistry application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7543

The Blood aka com.sheridan.ash application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8102

Name of the Vulnerable Software and Affected Versions The Grey's Anatomy Fan aka nl.jborsje.android.tvfan.greysanatomy version 3.7.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not...

PT-2014-8082

Name of the Vulnerable Software and Affected Versions Texas Poker Unlimited Hold'em version 1.2.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SS...

PT-2014-8108

Name of the Vulnerable Software and Affected Versions The Bieber News Now aka com.jbnews application version 12.0.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-8089

Name of the Vulnerable Software and Affected Versions com.tapatalk.zroadstercomforum version 2.4.13.17 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fr...

PT-2014-8124

Name of the Vulnerable Software and Affected Versions FRONT aka com.magazinecloner.front application version @7F08017A Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-8128

Name of the Vulnerable Software and Affected Versions Concursive application version 2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...