CVE-2014-5646

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6548

Name of the Vulnerable Software and Affected Versions br.com.lgrmobile.sdm version 1.4.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

PT-2014-6613

Name of the Vulnerable Software and Affected Versions The Wonder Zoo - Animal rescue ! aka com.gameloft.android.ANMP.GloftZRHM version 1.6.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application doe...

PT-2014-6612

Name of the Vulnerable Software and Affected Versions The Ice Age Village aka com.gameloft.android.ANMP.GloftIAHM version 2.8.0m Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-6762

Name of the Vulnerable Software and Affected Versions icon wallpaper dressup-CocoPPa aka jp.united.app.cocoppa version 2.8.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.5...

PT-2014-6771

Name of the Vulnerable Software and Affected Versions The Jewels & Diamonds application version 1.1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fro...

PT-2014-6736

Name of the Vulnerable Software and Affected Versions Tor Browser the Short Guide aka com.wTorShortUserManual version 0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6805

Name of the Vulnerable Software and Affected Versions OkCupid Dating application version 3.4.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-6609

Name of the Vulnerable Software and Affected Versions The Sniper Shooter Free - Fun Game aka com.fungamesforfree.snipershooter.free version 2.8 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

PT-2014-6541

Name of the Vulnerable Software and Affected Versions Fly Fishing & Fly Tying aka air.com.yudu.ReaderAIR3209899 version 3.21.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

PT-2014-6760

Name of the Vulnerable Software and Affected Versions The Super Fast Browser aka iron.web.jalepano.browser version 2.0.5.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6611

Name of the Vulnerable Software and Affected Versions The Brothers In Arms 2 Free+ version 1.2.0b Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-6691

Name of the Vulnerable Software and Affected Versions The SomNote - Journal/Memo aka com.somcloud.somnote version 2.1.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-6626

Name of the Vulnerable Software and Affected Versions Cloud Manager aka com.ileaf.cloud manager version 1.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

PT-2014-6630

Name of the Vulnerable Software and Affected Versions CamScanner - Phone PDF Creator version 3.4.0.20140624 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

CVE-2014-5826: Undefined Security Weakness

The Rix GO Locker Theme aka com.jiubang.goscreenlock.theme.rix.getjar application 1.20.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5646: Undefined Security Weakness

The AMC Security- Antivirus, Clean aka com.iobit.mobilecare application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6595

Name of the Vulnerable Software and Affected Versions com.dreamstep.wce4arabmarket version 0.12.13093.40460 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

CVE-2014-3170: Undefined Security Weakness

extensions/common/urlpattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character...

CVE-2014-3577

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...