CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In October 2014

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
751 CVE-2014-6935 310 +Info 2014-10-11 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The ColorMania - Color Quiz Game (aka com.ColormaniaColoringGames) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
752 CVE-2014-6934 310 +Info 2014-10-11 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Physics Chemistry Biology Quiz (aka com.pdevsmcqs.pcbmcqseries) application 1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
753 CVE-2014-6933 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Toraware Takojyou (aka ltd.pte.wavea.torawaretakojyou) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
754 CVE-2014-6932 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The All Navalny (aka com.all.navalny) application 1.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
755 CVE-2014-6931 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Treves Dance Center (aka com.myapphone.android.myapptrvesdancecenter) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
756 CVE-2014-6930 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Abram Radio Groove! (aka com.nobexinc.wls_79226887.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
757 CVE-2014-6929 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The AIHce 2014 (aka com.coreapps.android.followme.aihce2014) application 6.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
758 CVE-2014-6928 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Rastreador de Celulares (aka com.mobincube.android.sc_9KTH8) application 5.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
759 CVE-2014-6927 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Myanmar Housing : mmHome (aka com.mmhome3) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
760 CVE-2014-6926 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Allt om Brollop (aka com.paperton.wl.alltombrollop) application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
761 CVE-2014-6925 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Steyr Forum (aka com.tapatalk.steyrclubcomvb) application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
762 CVE-2014-6924 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Metro News (aka com.netpia.ha.metro) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
763 CVE-2014-6923 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
764 CVE-2014-6922 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The KFAI Community Radio (aka com.skyblue.pra.kfai) application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
765 CVE-2014-6921 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Buckhorn Grill (aka com.orderingapps.buckhorn) application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
766 CVE-2014-6920 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
767 CVE-2014-6919 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Metalcasting Newsstand (aka air.com.yudu.ReaderAIR3017071) application 3.12.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
768 CVE-2014-6918 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
769 CVE-2014-6917 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
770 CVE-2014-6916 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The mama.cn (aka cn.ziipin.mama.ui) application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
771 CVE-2014-6914 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
772 CVE-2014-6913 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Dive The World (aka com.paperton.wl.divetheworld) application 1.53 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
773 CVE-2014-6912 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The IRA's 59th Annual Conference (aka com.coreapps.android.followme.ira_14) application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
774 CVE-2014-6911 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
775 CVE-2014-6910 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The MemorizeIt! (aka com.kshinenterprises.kshinent.memorizeit) application 1.7.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
776 CVE-2014-6909 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
777 CVE-2014-6908 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
778 CVE-2014-6907 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
779 CVE-2014-6906 310 +Info 2014-10-04 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
780 CVE-2014-6905 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The H2O Human Harmony Organization (aka com.netpia.ha.theh2o) application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
781 CVE-2014-6904 310 +Info 2014-10-11 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Safe Browser - The Web Filter (aka com.cloudacl) application 1.2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
782 CVE-2014-6903 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Gulf Power Mobile Bill Pay (aka com.tionetworks.gulf) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
783 CVE-2014-6902 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
784 CVE-2014-6901 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
785 CVE-2014-6900 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
786 CVE-2014-6899 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
787 CVE-2014-6898 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
788 CVE-2014-6897 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
789 CVE-2014-6896 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
790 CVE-2014-6895 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
791 CVE-2014-6894 310 +Info 2014-10-03 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
792 CVE-2014-6893 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Pushpins Grocery Coupons (aka com.pushpinsapp.pushpins) application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
793 CVE-2014-6892 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
794 CVE-2014-6891 310 +Info 2014-10-11 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Vodafone Avantaj Cepte (aka com.vodafone.avantajcepte.main) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
795 CVE-2014-6890 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The CouponCabin - Coupons & Deals (aka com.couponcabin) application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
796 CVE-2014-6889 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
797 CVE-2014-6888 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
798 CVE-2014-6887 310 +Info 2014-10-11 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
799 CVE-2014-6886 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
800 CVE-2014-6885 310 +Info 2014-10-02 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Total number of vulnerabilities : 1414   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 (This Page)17 18 19 20 21 22 23 24 25 26 27 28 29
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.