Vulnerabilities (CVE)

Filtered by CWE-310
Total 2481 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-6888 1 Pennytalk 1 Pennytalk Mobile 2014-11-14 5.4 MEDIUM N/A
The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6886 1 Wephoneapp 1 Wephone - Phone Calls Vs Skype 2014-11-14 5.4 MEDIUM N/A
The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6884 1 Ford 1 Ford Credit Account Manager 2014-11-14 5.4 MEDIUM N/A
The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6883 1 Cnn 1 Cnnmoney Portfolio For Stocks 2014-11-14 5.4 MEDIUM N/A
The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6882 1 Western 1 Western Federal Credit Union 2014-11-14 5.4 MEDIUM N/A
The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6880 1 Tradehero 1 Tradehero 2014-11-14 5.4 MEDIUM N/A
The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6879 1 Equifax 1 Equifax Mobile 2014-11-14 5.4 MEDIUM N/A
The Equifax Mobile (aka com.equifax) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6878 1 Rbfcu 1 Rbfcu Mobile 2014-11-14 5.4 MEDIUM N/A
The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6877 1 Santanderbank 1 Santander Personal Banking 2014-11-14 5.4 MEDIUM N/A
The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6876 1 Serve 1 American Express Serve 2014-11-14 5.4 MEDIUM N/A
The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6875 1 Woodforest 1 Woodforest Mobile Banking 2014-11-14 5.4 MEDIUM N/A
The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6874 1 Concursive 1 Modsim Connected 2014-11-14 5.4 MEDIUM N/A
The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6873 1 Amecuae 1 Amgc 2014-11-14 5.4 MEDIUM N/A
The AMGC (aka com.amec.uae) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6872 1 Ttnetmuzik 1 Ttnet Muzik 2014-11-14 5.4 MEDIUM N/A
The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6871 1 Hogs Fly Crazy Project 1 Hogs Fly Crazy 2014-11-14 5.4 MEDIUM N/A
The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6870 1 Bgenergy 1 Bgenergy 2014-11-14 5.4 MEDIUM N/A
The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6868 1 Synology 1 Ds Audio 2014-11-14 5.4 MEDIUM N/A
The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6867 1 Sortir-en-alsace 1 Sortir En Alsace 2014-11-14 5.4 MEDIUM N/A
The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6866 1 Homeadvisor 1 Homeadvisor Mobile 2014-11-14 5.4 MEDIUM N/A
The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6865 1 Jamalbates 1 Jamal Bates Show 2014-11-14 5.4 MEDIUM N/A
The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.