VYPR

CVEs

355,891 total · page 5835 of 7,118

AllCriticalHighKEV
  • CVE-2014-6641Sep 22, 2014
    Gcspublishing
    Homesteading Today
    risk 0.00cvss —epss 0.00

    The Homesteading Today (aka com.tapatalk.homesteadingtodaycom) application 3.7.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6640Sep 22, 2014
    Dnb
    Dnb Trade
    risk 0.00cvss —epss 0.00

    The DNB Trade (aka lt.dnb.mobiletrade) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6639Sep 22, 2014
    TIO MobilePay
    Bill Payments
    risk 0.00cvss —epss 0.00

    The TIO MobilePay - Bill Payments (aka com.tionetworks.mobile.android.tioclient) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted…

  • CVE-2014-6638Sep 22, 2014
    Wtmdesktop Project
    Wtmdesktop
    risk 0.00cvss —epss 0.00

    The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6637Sep 22, 2014
    Facebook
    Facebook
    risk 0.00cvss —epss 0.00

    The Facebook Facts (aka com.wFacebookFacts) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6636Sep 22, 2014
    Rsupport
    Lg Telepresence
    risk 0.00cvss —epss 0.00

    The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6023Sep 22, 2014
    S Peek Credit Rating Report
    s-peek credit rating report
    risk 0.00cvss —epss 0.00

    The s-peek credit rating report (aka com.rhomobile.speek) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6022Sep 22, 2014
    Versentbooks
    Versent Books
    risk 0.00cvss —epss 0.00

    The Versent Books (aka com.versentbooks) application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6021Sep 22, 2014
    Harley-Davidson
    Visa
    risk 0.00cvss —epss 0.00

    The Harley-Davidson Visa (aka com.usbank.icsmobile.harleydavidson) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6020Sep 22, 2014
    Excentus
    Fuel Rewards Network
    risk 0.00cvss —epss 0.00

    The Fuel Rewards Network (aka com.excentus.frn) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6019Sep 22, 2014
    Psychology Project
    Psychology
    risk 0.00cvss —epss 0.00

    The psychology (aka com.alek.psychology) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6018Sep 22, 2014
    Global Beauty Research Project
    Global Beauty Research
    risk 0.00cvss —epss 0.00

    The global beauty research (aka com.appems.topgirl) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6017Sep 22, 2014
    Lazyer
    Doodle Drop
    risk 0.00cvss —epss 0.00

    The Doodle Drop (aka net.lazyer.DoodleDrop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6016Sep 22, 2014
    Celluloidapp
    Celluloid
    risk 0.00cvss —epss 0.00

    The Celluloid (aka com.eurisko.celluloid) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6015Sep 22, 2014
    Tucarro
    Tucarro
    risk 0.00cvss —epss 0.00

    The TuCarro (aka com.tucarro) application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6014Sep 22, 2014
    Ingen Studios
    Conquest Of Fantasia
    risk 0.00cvss —epss 0.00

    The Conquest Of Fantasia (aka air.com.ingen.studios.cof.sg) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6013Sep 22, 2014
    Nuphoto
    Nusquare
    risk 0.00cvss —epss 0.00

    The nuSquare (aka tw.com.nuphoto.nusquare) application 1.0.78 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6012Sep 22, 2014
    Toddm
    Gravity Bounce
    risk 0.00cvss —epss 0.00

    The Gravity Bounce (aka net.toddm.gb) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6011Sep 22, 2014
    Kr.co.wedoit.cutprice
    cutprice
    risk 0.00cvss —epss 0.00

    The cutprice (aka kr.co.wedoit.cutprice) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6010Sep 22, 2014
    Awesomewidgets
    Rasta Weed Widgets Hd
    risk 0.00cvss —epss 0.00

    The Rasta Weed Widgets HD (aka aw.awesomewidgets.rastaweed) application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6009Sep 22, 2014
    Jimmybolstad
    Zombie Detector
    risk 0.00cvss —epss 0.00

    The Zombie Detector (aka com.jimmybolstad.zombiedetector) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6008Sep 22, 2014
    AppMobi
    Blitz Bingo
    risk 0.00cvss —epss 0.00

    The Blitz Bingo (aka com.appMobi.sbbingo.app) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6007Sep 22, 2014
    Likeheroapp
    Likehero Get Instagram Likes
    risk 0.00cvss —epss 0.00

    The LikeHero Get Instagram Likes (aka com.fraoula.likehero) application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6006Sep 22, 2014
    Gratta \& Vinci\? Project
    Gratta \& Vinci\?
    risk 0.00cvss —epss 0.00

    The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6005Sep 22, 2014
    Survey.com
    Survey.com Mobile
    risk 0.00cvss —epss 0.00

    The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6004Sep 22, 2014
    Pocket Cam Photo Editor Project
    Pocket Cam Photo Editor
    risk 0.00cvss —epss 0.00

    The Pocket Cam Photo Editor (aka mobi.pocketcam.editor) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6003Sep 22, 2014
    Goodbarber
    Belas Frases de Amor
    risk 0.00cvss —epss 0.00

    The Belas Frases de Amor (aka com.goodbarber.frasesdeamor) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6002Sep 22, 2014
    DTE Energy
    Dte Energy
    risk 0.00cvss —epss 0.00

    The DTE Energy (aka com.dteenergy.mydte) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6001Sep 22, 2014
    Gewara
    Gewara
    risk 0.00cvss —epss 0.00

    The gewara (aka com.gewara) application 5.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-6000Sep 22, 2014
    FreshDirect
    FreshDirect
    risk 0.00cvss —epss 0.00

    The FreshDirect (aka com.freshdirect.android) application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5999Sep 22, 2014
    Telenav
    Autonavi
    risk 0.00cvss —epss 0.00

    The autonavi (aka com.telenav.doudouyou.android.autonavi) application 4.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5998Sep 22, 2014
    Skydrive Assistant Project
    Skydrive Assistant
    risk 0.00cvss —epss 0.00

    The SkyDrive Assistant (aka com.dhh.sky) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5997Sep 22, 2014
    Auto Trader
    Auto Trader
    risk 0.00cvss —epss 0.00

    The Auto Trader (aka za.co.autotrader.android.app) application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5996Sep 22, 2014
    DEKRA
    DEKRA Used Car Report
    risk 0.00cvss —epss 0.00

    The DEKRA Used Car Report (aka com.dekra.maengelreport) application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5995Sep 22, 2014
    Ericpol
    Ewus Mobile
    risk 0.00cvss —epss 0.00

    The eWUS mobile (aka pl.dreryk.ewustest) application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5994Sep 22, 2014
    ezetop
    Top-up Any Phone
    risk 0.00cvss —epss 0.00

    The ding* ezetop. Top-up Any Phone (aka com.ezetop.world) application 1.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5993Sep 22, 2014
    Preplaysports
    Mlb Preplay
    risk 0.00cvss —epss 0.00

    The MLB Preplay (aka com.preplay.android.mlb) application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5992Sep 22, 2014
    Successsecrets Project
    Successsecrets
    risk 0.00cvss —epss 0.00

    The successsecrets (aka com.alek.successsecrets) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5991Sep 22, 2014
    Skin Conditions And Diseases Project
    Skin Conditions And Diseases
    risk 0.00cvss —epss 0.00

    The Skin Conditions and Diseases (aka com.appsgeyser.wSkinConditions) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5984Sep 22, 2014
    Playcomo
    Little Dragons
    risk 0.00cvss —epss 0.00

    The Little Dragons (aka com.playcomo.dragongame) application 1.0.256 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5983Sep 22, 2014
    Threadflip
    Threadflip
    risk 0.00cvss —epss 0.00

    The Threadflip : Buy, Sell Fashion (aka com.threadflip.android) application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5982Sep 22, 2014
    Runkeeper
    RunKeeper
    risk 0.00cvss —epss 0.00

    The RunKeeper - GPS Track Run Walk (aka com.fitnesskeeper.runkeeper.pro) application 4.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5971Sep 22, 2014
    Fiksu
    Fiksu Library
    risk 0.00cvss —epss 0.00

    The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5809Sep 22, 2014
    Geniuscloud
    Smart Browser
    risk 0.00cvss —epss 0.00

    The Smart Browser (aka smartbrowser.geniuscloud) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-5665Sep 22, 2014
    risk 0.00cvss —epss 0.00

    The Mzone Login (aka com.mr384.MzoneLogin) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2014-2942Sep 22, 2014
    Cobham
    Aviator 700d
    risk 0.00cvss —epss 0.00

    Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser code, and then leveraging physical access or terminal access to enter this code.

  • CVE-2014-6602Sep 22, 2014
    Microsoft
    Nokia Asha 501
    risk 0.00cvss —epss 0.02

    Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the…

  • CVE-2014-5322Sep 22, 2014
    Filemaker
    Filemaker
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix…

  • CVE-2014-5321Sep 22, 2014
    Filemaker
    Filemaker
    risk 0.00cvss —epss 0.01

    FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: this vulnerability exists because of an incorrect…

  • CVE-2014-5320Sep 22, 2014
    Bump
    Bump
    risk 0.00cvss —epss 0.01

    The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application.