CVE-2014-7054: Undefined Security Weakness

The musica de barrios sonideros aka com.nobexinc.wls93155702.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7437: Undefined Security Weakness

The Love Horoscope Guide aka com.charl.charlylovehoroscopes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8020

Name of the Vulnerable Software and Affected Versions The Live TV Browser aka com.wHDSmartBrowser version 2.0 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...

PT-2014-8009

Name of the Vulnerable Software and Affected Versions The Zoella Unofficial aka com.automon.ay.zoella application version 1.4.0.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verif...

PT-2014-7795

Name of the Vulnerable Software and Affected Versions com.wPROFUAAWHEELA version 2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-8030

Name of the Vulnerable Software and Affected Versions ETG Hosting aka com.etg.web.hosting version 2.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SS...

PT-2014-8005

Name of the Vulnerable Software and Affected Versions My NGEMC Account aka com.ngemc.smartapps version 1.153.0034 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-7980

Name of the Vulnerable Software and Affected Versions The PokeCreator Lite aka com.pokecreator.builderlite version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-7986

Name of the Vulnerable Software and Affected Versions The Doodle Devil Free aka com.joybits.doodledevil free version 2.1.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...

PT-2014-7940

Name of the Vulnerable Software and Affected Versions com.wJobMoBleeps version 0.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

PT-2014-7771

Name of the Vulnerable Software and Affected Versions Oskarshamnsliv application version 6.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-7937

Name of the Vulnerable Software and Affected Versions com.tus1947radis version 1.0 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

PT-2014-7923

Name of the Vulnerable Software and Affected Versions The Bespoke application version 3.0 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fro...

CVE-2014-7010

The UTSA Mobile aka com.dub.app.utsa application 1.4.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6975

The Twin Lin aka com.twinlin.twmo application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6981

The Taiwan Business Bank aka com.mitake.TBB application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Shots aka com.shots.android application 1.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Esercizi per le donne aka com.rareartifact.eserciziperledonne6D5578C6 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The QinCard aka com.haowan.qincard application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The FAZ.NET aka net.faz.FAZ application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...