CVE-2014-7406

The Deakin University aka com.desire2learn.campuslife.deakin.edu.au.directory application 1.1.729.1694 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7466

The Live TV Browser aka com.wHDSmartBrowser application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7085

The i Newspaper aka com.independent.thei application @7F080184 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Efendimizin Sunnetleri aka com.wEfendimizinSunnetleri application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The MODSIM World 2014 aka com.concursive.modsimworld application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The JDM Lifestyle aka com.hondatech application 6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7053

The City Star ME aka com.citystarme application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7054

Summary of CVE-2014-7054 : The Android app musica de barrios sonideros (package com.nobexinc.wls_93155702.rc), version 3.3.10, does not verify X.509 certificates when connecting to SSL servers. This allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...

PT-2014-7783

Name of the Vulnerable Software and Affected Versions com.beepeers.gndam version 1.0 Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7979

Name of the Vulnerable Software and Affected Versions com.magzter.bbcknowledge version 3.01 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-7762

Name of the Vulnerable Software and Affected Versions MyVCCCD aka com.dub.app.ventura version 1.4.14 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-7730

Name of the Vulnerable Software and Affected Versions com.wyeastinfectionapp version 0.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

PT-2014-7775

Name of the Vulnerable Software and Affected Versions Stop Headaches and Migraines version 1.2 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

PT-2014-7907

Name of the Vulnerable Software and Affected Versions com.wbrainabundance application version 0.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

PT-2014-7987

Name of the Vulnerable Software and Affected Versions The Hunting Trophy Whitetails application version 0.75.13441.88885 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-7478: Undefined Security Weakness

The nashaplaneta.su aka com.wNashaPlaneta application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7955

Name of the Vulnerable Software and Affected Versions com.nobexinc.wls 88552576.rc version 3.2.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-7920

Name of the Vulnerable Software and Affected Versions The Echo News aka com.solo.report version 1.10 beta Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates fro...

PT-2014-7763

Name of the Vulnerable Software and Affected Versions com.tibco.gse.sports application version 6.0.8 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...