Skip to main content

Information Disclosure

70998 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2014-5737 MEDIUM This Month

The CDsoft (aka com.wCDSOFT) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cdsoft
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5736 MEDIUM This Month

The Buy Coins (aka com.wBuyCoins) application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buy Coins
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5735 MEDIUM This Month

The Buy A Gift (aka com.wBuyAGift) application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buy A Gift
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5734 MEDIUM This Month

The Buy Books (aka com.wBooksForSale) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buy Books
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5733 MEDIUM This Month

The Shop Love (aka com.waterwish.shoplove) application 1.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Shop Love
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5732 MEDIUM This Month

The Wamba - meet women and men (aka com.wamba.client) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wamba Meet Women And Men
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5731 MEDIUM This Month

The Word Search (aka com.virtuesoft.wordsearch) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Word Search
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5730 MEDIUM This Month

The russkoe TB HD (aka com.videotelecom.russkoeHD) application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Russkoe Tb Hd
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5729 MEDIUM This Month

The Viddy (aka com.viddy.Viddy) application 1.3.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Viddy
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5728 MEDIUM This Month

The Vevo - Watch HD Music Videos (aka com.vevo) application 2.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Vevo Watch Hd Music Videos
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5727 MEDIUM This Month

The uTorrent Remote (aka com.utorrent.web) application 1.0.20110929 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Utorrent Remote
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5726 MEDIUM This Month

The Security Service myBranch App (aka com.tyfone.ssfcu.mbanking) application 7.88.00.145 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Security Service Mybranch App
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5725 MEDIUM This Month

The Truecaller - Caller ID & Block (aka com.truecaller) application 4.32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Truecaller Caller Id Block
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5724 MEDIUM This Month

The Gambling Insider Magazine (aka com.triactivemedia.gambling) application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gambling Insider Magazine
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5723 MEDIUM This Month

The Trapster (aka com.trapster.android) application 4.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Trapster
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5722 MEDIUM This Month

The SwiftKey Keyboard + Emoji (aka com.touchtype.swiftkey) application 5.0.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Swiftkey Keyboard Emoji
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5721 MEDIUM This Month

The Touchnote Postcards (aka com.touchnote.android) application 4.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Touchnote Postcards
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5720 MEDIUM This Month

The Bike Race Free - Top Free Game (aka com.topfreegames.bikeracefreeworld) application 4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bike Race Free Top Free Game
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5719 MEDIUM This Month

The BIKE RACING 2014 (aka com.timuzsolutions.bikeracing2014) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bike Racing 2014
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5717 MEDIUM This Month

The Fashion Style (aka com.thirtysixyougames.google.starGirlSingapore) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Fashion Style
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5716 MEDIUM This Month

The GUNSHIP BATTLE : Helicopter 3D (aka com.theonegames.gunshipbattle) application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gunship Battle
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5715 MEDIUM This Month

The Street Racing (aka com.tgb.streetracing.lite5pp) application 4.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Street Racing
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5714 MEDIUM This Month

The Text Me!. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Text Me Free Texting Call
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5713 MEDIUM This Month

The Telly - Watch the good stuff (aka com.telly) application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Telly Watch The Good Stuff
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5712 MEDIUM This Month

The Turbo River Racing Free (aka com.tektite.androidgames.trrfree) application 1.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Turbo River Racing Free
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5711 MEDIUM This Month

The Microsoft Tech Companion (aka com.technet) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Microsoft Microsoft Tech Companion
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5710 MEDIUM This Month

The Cisco Class Locator Fast Lane (aka com.tabletkings.mycompany.fastlane.cisco) application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Cisco Google Information Disclosure Cisco Class Locator Fast Lane
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5709 MEDIUM This Month

The Donut Maker (aka com.sunstorm.android.donut) application 1.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Donut Maker
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5708 MEDIUM This Month

The Best Racing/moto Games Ranking (aka com.subapp.android.racing) application 2.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Best Racing Moto Games Ranking
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5707 MEDIUM This Month

The Bunny Run (aka com.stargirlgames.google.bunnyrun) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bunny Run
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5706 MEDIUM This Month

The SomNote - Journal/Memo (aka com.somcloud.somnote) application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Somnote Journal Memo
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5705 MEDIUM This Month

The Sonic CD Lite (aka com.soa.sega.soniccdlite) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sonic Cd Lite
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5704 MEDIUM This Month

The DISH Anywhere (aka com.sm.SlingGuide.Dish) application 3.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dish Anywhere
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5703 MEDIUM This Month

The Slingo Lottery Challenge (aka com.slingo.slingolotterychallenge) application 1.0.34 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Slingo Lottery Challenge
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5702 MEDIUM This Month

The Penguin Run (aka com.skyboard.google.penguinRun) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Penguin Run
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5701 MEDIUM This Month

The Skout: Chats. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Skout
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5700 MEDIUM This Month

The Brain lab - brain age games IQ (aka com.sixdead.brainlab) application 2.37 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Brain Lab Brain Age Games Iq
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5699 MEDIUM This Month

The Parallel Kingdom MMO (aka com.silvermoon.client) application @7F070019 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Parallel Kingdom Mmo
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5698 MEDIUM This Month

The Furdiburb (aka com.sheado.lite.pet) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Furdiburb
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5697 MEDIUM This Month

The Dress Up!. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dress Up Girl Party
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5696 MEDIUM This Month

The Sonic 4 Episode II LITE (aka com.sega.sonic4ep2lite) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sonic 4 Episode Ii Lite
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5695 MEDIUM This Month

The Hello Kitty Cafe (aka com.sd.google.helloKittyCafe) application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hello Kitty Cafe
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5694 MEDIUM This Month

The Scoutmob local deals & events (aka com.scoutmob.ile) application 3.0.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Scoutmob Local Deals Event
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5693 MEDIUM This Month

The Slots Vacation - FREE Slots (aka com.scopely.slotsvacation) application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Slots Vacation Free Slots
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5692 MEDIUM This Month

The Safeway (aka com.safeway.client.android.safeway) application 4.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Safeway
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6024 MEDIUM This Month

The Flurry library before 3.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Flurry Analytics Android
NVD
CVSS 2.0
5.4
EPSS
0.2%
CVE-2014-5691 MEDIUM This Month

The Best Phone Security (aka com.rvappstudios.phonesecurity) application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Best Phone Security
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5690 MEDIUM This Month

The Runtastic Timer (aka com.runtastic.android.timer) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Timer
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5689 MEDIUM This Month

The Runtastic Road Bike (aka com.runtastic.android.roadbike.lite) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Road Bike
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5688 MEDIUM This Month

The Runtastic Pedometer (aka com.runtastic.android.pedometer.lite) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Pedometer
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5687 MEDIUM This Month

The Runtastic Mountain Bike (aka com.runtastic.android.mountainbike.lite) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Mountain Bike
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5686 MEDIUM This Month

The Runtastic Me (aka com.runtastic.android.me.lite) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Me
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5685 MEDIUM This Month

The Runtastic Heart Rate (aka com.runtastic.android.heartrate.lite) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Heart Rate
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5684 MEDIUM This Month

The Runtastic Running & Fitness (aka com.runtastic.android) application 5.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Running Fitness
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5683 MEDIUM This Month

The Piano Teacher (aka com.rubycell.pianisthd) application 20140730 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Piano Teacher
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5682 MEDIUM This Month

The Retale - Weekly Ads & Deals (aka com.retale.android) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Retale Weekly Ads Deals
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5681 MEDIUM This Month

The XDA-Developers (aka com.quoord.tapatalkxda.activity) application 3.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Xda Developers
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5680 MEDIUM This Month

The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tapatalk
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5679 MEDIUM This Month

The PopU 2: Get Likes on Instagram (aka com.popuapp.popu) application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Popu 2
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5678 MEDIUM This Month

The IQ Test (aka com.pophub.androidiqtest.free) application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Iq Test
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5677 MEDIUM This Month

The Point Inside Shopping & Travel (aka com.pointinside.android.app) application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Point Inside Shopping Travel
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5676 MEDIUM This Month

The Township (aka com.playrix.township) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Township
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5675 MEDIUM This Month

The Phonegram - Instagram Download (aka com.pinssible.padgram) application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Phonegram Instagram Download
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5674 MEDIUM This Month

The PicsArt - Photo Studio (aka com.picsart.studio) application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Picsart Photo Studio
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5673 MEDIUM This Month

The Easy Finder & Anti-Theft (aka com.nqmobile.easyfinder) application 2.0.10.08 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Easy Finder Anti Theft
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5672 MEDIUM This Month

The NQ Mobile Security & Antivirus (aka com.nqmobile.antivirus20) application 7.2.16.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Nq Mobile Security Antivirus
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5671 MEDIUM This Month

The Super Stickman Golf (aka com.noodlecake.ssg) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Super Stickman Golf
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5670 MEDIUM This Month

The SAS: Zombie Assault 3 (aka com.ninjakiwi.sas3zombieassault) application 2.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sas
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5669 MEDIUM This Month

The 9GAG - Funny pics and videos (aka com.ninegag.android.app) application 2.4.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 9Gag Funny Pics And Videos
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5668 MEDIUM This Month

The BAND -Group sharing & planning (aka com.nhn.android.band) application 3.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Band Group Sharing Planning
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5667 MEDIUM This Month

The Vault-Hide SMS, Pics & Videos (aka com.netqin.ps) application 5.0.14.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hashicorp Vault Hide Sms Pics Videos
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5666 MEDIUM This Month

The AVD Download Video (aka com.myboyfriendisageek.videocatcher.demo) application 3.3.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Avd Download Video
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5664 MEDIUM This Month

The Spider Solitaire (aka com.mobilityware.spider) application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Spider Solitaire
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5663 MEDIUM This Month

The FreeCell Solitaire (aka com.mobilityware.freecell) application 2.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Freecell Solitaire
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5662 MEDIUM This Month

The Rail Rush (aka com.miniclip.railrush) application 1.9.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rail Rush
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5661 MEDIUM This Month

The Anger of Stick 3 (aka com.miniclip.angerofstick3) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Anger Of Stick 3
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5660 MEDIUM This Month

The TN Members 1st FCU-RDC (aka com.metova.cuae.tmffcu) application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tn Members 1St Fcu Rdc
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5659 MEDIUM This Month

The ASTRO File Manager with Cloud (aka com.metago.astro) application ASTRO-4.4.592 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Astro File Manager With Cloud
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5658 MEDIUM This Month

The MercadoLibre (aka com.mercadolibre) application 3.8.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mercadolibre
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5657 MEDIUM This Month

The CA Lottery Results (aka com.matcho0.calotto) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ca Lottery Results
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5656 MEDIUM This Month

The TRA Auctions for Buyers (aka com.manheim.tra) application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tra Auctions For Buyers
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5655 MEDIUM This Month

The CM Browser - Fast & Secure (aka com.ksmobile.cb) application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cm Browser Fast Secure
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5654 MEDIUM This Month

The Kaspersky Internet Security (aka com.kms.free) application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kaspersky Internet Security
NVD
CVSS 2.0
5.4
EPSS
0.0%
CVE-2014-5653 MEDIUM This Month

The Unblock Me FREE (aka com.kiragames.unblockmefree) application 1.4.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Unblock Me Free
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5652 MEDIUM This Month

The Kicksend Photo Prints (aka com.kicksend.android.print) application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kicksend Photo Prints
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5651 MEDIUM This Month

The Kicksend: Share & Print Photos (aka com.kicksend.android) application 3.3.2.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kicksend
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5650 MEDIUM This Month

The Traffic Jam Free (aka com.jiuzhangtech.rushhour) application 1.7.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Traffic Jam Free
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5649 MEDIUM This Month

The iLove - Free Dating & Chat App (aka com.jestadigital.android.ilove) application 1.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ilove Free Dating Chat App
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5648 MEDIUM This Month

The Chat, Flirt & Dating Heart JAUMO (aka com.jaumo) application 2.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Chat Flirt Dating Heart Jaumo
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5647 MEDIUM This Month

The ISL Light Remote Desktop (aka com.islonline.isllight.mobile.android) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Isl Light Remote Desktop
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-5737
EPSS 0% CVSS 5.4
MEDIUM This Month

The CDsoft (aka com.wCDSOFT) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cdsoft
NVD
CVE-2014-5736
EPSS 0% CVSS 5.4
MEDIUM This Month

The Buy Coins (aka com.wBuyCoins) application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buy Coins
NVD
CVE-2014-5735
EPSS 0% CVSS 5.4
MEDIUM This Month

The Buy A Gift (aka com.wBuyAGift) application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buy A Gift
NVD
CVE-2014-5734
EPSS 0% CVSS 5.4
MEDIUM This Month

The Buy Books (aka com.wBooksForSale) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Buy Books
NVD
CVE-2014-5733
EPSS 0% CVSS 5.4
MEDIUM This Month

The Shop Love (aka com.waterwish.shoplove) application 1.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Shop Love
NVD
CVE-2014-5732
EPSS 0% CVSS 5.4
MEDIUM This Month

The Wamba - meet women and men (aka com.wamba.client) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Wamba Meet Women And Men
NVD
CVE-2014-5731
EPSS 0% CVSS 5.4
MEDIUM This Month

The Word Search (aka com.virtuesoft.wordsearch) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Word Search
NVD
CVE-2014-5730
EPSS 0% CVSS 5.4
MEDIUM This Month

The russkoe TB HD (aka com.videotelecom.russkoeHD) application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Russkoe Tb Hd
NVD
CVE-2014-5729
EPSS 0% CVSS 5.4
MEDIUM This Month

The Viddy (aka com.viddy.Viddy) application 1.3.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Viddy
NVD
CVE-2014-5728
EPSS 0% CVSS 5.4
MEDIUM This Month

The Vevo - Watch HD Music Videos (aka com.vevo) application 2.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Vevo Watch Hd Music Videos
NVD
CVE-2014-5727
EPSS 0% CVSS 5.4
MEDIUM This Month

The uTorrent Remote (aka com.utorrent.web) application 1.0.20110929 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Utorrent Remote
NVD
CVE-2014-5726
EPSS 0% CVSS 5.4
MEDIUM This Month

The Security Service myBranch App (aka com.tyfone.ssfcu.mbanking) application 7.88.00.145 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Security Service Mybranch App
NVD
CVE-2014-5725
EPSS 0% CVSS 5.4
MEDIUM This Month

The Truecaller - Caller ID & Block (aka com.truecaller) application 4.32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Truecaller Caller Id Block
NVD
CVE-2014-5724
EPSS 0% CVSS 5.4
MEDIUM This Month

The Gambling Insider Magazine (aka com.triactivemedia.gambling) application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gambling Insider Magazine
NVD
CVE-2014-5723
EPSS 0% CVSS 5.4
MEDIUM This Month

The Trapster (aka com.trapster.android) application 4.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Trapster
NVD
CVE-2014-5722
EPSS 0% CVSS 5.4
MEDIUM This Month

The SwiftKey Keyboard + Emoji (aka com.touchtype.swiftkey) application 5.0.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Swiftkey Keyboard Emoji
NVD
CVE-2014-5721
EPSS 0% CVSS 5.4
MEDIUM This Month

The Touchnote Postcards (aka com.touchnote.android) application 4.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Touchnote Postcards
NVD
CVE-2014-5720
EPSS 0% CVSS 5.4
MEDIUM This Month

The Bike Race Free - Top Free Game (aka com.topfreegames.bikeracefreeworld) application 4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bike Race Free Top Free Game
NVD
CVE-2014-5719
EPSS 0% CVSS 5.4
MEDIUM This Month

The BIKE RACING 2014 (aka com.timuzsolutions.bikeracing2014) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bike Racing 2014
NVD
CVE-2014-5717
EPSS 0% CVSS 5.4
MEDIUM This Month

The Fashion Style (aka com.thirtysixyougames.google.starGirlSingapore) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Fashion Style
NVD
CVE-2014-5716
EPSS 0% CVSS 5.4
MEDIUM This Month

The GUNSHIP BATTLE : Helicopter 3D (aka com.theonegames.gunshipbattle) application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Gunship Battle
NVD
CVE-2014-5715
EPSS 0% CVSS 5.4
MEDIUM This Month

The Street Racing (aka com.tgb.streetracing.lite5pp) application 4.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Street Racing
NVD
CVE-2014-5714
EPSS 0% CVSS 5.4
MEDIUM This Month

The Text Me!. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Text Me Free Texting Call
NVD
CVE-2014-5713
EPSS 0% CVSS 5.4
MEDIUM This Month

The Telly - Watch the good stuff (aka com.telly) application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Telly Watch The Good Stuff
NVD
CVE-2014-5712
EPSS 0% CVSS 5.4
MEDIUM This Month

The Turbo River Racing Free (aka com.tektite.androidgames.trrfree) application 1.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Turbo River Racing Free
NVD
CVE-2014-5711
EPSS 0% CVSS 5.4
MEDIUM This Month

The Microsoft Tech Companion (aka com.technet) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Microsoft +1
NVD
CVE-2014-5710
EPSS 0% CVSS 5.4
MEDIUM This Month

The Cisco Class Locator Fast Lane (aka com.tabletkings.mycompany.fastlane.cisco) application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Cisco Google Information Disclosure +1
NVD
CVE-2014-5709
EPSS 0% CVSS 5.4
MEDIUM This Month

The Donut Maker (aka com.sunstorm.android.donut) application 1.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Donut Maker
NVD
CVE-2014-5708
EPSS 0% CVSS 5.4
MEDIUM This Month

The Best Racing/moto Games Ranking (aka com.subapp.android.racing) application 2.2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Best Racing Moto Games Ranking
NVD
CVE-2014-5707
EPSS 0% CVSS 5.4
MEDIUM This Month

The Bunny Run (aka com.stargirlgames.google.bunnyrun) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Bunny Run
NVD
CVE-2014-5706
EPSS 0% CVSS 5.4
MEDIUM This Month

The SomNote - Journal/Memo (aka com.somcloud.somnote) application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Somnote Journal Memo
NVD
CVE-2014-5705
EPSS 0% CVSS 5.4
MEDIUM This Month

The Sonic CD Lite (aka com.soa.sega.soniccdlite) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sonic Cd Lite
NVD
CVE-2014-5704
EPSS 0% CVSS 5.4
MEDIUM This Month

The DISH Anywhere (aka com.sm.SlingGuide.Dish) application 3.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dish Anywhere
NVD
CVE-2014-5703
EPSS 0% CVSS 5.4
MEDIUM This Month

The Slingo Lottery Challenge (aka com.slingo.slingolotterychallenge) application 1.0.34 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Slingo Lottery Challenge
NVD
CVE-2014-5702
EPSS 0% CVSS 5.4
MEDIUM This Month

The Penguin Run (aka com.skyboard.google.penguinRun) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Penguin Run
NVD
CVE-2014-5701
EPSS 0% CVSS 5.4
MEDIUM This Month

The Skout: Chats. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Skout
NVD
CVE-2014-5700
EPSS 0% CVSS 5.4
MEDIUM This Month

The Brain lab - brain age games IQ (aka com.sixdead.brainlab) application 2.37 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Brain Lab Brain Age Games Iq
NVD
CVE-2014-5699
EPSS 0% CVSS 5.4
MEDIUM This Month

The Parallel Kingdom MMO (aka com.silvermoon.client) application @7F070019 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Parallel Kingdom Mmo
NVD
CVE-2014-5698
EPSS 0% CVSS 5.4
MEDIUM This Month

The Furdiburb (aka com.sheado.lite.pet) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Furdiburb
NVD
CVE-2014-5697
EPSS 0% CVSS 5.4
MEDIUM This Month

The Dress Up!. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Dress Up Girl Party
NVD
CVE-2014-5696
EPSS 0% CVSS 5.4
MEDIUM This Month

The Sonic 4 Episode II LITE (aka com.sega.sonic4ep2lite) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sonic 4 Episode Ii Lite
NVD
CVE-2014-5695
EPSS 0% CVSS 5.4
MEDIUM This Month

The Hello Kitty Cafe (aka com.sd.google.helloKittyCafe) application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hello Kitty Cafe
NVD
CVE-2014-5694
EPSS 0% CVSS 5.4
MEDIUM This Month

The Scoutmob local deals & events (aka com.scoutmob.ile) application 3.0.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Scoutmob Local Deals Event
NVD
CVE-2014-5693
EPSS 0% CVSS 5.4
MEDIUM This Month

The Slots Vacation - FREE Slots (aka com.scopely.slotsvacation) application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Slots Vacation Free Slots
NVD
CVE-2014-5692
EPSS 0% CVSS 5.4
MEDIUM This Month

The Safeway (aka com.safeway.client.android.safeway) application 4.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Safeway
NVD
CVE-2014-6024
EPSS 0% CVSS 5.4
MEDIUM This Month

The Flurry library before 3.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Flurry Analytics Android
NVD
CVE-2014-5691
EPSS 0% CVSS 5.4
MEDIUM This Month

The Best Phone Security (aka com.rvappstudios.phonesecurity) application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Best Phone Security
NVD
CVE-2014-5690
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Timer (aka com.runtastic.android.timer) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Timer
NVD
CVE-2014-5689
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Road Bike (aka com.runtastic.android.roadbike.lite) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Road Bike
NVD
CVE-2014-5688
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Pedometer (aka com.runtastic.android.pedometer.lite) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Pedometer
NVD
CVE-2014-5687
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Mountain Bike (aka com.runtastic.android.mountainbike.lite) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Mountain Bike
NVD
CVE-2014-5686
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Me (aka com.runtastic.android.me.lite) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Me
NVD
CVE-2014-5685
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Heart Rate (aka com.runtastic.android.heartrate.lite) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Heart Rate
NVD
CVE-2014-5684
EPSS 0% CVSS 5.4
MEDIUM This Month

The Runtastic Running & Fitness (aka com.runtastic.android) application 5.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Runtastic Running Fitness
NVD
CVE-2014-5683
EPSS 0% CVSS 5.4
MEDIUM This Month

The Piano Teacher (aka com.rubycell.pianisthd) application 20140730 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Piano Teacher
NVD
CVE-2014-5682
EPSS 0% CVSS 5.4
MEDIUM This Month

The Retale - Weekly Ads & Deals (aka com.retale.android) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Retale Weekly Ads Deals
NVD
CVE-2014-5681
EPSS 0% CVSS 5.4
MEDIUM This Month

The XDA-Developers (aka com.quoord.tapatalkxda.activity) application 3.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Xda Developers
NVD
CVE-2014-5680
EPSS 0% CVSS 5.4
MEDIUM This Month

The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tapatalk
NVD
CVE-2014-5679
EPSS 0% CVSS 5.4
MEDIUM This Month

The PopU 2: Get Likes on Instagram (aka com.popuapp.popu) application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Popu 2
NVD
CVE-2014-5678
EPSS 0% CVSS 5.4
MEDIUM This Month

The IQ Test (aka com.pophub.androidiqtest.free) application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Iq Test
NVD
CVE-2014-5677
EPSS 0% CVSS 5.4
MEDIUM This Month

The Point Inside Shopping & Travel (aka com.pointinside.android.app) application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Point Inside Shopping Travel
NVD
CVE-2014-5676
EPSS 0% CVSS 5.4
MEDIUM This Month

The Township (aka com.playrix.township) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Township
NVD
CVE-2014-5675
EPSS 0% CVSS 5.4
MEDIUM This Month

The Phonegram - Instagram Download (aka com.pinssible.padgram) application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Phonegram Instagram Download
NVD
CVE-2014-5674
EPSS 0% CVSS 5.4
MEDIUM This Month

The PicsArt - Photo Studio (aka com.picsart.studio) application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Picsart Photo Studio
NVD
CVE-2014-5673
EPSS 0% CVSS 5.4
MEDIUM This Month

The Easy Finder & Anti-Theft (aka com.nqmobile.easyfinder) application 2.0.10.08 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Easy Finder Anti Theft
NVD
CVE-2014-5672
EPSS 0% CVSS 5.4
MEDIUM This Month

The NQ Mobile Security & Antivirus (aka com.nqmobile.antivirus20) application 7.2.16.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Nq Mobile Security Antivirus
NVD
CVE-2014-5671
EPSS 0% CVSS 5.4
MEDIUM This Month

The Super Stickman Golf (aka com.noodlecake.ssg) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Super Stickman Golf
NVD
CVE-2014-5670
EPSS 0% CVSS 5.4
MEDIUM This Month

The SAS: Zombie Assault 3 (aka com.ninjakiwi.sas3zombieassault) application 2.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Sas
NVD
CVE-2014-5669
EPSS 0% CVSS 5.4
MEDIUM This Month

The 9GAG - Funny pics and videos (aka com.ninegag.android.app) application 2.4.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure 9Gag Funny Pics And Videos
NVD
CVE-2014-5668
EPSS 0% CVSS 5.4
MEDIUM This Month

The BAND -Group sharing & planning (aka com.nhn.android.band) application 3.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Band Group Sharing Planning
NVD
CVE-2014-5667
EPSS 0% CVSS 5.4
MEDIUM This Month

The Vault-Hide SMS, Pics & Videos (aka com.netqin.ps) application 5.0.14.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Hashicorp +1
NVD
CVE-2014-5666
EPSS 0% CVSS 5.4
MEDIUM This Month

The AVD Download Video (aka com.myboyfriendisageek.videocatcher.demo) application 3.3.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Avd Download Video
NVD
CVE-2014-5664
EPSS 0% CVSS 5.4
MEDIUM This Month

The Spider Solitaire (aka com.mobilityware.spider) application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Spider Solitaire
NVD
CVE-2014-5663
EPSS 0% CVSS 5.4
MEDIUM This Month

The FreeCell Solitaire (aka com.mobilityware.freecell) application 2.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Freecell Solitaire
NVD
CVE-2014-5662
EPSS 0% CVSS 5.4
MEDIUM This Month

The Rail Rush (aka com.miniclip.railrush) application 1.9.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Rail Rush
NVD
CVE-2014-5661
EPSS 0% CVSS 5.4
MEDIUM This Month

The Anger of Stick 3 (aka com.miniclip.angerofstick3) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Anger Of Stick 3
NVD
CVE-2014-5660
EPSS 0% CVSS 5.4
MEDIUM This Month

The TN Members 1st FCU-RDC (aka com.metova.cuae.tmffcu) application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tn Members 1St Fcu Rdc
NVD
CVE-2014-5659
EPSS 0% CVSS 5.4
MEDIUM This Month

The ASTRO File Manager with Cloud (aka com.metago.astro) application ASTRO-4.4.592 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Astro File Manager With Cloud
NVD
CVE-2014-5658
EPSS 0% CVSS 5.4
MEDIUM This Month

The MercadoLibre (aka com.mercadolibre) application 3.8.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Mercadolibre
NVD
CVE-2014-5657
EPSS 0% CVSS 5.4
MEDIUM This Month

The CA Lottery Results (aka com.matcho0.calotto) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ca Lottery Results
NVD
CVE-2014-5656
EPSS 0% CVSS 5.4
MEDIUM This Month

The TRA Auctions for Buyers (aka com.manheim.tra) application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Tra Auctions For Buyers
NVD
CVE-2014-5655
EPSS 0% CVSS 5.4
MEDIUM This Month

The CM Browser - Fast & Secure (aka com.ksmobile.cb) application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cm Browser Fast Secure
NVD
CVE-2014-5654
EPSS 0% CVSS 5.4
MEDIUM This Month

The Kaspersky Internet Security (aka com.kms.free) application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kaspersky Internet Security
NVD
CVE-2014-5653
EPSS 0% CVSS 5.4
MEDIUM This Month

The Unblock Me FREE (aka com.kiragames.unblockmefree) application 1.4.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Unblock Me Free
NVD
CVE-2014-5652
EPSS 0% CVSS 5.4
MEDIUM This Month

The Kicksend Photo Prints (aka com.kicksend.android.print) application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kicksend Photo Prints
NVD
CVE-2014-5651
EPSS 0% CVSS 5.4
MEDIUM This Month

The Kicksend: Share & Print Photos (aka com.kicksend.android) application 3.3.2.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Kicksend
NVD
CVE-2014-5650
EPSS 0% CVSS 5.4
MEDIUM This Month

The Traffic Jam Free (aka com.jiuzhangtech.rushhour) application 1.7.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Traffic Jam Free
NVD
CVE-2014-5649
EPSS 0% CVSS 5.4
MEDIUM This Month

The iLove - Free Dating & Chat App (aka com.jestadigital.android.ilove) application 1.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Ilove Free Dating Chat App
NVD
CVE-2014-5648
EPSS 0% CVSS 5.4
MEDIUM This Month

The Chat, Flirt & Dating Heart JAUMO (aka com.jaumo) application 2.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Chat Flirt Dating Heart Jaumo
NVD
CVE-2014-5647
EPSS 0% CVSS 5.4
MEDIUM This Month

The ISL Light Remote Desktop (aka com.islonline.isllight.mobile.android) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Isl Light Remote Desktop
NVD
Prev Page 749 of 789 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy