Vulnerabilities (CVE)

Filtered by CWE-310
Total 2484 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-7018 1 Efunfun 1 Love Dance 2025-04-12 5.4 MEDIUM N/A
The LOVE DANCE (aka com.efunfun.ddianle.lovedance) application 1.2.0626 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7090 1 Vcccd 1 Myvcccd 2025-04-12 5.4 MEDIUM N/A
The MyVCCCD (aka com.dub.app.ventura) application 1.4.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6662 1 Krstarica 1 Forum Krstarice 2025-04-12 5.4 MEDIUM N/A
The Forum Krstarice (aka com.tapatalk.forumkrstaricacom) application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5691 1 Rvappstudios 1 Best Phone Security 2025-04-12 5.4 MEDIUM N/A
The Best Phone Security (aka com.rvappstudios.phonesecurity) application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5964 1 Megabank 1 Megabank 2025-04-12 5.4 MEDIUM N/A
The MegaBank (aka com.megabank.mobilebank) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7071 1 Magzter 1 Autocar India 2025-04-12 5.4 MEDIUM N/A
The Autocar India (aka com.magzter.autocarindia) application 3.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5929 1 Emart 1 Emartmall 2025-04-12 5.4 MEDIUM N/A
The emartmall (aka kr.co.emart.emartmall) application 1.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5724 1 Pocketmags 1 Gambling Insider Magazine 2025-04-12 5.4 MEDIUM N/A
The Gambling Insider Magazine (aka com.triactivemedia.gambling) application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7366 1 Magzter 1 Identity 2025-04-12 5.4 MEDIUM N/A
The Identity (aka com.magzter.identity) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6886 1 Wephoneapp 1 Wephone - Phone Calls Vs Skype 2025-04-12 5.4 MEDIUM N/A
The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7073 1 Andrew Magdy Kamal\'s Network Project 1 Andrew Magdy Kamal\'s Network 2025-04-12 5.4 MEDIUM N/A
The Andrew Magdy Kamal's Network (aka com.wAndSocialREWApps) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7402 1 Encardirect 1 Sk Encar 2025-04-12 5.4 MEDIUM N/A
The SK encar (aka com.encardirect.app) application @7F050000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5958 1 Chatbox 1 Chatbox - Chat Rooms 2025-04-12 5.4 MEDIUM N/A
The ChatBox - Chat Rooms (aka com.droidchatroom.messengerapp) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7361 1 Emunching 1 Harry\'s Pub 2025-04-12 5.4 MEDIUM N/A
The Harry's Pub (aka com.emunching.harryspub) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7754 1 Appsworld 1 Condor S.e. 2025-04-12 5.4 MEDIUM N/A
The Condor S.E. (aka com.app_condorsoutheast.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5758 1 Yellowbook 1 Yellow Pages Local Search 2025-04-12 5.4 MEDIUM N/A
The Yellow Pages Local Search (aka com.yellowbook.android2) application 11.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6888 1 Pennytalk 1 Pennytalk Mobile 2025-04-12 5.4 MEDIUM N/A
The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5989 1 Babydays 1 Baby Days 2025-04-12 5.4 MEDIUM N/A
The baby days (aka jp.co.cyberagent.babydays) application 1.5.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-7038 1 Al Jazeera Project 1 Al Jazeera 2025-04-12 5.4 MEDIUM N/A
The Al Jazeera (aka com.Al.Jazeera.net) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6903 1 Tionetworks 1 Gulf Power Mobile Bill Pay 2025-04-12 5.4 MEDIUM N/A
The Gulf Power Mobile Bill Pay (aka com.tionetworks.gulf) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.