CVE-2014-6645

The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6012

The Gravity Bounce aka net.toddm.gb application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5984

The Little Dragons aka com.playcomo.dragongame application 1.0.256 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6405

Name of the Vulnerable Software and Affected Versions FileMaker Pro versions prior to 13 FileMaker Pro Advanced versions prior to 13 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as it does not verify X.509...

PT-2014-7320

Name of the Vulnerable Software and Affected Versions Homesteading Today application version 3.7.14 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from...

PT-2014-6988

Name of the Vulnerable Software and Affected Versions com.goodbarber.frasesdeamor affected versions not specified Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-6001: Undefined Security Weakness

The gewara aka com.gewara application 5.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6987

Name of the Vulnerable Software and Affected Versions DTE Energy application version 3.0.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

CVE-2014-5985

The Animal Kaiser Zangetsu aka com.wAnimalKaiserZangetsu application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6964

Name of the Vulnerable Software and Affected Versions TV Bengali Open Directory aka com.TVBengali version 1.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-6946

Name of the Vulnerable Software and Affected Versions com.rareartifact.russiananime68A5CCFE affected versions not specified Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...

PT-2014-6955

Name of the Vulnerable Software and Affected Versions The BabyBus application version 3.91 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

CVE-2014-5926

The DCU Mobile Banking aka com.Vertifi.Mobile.P211391825 application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6917

Name of the Vulnerable Software and Affected Versions Vodafone Mobile@Work application version 6.0.0.1.12R Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates fr...

PT-2014-6931

Name of the Vulnerable Software and Affected Versions com.tapatalk.forumhawaaworldcom version 3.4.12 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-6460

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare SCADA Expert ClearSCADA versions 2010 R3 through 2014 R1 Description The issue concerns the use of the MD5 algorithm for an X.509 certificate, which can be exploited by remote attackers to spoof servers via a...

PT-2014-5850

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue allows man-in-the-middle attackers to spoof a device's update status. This is achieved via a crafted Last-Modified HTTP response header. Recommendations For Apple...

PT-2014-6901

Name of the Vulnerable Software and Affected Versions Minha Oi aka br.com.mobicare.minhaoi version 1.15.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates fro...

PT-2014-6903

Name of the Vulnerable Software and Affected Versions The Secret Circle - talk freely aka com.easyxapp.secret version 2.2.00.26 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-6877

Name of the Vulnerable Software and Affected Versions com.show.greenbill G version 2.0.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...