CVE-2014-6782

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7462

Name of the Vulnerable Software and Affected Versions Fermononrespiri Mobile aka com.tapatalk.rmonlineitforums version 3.8.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.5...

PT-2014-7457

Name of the Vulnerable Software and Affected Versions The Cart App aka com.virtecha.mobilewallet version 1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

Mozilla Seamonkey RSA Spoof Vulnerability (Sep 2014) - Windows

Mozilla Seamonkey is prone to spoof vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:seamonkey";...

Google Chrome RSA Spoof Vulnerability (Sep 2014) - Windows

Google Chrome is prone to spoof vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Mozilla Thunderbird RSA Spoof Vulnerability (Sep 2014) - Windows

Mozilla Thunderbird is prone to spoofing vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Firefox ESR RSA Spoof Vulnerability (Sep 2014) - Windows

Mozilla Firefox ESR is prone to spoof vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2014-7449

Name of the Vulnerable Software and Affected Versions United Heritage Mobile aka Fi Mobile.UHCU application version 1.1 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not...

CVE-2014-6737

The Ultimate Target-Armored Sniper aka air.wood.liame.ultimatetarget application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6741

The John MacArthur aka com.john.macarthur application 1.0.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7425

Name of the Vulnerable Software and Affected Versions SeeOn aka com.seeon application version 4.0.7 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-7386

Name of the Vulnerable Software and Affected Versions The Sporting Club Uphoria aka com.sportinginnovations.skc version 2.1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

CVE-2014-6708: Undefined Security Weakness

The Sporting Club Uphoria aka com.sportinginnovations.skc application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7378

Name of the Vulnerable Software and Affected Versions NBA Game Time 2013-2014 application version 4.11 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from S...

CVE-2014-6665

The Ahmed Bukhatir Nasheeds TV aka com.wAhmedBukhatirApp application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The wTrootrooTvIzle aka com.wTrootrooTvIzle application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7329

Name of the Vulnerable Software and Affected Versions The Planet of the Vapes Forum application version 3.7.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-7345

Name of the Vulnerable Software and Affected Versions racemotocross aka com.bossappsmk.racemotocross version 1.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-7350

Name of the Vulnerable Software and Affected Versions The Friendcaster aka uk.co.senab.blueNotifyFree version 5.4.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-7327

Name of the Vulnerable Software and Affected Versions MyBroadband Tapatalk application version 3.9.22 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SS...