Skip to main content

Information Disclosure

70993 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2014-6753 MEDIUM This Month

The sunnat e rasool (aka com.imsoft.sunnat_e_rasool) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sunnat E Rasool
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6752 MEDIUM This Month

The Mindless Behavior Fan Base (aka com.mindless.behavior.fan.base) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mindless Behavior Fan Base
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6751 MEDIUM This Month

The Grasshopper Beta (aka com.grasshopper.dialer) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Grasshopper Beta
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6750 MEDIUM This Month

The $0.99 Kindle Books (aka com.kindle.books.for99) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 0 99 Kindle Books
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6749 MEDIUM This Month

The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure American Nurses Association
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6748 MEDIUM This Month

The GEMAIRE's HVAC Assist (aka com.es.Gemaire) application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gemaire S Hvac Assist
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5459 LOW POC Monitor

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/,. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Solaris Evergreen Opensuse
NVD
CVSS 2.0
3.6
EPSS
0.1%
CVE-2014-6747 MEDIUM This Month

The SeeOn (aka com.seeon) application 4.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Seeon
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6746 MEDIUM This Month

The Infiniti Roadside Assistance (aka com.ccas.rsa.common.infiniti) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Infiniti Roadside Assistance
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6745 MEDIUM This Month

The Family Location (aka com.sosocome.family) application 3.4 2014-5-20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Family Location
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6744 MEDIUM This Month

The Al-Ahsa News (aka com.alahsa.news) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Al Ahsa News
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6743 MEDIUM This Month

The Hearsay: A Social Party Game (aka air.com.lip.per) application 1.7.000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hearsay
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6742 MEDIUM This Month

The All around Cyprus (aka com.cyprus.newspapers) application 2.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure All Around Cyprus
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6741 MEDIUM This Month

The John MacArthur (aka com.john.macarthur) application 1.0.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure John Macarthur
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6740 MEDIUM This Month

The XD Forum (aka com.tapatalk.xdforumcomforum) application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Xd Forum
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6739 MEDIUM This Month

The Well-Being Connect Mobile (aka com.healthways.wellbeinggo) application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Well Being Connect Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6738 MEDIUM This Month

The Maccabi Tel Aviv (aka com.monkeytech.maccabi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Maccabi Tel Aviv
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6737 MEDIUM This Month

The Ultimate Target-Armored Sniper (aka air.wood.liame.ultimatetarget) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ultimate Target Armored Sniper
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6736 MEDIUM This Month

The EPL Hat Trick (aka com.hat.trick.goal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Epl Hat Trick
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6735 MEDIUM This Month

The imagine Next bmobile (aka com.conduit.app_51c3c19581af465092327dd25591b224.app) application 1.7.10.243 for Android does not verify X.509 certificates from SSL servers, which allows. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Imagine Next Bmobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6734 MEDIUM This Month

The Wine Making (aka com.gcspublishing.winemakingtalk) application 3.7.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wine Making
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6733 MEDIUM This Month

The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure My T Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6732 MEDIUM This Month

The Westpac Mobile Banking (aka org.westpac.bank) application 5.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Westpac Mobile Banking
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6731 MEDIUM This Month

The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Alfa Bank
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6730 MEDIUM This Month

The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Melodigram
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6729 MEDIUM This Month

The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Grilling With Rich
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6728 MEDIUM This Month

The ThinkPal (aka com.mythinkpalapp) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Thinkpal
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6727 MEDIUM This Month

The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mikeius
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6726 MEDIUM This Month

The 30A (aka com.app30a) application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 30A
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6725 MEDIUM This Month

The SchoolXM (aka apprentice.schoolxm) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Schoolxm
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6724 MEDIUM This Month

The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Soap Making
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6723 MEDIUM This Month

The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Comics Plus
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6722 MEDIUM This Month

The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pescuit Crap Lite
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6721 MEDIUM This Month

The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pharmaguideline
NVD
CVSS 2.0
5.4
EPSS
0.7%
CVE-2014-6720 MEDIUM This Month

The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pesca De Carpa Lite
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6719 MEDIUM This Month

The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kayak Angler Magazine
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-1568 HIGH Act Now

Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 30.9% and no vendor patch available.

Mozilla Google Information Disclosure Microsoft Chrome +5
NVD
CVSS 2.0
7.5
EPSS
30.9%
CVE-2014-6718 MEDIUM This Month

The My Mobile Day (aka com.mymobileday) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure My Mobile Day
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6717 MEDIUM This Month

The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Itriage Health
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6716 MEDIUM This Month

The fastin (aka moda.azyae.fastin.net) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Fastin
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6715 MEDIUM This Month

The SlotMachine (aka com.popoinnovation.SlotMachine) application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Slotmachine
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6714 MEDIUM This Month

The WebMD (aka com.webmd.android) application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Webmd
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6713 MEDIUM This Month

The MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Medical Chat And Mcqs Project
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6712 MEDIUM This Month

The Airlines International (aka org.iata.IAMagazine) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Airlines International
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6711 MEDIUM This Month

The ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Abc Lounge Webradio
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6710 MEDIUM This Month

The Chifro Kids Coloring Game (aka com.chifro.kids_coloring_game) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Chifro Kids Coloring Game
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6709 MEDIUM This Month

The TechRadar News (aka com.techradar.news) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Techradar News
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6708 MEDIUM This Month

The Sporting Club Uphoria (aka com.sportinginnovations.skc) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Utah Jazz
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6707 MEDIUM This Month

The 7Sage LSAT Prep - Proctor (aka com.sevensage.lsat) application 2.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 7Sage Lsat Prep Proctor
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6706 MEDIUM This Month

The Embry-Riddle (aka com.dub.app.erau) application 1.4.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Embry Riddle
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6705 MEDIUM This Month

The Maher Zain (aka com.vanagas.app.maher_zain) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Maher Zain
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6704 MEDIUM This Month

The Utah Jazz (aka com.sportinginnovations.jazz) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Utah Jazz
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6703 MEDIUM This Month

The phonearabs4 (aka com.phonearabs4.myapps) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Phonearabs4
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6702 MEDIUM This Month

The StarSat International (aka com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app) application 1.41.54.9222 for Android does not verify X.509 certificates from SSL servers, which allows. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Starsat International
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6701 MEDIUM This Month

The Vendormate Mobile (aka com.vendormate.mobile) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Vendormate Mobile
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6700 MEDIUM This Month

The NBA Game Time 2013-2014 (aka com.nbadigital.gametimelite) application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Nba Game Time 2013 2014
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6699 MEDIUM This Month

The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Weather Channel
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6698 MEDIUM This Month

The Galaxy Online 2 (aka air.com.igg.galaxyAPhone) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Galaxy Online 2
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6697 MEDIUM This Month

The Morocco Weather (aka com.mobilesoft.meteomaroc) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Morocco Weather
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6696 MEDIUM This Month

The Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Candy Girl Party Makeover
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6695 MEDIUM This Month

The Wedding Photo Frames-Love Pics (aka com.WeddingPhotoFramesLovePics) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wedding Photo Frames Love Pics
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6694 MEDIUM This Month

The 5SOS Family Planet (aka uk.co.pixelkicks.fivesos) application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 5Sos Family Planet
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6693 MEDIUM This Month

The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Juiker
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5323 MEDIUM This Month

The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko_android) application 1.0.5 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Yuko Yuko
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-4752 CRITICAL Act Now

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM Information Disclosure System Networking Rackswitch G8332 Firmware System Networking Rackswitch G8332 Bladecenter 1G Firmware +37
NVD
CVSS 2.0
10.0
EPSS
2.5%
CVE-2014-3105 MEDIUM PATCH This Month

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

IBM Information Disclosure Rational Clearcase
NVD
CVSS 2.0
5.0
EPSS
0.2%
CVE-2014-3103 MEDIUM PATCH This Month

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

IBM Information Disclosure Rational Clearcase
NVD
CVSS 2.0
5.0
EPSS
0.2%
CVE-2014-4973 MEDIUM POC This Month

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows. Rated medium severity (CVSS 6.9). Public exploit code available and no vendor patch available.

Eset Information Disclosure Smart Security Endpoint Security
NVD
CVSS 2.0
6.9
EPSS
0.1%
CVE-2014-6692 MEDIUM This Month

The Kingsoft Clip (Office Tool) (aka cn.wps.clip) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Microsoft Kingsoft Clip Office Tool
NVD
CVSS 2.0
5.4
EPSS
0.0%
CVE-2014-6691 MEDIUM This Month

The UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Uc Browser Hd
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6690 MEDIUM This Month

The InstaMessage - Instagram Chat (aka com.futurebits.instamessage.free) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Instamessage Instagram Chat
NVD
CVSS 2.0
5.4
EPSS
0.0%
CVE-2014-6689 MEDIUM This Month

The JW Cards (aka com.jingwei.card) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Jw Cards
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6688 MEDIUM This Month

The Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Voices Com
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6687 MEDIUM This Month

The wSaudichannelAlNasr (aka com.wSaudichannelAlNasr) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wsaudichannelalnas
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6686 MEDIUM This Month

The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Zoho Google Information Disclosure Zoho Books Accounting App
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6685 MEDIUM This Month

The Tsushima Travel Guide (aka com.netjapan.ntsushima) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tsushima Travel Guide
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6684 MEDIUM This Month

The MOL bringaPONT (aka hu.mol.bringapont) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mol Bringapont
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6683 MEDIUM This Month

The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Open Electrical Webser
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6682 MEDIUM This Month

The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure W88235Ff7Bdc2Fb574F1789750Ea99Ed6
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6681 MEDIUM This Month

The Mahabharata Audiocast (aka com.wordbox.mahabharataAudiocast) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mahabharata Audiocast
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6680 MEDIUM This Month

The superheroquiz (aka com.davidhey.superheroquiz) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Superheroquiz
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6679 MEDIUM This Month

The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wepisdparentportal
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6678 MEDIUM This Month

The Algeria Radio (aka com.wordbox.algeriaRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Algeria Radio
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6677 MEDIUM This Month

The Ticket Round Up (aka com.xcr.android.ticketroundupapp) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ticket Round Up
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6676 MEDIUM This Month

The Exercitii pentru abdomen (aka com.rareartifact.exercitiipentruabdomen41E29322) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Exercitii Pentru Abdomen
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6675 MEDIUM This Month

The Ruta Exacta (aka com.rutaexacta.m) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ruta Exacta
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6674 MEDIUM This Month

The Amazighmusic (aka nl.appsandroo.Amazighmusic) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Amazighmusic
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6673 MEDIUM This Month

The ChallengerTX (aka com.zhtiantian.ChallengerTX) application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Challengertx
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6672 MEDIUM This Month

The Friendcaster (aka uk.co.senab.blueNotifyFree) application 5.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Friendcaster
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6671 MEDIUM This Month

The World Cup 2014 Brazil - Xem TV (aka vn.letshare.football.worldcup) application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure World Cup 2014 Brazil Xem Tv
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6753
EPSS 0% CVSS 5.4
MEDIUM This Month

The sunnat e rasool (aka com.imsoft.sunnat_e_rasool) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sunnat E Rasool
NVD
CVE-2014-6752
EPSS 0% CVSS 5.4
MEDIUM This Month

The Mindless Behavior Fan Base (aka com.mindless.behavior.fan.base) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mindless Behavior Fan Base
NVD
CVE-2014-6751
EPSS 0% CVSS 5.4
MEDIUM This Month

The Grasshopper Beta (aka com.grasshopper.dialer) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Grasshopper Beta
NVD
CVE-2014-6750
EPSS 0% CVSS 5.4
MEDIUM This Month

The $0.99 Kindle Books (aka com.kindle.books.for99) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 0 99 Kindle Books
NVD
CVE-2014-6749
EPSS 0% CVSS 5.4
MEDIUM This Month

The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure American Nurses Association
NVD
CVE-2014-6748
EPSS 0% CVSS 5.4
MEDIUM This Month

The GEMAIRE's HVAC Assist (aka com.es.Gemaire) application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gemaire S Hvac Assist
NVD
CVE-2014-5459
EPSS 0% CVSS 3.6
LOW POC Monitor

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/,. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Solaris +2
NVD
CVE-2014-6747
EPSS 0% CVSS 5.4
MEDIUM This Month

The SeeOn (aka com.seeon) application 4.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Seeon
NVD
CVE-2014-6746
EPSS 0% CVSS 5.4
MEDIUM This Month

The Infiniti Roadside Assistance (aka com.ccas.rsa.common.infiniti) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Infiniti Roadside Assistance
NVD
CVE-2014-6745
EPSS 0% CVSS 5.4
MEDIUM This Month

The Family Location (aka com.sosocome.family) application 3.4 2014-5-20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Family Location
NVD
CVE-2014-6744
EPSS 0% CVSS 5.4
MEDIUM This Month

The Al-Ahsa News (aka com.alahsa.news) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Al Ahsa News
NVD
CVE-2014-6743
EPSS 0% CVSS 5.4
MEDIUM This Month

The Hearsay: A Social Party Game (aka air.com.lip.per) application 1.7.000 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hearsay
NVD
CVE-2014-6742
EPSS 0% CVSS 5.4
MEDIUM This Month

The All around Cyprus (aka com.cyprus.newspapers) application 2.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure All Around Cyprus
NVD
CVE-2014-6741
EPSS 0% CVSS 5.4
MEDIUM This Month

The John MacArthur (aka com.john.macarthur) application 1.0.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure John Macarthur
NVD
CVE-2014-6740
EPSS 0% CVSS 5.4
MEDIUM This Month

The XD Forum (aka com.tapatalk.xdforumcomforum) application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Xd Forum
NVD
CVE-2014-6739
EPSS 0% CVSS 5.4
MEDIUM This Month

The Well-Being Connect Mobile (aka com.healthways.wellbeinggo) application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Well Being Connect Mobile
NVD
CVE-2014-6738
EPSS 0% CVSS 5.4
MEDIUM This Month

The Maccabi Tel Aviv (aka com.monkeytech.maccabi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Maccabi Tel Aviv
NVD
CVE-2014-6737
EPSS 0% CVSS 5.4
MEDIUM This Month

The Ultimate Target-Armored Sniper (aka air.wood.liame.ultimatetarget) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ultimate Target Armored Sniper
NVD
CVE-2014-6736
EPSS 0% CVSS 5.4
MEDIUM This Month

The EPL Hat Trick (aka com.hat.trick.goal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Epl Hat Trick
NVD
CVE-2014-6735
EPSS 0% CVSS 5.4
MEDIUM This Month

The imagine Next bmobile (aka com.conduit.app_51c3c19581af465092327dd25591b224.app) application 1.7.10.243 for Android does not verify X.509 certificates from SSL servers, which allows. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Imagine Next Bmobile
NVD
CVE-2014-6734
EPSS 0% CVSS 5.4
MEDIUM This Month

The Wine Making (aka com.gcspublishing.winemakingtalk) application 3.7.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wine Making
NVD
CVE-2014-6733
EPSS 0% CVSS 5.4
MEDIUM This Month

The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure My T Mobile
NVD
CVE-2014-6732
EPSS 0% CVSS 5.4
MEDIUM This Month

The Westpac Mobile Banking (aka org.westpac.bank) application 5.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Westpac Mobile Banking
NVD
CVE-2014-6731
EPSS 0% CVSS 5.4
MEDIUM This Month

The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Alfa Bank
NVD
CVE-2014-6730
EPSS 0% CVSS 5.4
MEDIUM This Month

The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Melodigram
NVD
CVE-2014-6729
EPSS 0% CVSS 5.4
MEDIUM This Month

The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Grilling With Rich
NVD
CVE-2014-6728
EPSS 0% CVSS 5.4
MEDIUM This Month

The ThinkPal (aka com.mythinkpalapp) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Thinkpal
NVD
CVE-2014-6727
EPSS 0% CVSS 5.4
MEDIUM This Month

The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mikeius
NVD
CVE-2014-6726
EPSS 0% CVSS 5.4
MEDIUM This Month

The 30A (aka com.app30a) application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 30A
NVD
CVE-2014-6725
EPSS 0% CVSS 5.4
MEDIUM This Month

The SchoolXM (aka apprentice.schoolxm) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Schoolxm
NVD
CVE-2014-6724
EPSS 0% CVSS 5.4
MEDIUM This Month

The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Soap Making
NVD
CVE-2014-6723
EPSS 0% CVSS 5.4
MEDIUM This Month

The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Comics Plus
NVD
CVE-2014-6722
EPSS 0% CVSS 5.4
MEDIUM This Month

The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pescuit Crap Lite
NVD
CVE-2014-6721
EPSS 1% CVSS 5.4
MEDIUM This Month

The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pharmaguideline
NVD
CVE-2014-6720
EPSS 0% CVSS 5.4
MEDIUM This Month

The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Pesca De Carpa Lite
NVD
CVE-2014-6719
EPSS 0% CVSS 5.4
MEDIUM This Month

The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kayak Angler Magazine
NVD
CVE-2014-1568
EPSS 31% CVSS 7.5
HIGH Act Now

Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 30.9% and no vendor patch available.

Mozilla Google Information Disclosure +7
NVD
CVE-2014-6718
EPSS 0% CVSS 5.4
MEDIUM This Month

The My Mobile Day (aka com.mymobileday) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure My Mobile Day
NVD
CVE-2014-6717
EPSS 0% CVSS 5.4
MEDIUM This Month

The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Itriage Health
NVD
CVE-2014-6716
EPSS 0% CVSS 5.4
MEDIUM This Month

The fastin (aka moda.azyae.fastin.net) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Fastin
NVD
CVE-2014-6715
EPSS 0% CVSS 5.4
MEDIUM This Month

The SlotMachine (aka com.popoinnovation.SlotMachine) application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Slotmachine
NVD
CVE-2014-6714
EPSS 0% CVSS 5.4
MEDIUM This Month

The WebMD (aka com.webmd.android) application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Webmd
NVD
CVE-2014-6713
EPSS 0% CVSS 5.4
MEDIUM This Month

The MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Medical Chat And Mcqs Project
NVD
CVE-2014-6712
EPSS 0% CVSS 5.4
MEDIUM This Month

The Airlines International (aka org.iata.IAMagazine) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Airlines International
NVD
CVE-2014-6711
EPSS 0% CVSS 5.4
MEDIUM This Month

The ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Abc Lounge Webradio
NVD
CVE-2014-6710
EPSS 0% CVSS 5.4
MEDIUM This Month

The Chifro Kids Coloring Game (aka com.chifro.kids_coloring_game) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Chifro Kids Coloring Game
NVD
CVE-2014-6709
EPSS 0% CVSS 5.4
MEDIUM This Month

The TechRadar News (aka com.techradar.news) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Techradar News
NVD
CVE-2014-6708
EPSS 0% CVSS 5.4
MEDIUM This Month

The Sporting Club Uphoria (aka com.sportinginnovations.skc) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Utah Jazz
NVD
CVE-2014-6707
EPSS 0% CVSS 5.4
MEDIUM This Month

The 7Sage LSAT Prep - Proctor (aka com.sevensage.lsat) application 2.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 7Sage Lsat Prep Proctor
NVD
CVE-2014-6706
EPSS 0% CVSS 5.4
MEDIUM This Month

The Embry-Riddle (aka com.dub.app.erau) application 1.4.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Embry Riddle
NVD
CVE-2014-6705
EPSS 0% CVSS 5.4
MEDIUM This Month

The Maher Zain (aka com.vanagas.app.maher_zain) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Maher Zain
NVD
CVE-2014-6704
EPSS 0% CVSS 5.4
MEDIUM This Month

The Utah Jazz (aka com.sportinginnovations.jazz) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Utah Jazz
NVD
CVE-2014-6703
EPSS 0% CVSS 5.4
MEDIUM This Month

The phonearabs4 (aka com.phonearabs4.myapps) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Phonearabs4
NVD
CVE-2014-6702
EPSS 0% CVSS 5.4
MEDIUM This Month

The StarSat International (aka com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app) application 1.41.54.9222 for Android does not verify X.509 certificates from SSL servers, which allows. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Starsat International
NVD
CVE-2014-6701
EPSS 0% CVSS 5.4
MEDIUM This Month

The Vendormate Mobile (aka com.vendormate.mobile) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Vendormate Mobile
NVD
CVE-2014-6700
EPSS 0% CVSS 5.4
MEDIUM This Month

The NBA Game Time 2013-2014 (aka com.nbadigital.gametimelite) application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Nba Game Time 2013 2014
NVD
CVE-2014-6699
EPSS 0% CVSS 5.4
MEDIUM This Month

The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Weather Channel
NVD
CVE-2014-6698
EPSS 0% CVSS 5.4
MEDIUM This Month

The Galaxy Online 2 (aka air.com.igg.galaxyAPhone) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Galaxy Online 2
NVD
CVE-2014-6697
EPSS 0% CVSS 5.4
MEDIUM This Month

The Morocco Weather (aka com.mobilesoft.meteomaroc) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Morocco Weather
NVD
CVE-2014-6696
EPSS 0% CVSS 5.4
MEDIUM This Month

The Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Candy Girl Party Makeover
NVD
CVE-2014-6695
EPSS 0% CVSS 5.4
MEDIUM This Month

The Wedding Photo Frames-Love Pics (aka com.WeddingPhotoFramesLovePics) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wedding Photo Frames Love Pics
NVD
CVE-2014-6694
EPSS 0% CVSS 5.4
MEDIUM This Month

The 5SOS Family Planet (aka uk.co.pixelkicks.fivesos) application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 5Sos Family Planet
NVD
CVE-2014-6693
EPSS 0% CVSS 5.4
MEDIUM This Month

The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Juiker
NVD
CVE-2014-5323
EPSS 0% CVSS 5.4
MEDIUM This Month

The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko_android) application 1.0.5 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Yuko Yuko
NVD
CVE-2014-4752
EPSS 3% CVSS 10.0
CRITICAL Act Now

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM Information Disclosure System Networking Rackswitch G8332 Firmware +39
NVD
CVE-2014-3105
EPSS 0% CVSS 5.0
MEDIUM PATCH This Month

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

IBM Information Disclosure Rational Clearcase
NVD
CVE-2014-3103
EPSS 0% CVSS 5.0
MEDIUM PATCH This Month

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

IBM Information Disclosure Rational Clearcase
NVD
CVE-2014-4973
EPSS 0% CVSS 6.9
MEDIUM POC This Month

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows. Rated medium severity (CVSS 6.9). Public exploit code available and no vendor patch available.

Eset Information Disclosure Smart Security +1
NVD
CVE-2014-6692
EPSS 0% CVSS 5.4
MEDIUM This Month

The Kingsoft Clip (Office Tool) (aka cn.wps.clip) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Microsoft +1
NVD
CVE-2014-6691
EPSS 0% CVSS 5.4
MEDIUM This Month

The UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Uc Browser Hd
NVD
CVE-2014-6690
EPSS 0% CVSS 5.4
MEDIUM This Month

The InstaMessage - Instagram Chat (aka com.futurebits.instamessage.free) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Instamessage Instagram Chat
NVD
CVE-2014-6689
EPSS 0% CVSS 5.4
MEDIUM This Month

The JW Cards (aka com.jingwei.card) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Jw Cards
NVD
CVE-2014-6688
EPSS 0% CVSS 5.4
MEDIUM This Month

The Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Voices Com
NVD
CVE-2014-6687
EPSS 0% CVSS 5.4
MEDIUM This Month

The wSaudichannelAlNasr (aka com.wSaudichannelAlNasr) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wsaudichannelalnas
NVD
CVE-2014-6686
EPSS 0% CVSS 5.4
MEDIUM This Month

The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Zoho Google Information Disclosure +1
NVD
CVE-2014-6685
EPSS 0% CVSS 5.4
MEDIUM This Month

The Tsushima Travel Guide (aka com.netjapan.ntsushima) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tsushima Travel Guide
NVD
CVE-2014-6684
EPSS 0% CVSS 5.4
MEDIUM This Month

The MOL bringaPONT (aka hu.mol.bringapont) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mol Bringapont
NVD
CVE-2014-6683
EPSS 0% CVSS 5.4
MEDIUM This Month

The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Open Electrical Webser
NVD
CVE-2014-6682
EPSS 0% CVSS 5.4
MEDIUM This Month

The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure W88235Ff7Bdc2Fb574F1789750Ea99Ed6
NVD
CVE-2014-6681
EPSS 0% CVSS 5.4
MEDIUM This Month

The Mahabharata Audiocast (aka com.wordbox.mahabharataAudiocast) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mahabharata Audiocast
NVD
CVE-2014-6680
EPSS 0% CVSS 5.4
MEDIUM This Month

The superheroquiz (aka com.davidhey.superheroquiz) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Superheroquiz
NVD
CVE-2014-6679
EPSS 0% CVSS 5.4
MEDIUM This Month

The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wepisdparentportal
NVD
CVE-2014-6678
EPSS 0% CVSS 5.4
MEDIUM This Month

The Algeria Radio (aka com.wordbox.algeriaRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Algeria Radio
NVD
CVE-2014-6677
EPSS 0% CVSS 5.4
MEDIUM This Month

The Ticket Round Up (aka com.xcr.android.ticketroundupapp) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ticket Round Up
NVD
CVE-2014-6676
EPSS 0% CVSS 5.4
MEDIUM This Month

The Exercitii pentru abdomen (aka com.rareartifact.exercitiipentruabdomen41E29322) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Exercitii Pentru Abdomen
NVD
CVE-2014-6675
EPSS 0% CVSS 5.4
MEDIUM This Month

The Ruta Exacta (aka com.rutaexacta.m) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ruta Exacta
NVD
CVE-2014-6674
EPSS 0% CVSS 5.4
MEDIUM This Month

The Amazighmusic (aka nl.appsandroo.Amazighmusic) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Amazighmusic
NVD
CVE-2014-6673
EPSS 0% CVSS 5.4
MEDIUM This Month

The ChallengerTX (aka com.zhtiantian.ChallengerTX) application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Challengertx
NVD
CVE-2014-6672
EPSS 0% CVSS 5.4
MEDIUM This Month

The Friendcaster (aka uk.co.senab.blueNotifyFree) application 5.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Friendcaster
NVD
CVE-2014-6671
EPSS 0% CVSS 5.4
MEDIUM This Month

The World Cup 2014 Brazil - Xem TV (aka vn.letshare.football.worldcup) application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure World Cup 2014 Brazil Xem Tv
NVD
Prev Page 744 of 789 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy