Vulnerabilities (CVE)

Filtered by CWE-310
Total 2481 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-6690 1 Insta.me 1 Instamessage - Instagram Chat 2014-10-04 5.4 MEDIUM N/A
The InstaMessage - Instagram Chat (aka com.futurebits.instamessage.free) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6689 1 Jingwei 1 Jw Cards 2014-10-04 5.4 MEDIUM N/A
The JW Cards (aka com.jingwei.card) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6688 1 Voices 1 Voices.com 2014-10-04 5.4 MEDIUM N/A
The Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6687 1 Wsaudichannelalnas Project 1 Wsaudichannelalnas 2014-10-04 5.4 MEDIUM N/A
The wSaudichannelAlNasr (aka com.wSaudichannelAlNasr) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6686 1 Zoho 1 Zoho Books - Accounting App 2014-10-03 5.4 MEDIUM N/A
The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6682 1 W88235ff7bdc2fb574f1789750ea99ed6 Project 1 W88235ff7bdc2fb574f1789750ea99ed6 2014-10-03 5.4 MEDIUM N/A
The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6680 1 Superheroquiz Project 1 Superheroquiz 2014-10-03 5.4 MEDIUM N/A
The superheroquiz (aka com.davidhey.superheroquiz) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6679 1 Wepisdparentportal Project 1 Wepisdparentportal 2014-10-03 5.4 MEDIUM N/A
The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6674 1 Amazighmusic Project 1 Amazighmusic 2014-10-03 5.4 MEDIUM N/A
The Amazighmusic (aka nl.appsandroo.Amazighmusic) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6673 1 Zhtiantian 1 Challengertx 2014-10-03 5.4 MEDIUM N/A
The ChallengerTX (aka com.zhtiantian.ChallengerTX) application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6667 1 Racemotocross Project 1 Racemotocross 2014-10-03 5.4 MEDIUM N/A
The racemotocross (aka com.bossappsmk.racemotocross) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5959 1 Mytx 1 Tx Smart 2014-10-02 5.4 MEDIUM N/A
The tx Smart (aka com.wooriwm.txsmart) application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5444 1 Yorba 1 Geary 2014-10-02 4.3 MEDIUM N/A
Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
CVE-2014-6664 1 Latin Angels Music Hd Project 1 Latin Angels Music Hd 2014-09-29 5.4 MEDIUM N/A
The Latin Angels Music HD (aka com.applizards.lafreetj) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6685 1 Netjapan 1 Tsushima Travel Guide 2014-09-29 5.4 MEDIUM N/A
The Tsushima Travel Guide (aka com.netjapan.ntsushima) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6684 1 Mol 1 Mol Bringapont 2014-09-29 5.4 MEDIUM N/A
The MOL bringaPONT (aka hu.mol.bringapont) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6683 1 Openelectrical 1 Open Electrical Webser 2014-09-29 5.4 MEDIUM N/A
The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6681 1 Wordbox 1 Mahabharata Audiocast 2014-09-29 5.4 MEDIUM N/A
The Mahabharata Audiocast (aka com.wordbox.mahabharataAudiocast) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6678 1 Wordbox 1 Algeria Radio 2014-09-29 5.4 MEDIUM N/A
The Algeria Radio (aka com.wordbox.algeriaRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-6677 1 Ticketroundup 1 Ticket Round Up 2014-09-29 5.4 MEDIUM N/A
The Ticket Round Up (aka com.xcr.android.ticketroundupapp) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.