CVE-2014-5566

The Selfshot - Front Flash Camera aka com.americos.selfshot application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5635

The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5690

The Runtastic Timer aka com.runtastic.android.timer application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5671

The Super Stickman Golf aka com.noodlecake.ssg application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6691

Name of the Vulnerable Software and Affected Versions The SomNote - Journal/Memo aka com.somcloud.somnote version 2.1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6638

Name of the Vulnerable Software and Affected Versions Unblock Me FREE version 1.4.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-6762

Name of the Vulnerable Software and Affected Versions icon wallpaper dressup-CocoPPa aka jp.united.app.cocoppa version 2.8.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.5...

PT-2014-6595

Name of the Vulnerable Software and Affected Versions com.dreamstep.wce4arabmarket version 0.12.13093.40460 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

PT-2014-6550

Name of the Vulnerable Software and Affected Versions GadgetTrak Mobile Security aka com.activetrak.android.app version 1.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.50...

PT-2014-6760

Name of the Vulnerable Software and Affected Versions The Super Fast Browser aka iron.web.jalepano.browser version 2.0.5.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5646: Undefined Security Weakness

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6612

Name of the Vulnerable Software and Affected Versions The Ice Age Village aka com.gameloft.android.ANMP.GloftIAHM version 2.8.0m Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-6802

Name of the Vulnerable Software and Affected Versions The Mini Pets aka com.miniclip.animalshelter version 2.0.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6746

Name of the Vulnerable Software and Affected Versions Zipcar aka com.zc.android application version 3.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates fro...

PT-2014-6630

Name of the Vulnerable Software and Affected Versions CamScanner - Phone PDF Creator version 3.4.0.20140624 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

PT-2014-6611

Name of the Vulnerable Software and Affected Versions The Brothers In Arms 2 Free+ version 1.2.0b Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-6771

Name of the Vulnerable Software and Affected Versions The Jewels & Diamonds application version 1.1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fro...

CVE-2014-5826: Undefined Security Weakness

The Rix GO Locker Theme aka com.jiubang.goscreenlock.theme.rix.getjar application 1.20.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5729: Undefined Security Weakness

The Viddy aka com.viddy.Viddy application 1.3.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5843: Undefined Security Weakness

The ADP AGENCY Immobiliare aka com.wAdpagencyAndroid application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...