Information disclosure

The USF BCM aka com.appmakr.app193115 application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7428

The CVE-2014-7428 entry concerns the Android app “7725.com Three Kingdoms” (package com.platform7725.youai.jiejian), version 2.4, which does not verify X.509 certificates from SSL servers. This vulnerability enables man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-7409

The Liburan Hemat aka com.liburan.bro application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7444

The Baidu Navigation aka com.baidu.navi application 3.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7085

The i Newspaper aka com.independent.thei application @7F080184 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Efendimizin Sunnetleri aka com.wEfendimizinSunnetleri application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7987

Name of the Vulnerable Software and Affected Versions The Hunting Trophy Whitetails application version 0.75.13441.88885 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-7336: Undefined Security Weakness

The Taking Your Company Public aka biz.app4mobile.app016e43d03ee54d1facd6c9532a00e724.app application 1.28.44.441 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7795

Name of the Vulnerable Software and Affected Versions com.wPROFUAAWHEELA version 2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-8030

Name of the Vulnerable Software and Affected Versions ETG Hosting aka com.etg.web.hosting version 2.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SS...

CVE-2014-7054: Undefined Security Weakness

The musica de barrios sonideros aka com.nobexinc.wls93155702.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7437: Undefined Security Weakness

The Love Horoscope Guide aka com.charl.charlylovehoroscopes application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7478: Undefined Security Weakness

The nashaplaneta.su aka com.wNashaPlaneta application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7364: Undefined Security Weakness

The Promotional Items aka com.wPromotionalItems application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8005

Name of the Vulnerable Software and Affected Versions My NGEMC Account aka com.ngemc.smartapps version 1.153.0034 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-7980

Name of the Vulnerable Software and Affected Versions The PokeCreator Lite aka com.pokecreator.builderlite version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-6981

The Taiwan Business Bank aka com.mitake.TBB application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PartyTrack library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The scottcolibmn aka com.bredir.boopsie.scottlib application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...