CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In October 2014

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
151 CVE-2014-7775 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
152 CVE-2014-7774 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Herbs & Flowers Dictionary (aka com.wHerbsNFlowersDictionary) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
153 CVE-2014-7773 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
154 CVE-2014-7772 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The MB Tickets (aka com.xcr.android.mbtickets) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
155 CVE-2014-7771 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The World Tamil Bayan (aka com.wWorldTamilBayan) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
156 CVE-2014-7770 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Lagu POP Indonesia (aka com.lagu.pop.indonesia.xygwphqpuomclljvaa) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
157 CVE-2014-7769 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Accurate Lending (aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0) application 1.0021.b0021 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
158 CVE-2014-7768 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Analects of Confucius (aka com.azbc88881.lunyu) application 8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
159 CVE-2014-7767 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The A+ (aka cn.xrzcm) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
160 CVE-2014-7766 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The 7 Habits Personal Development (aka appinventor.ai_ingka_d_jiw.TheCompleteGuideToApplyingThe7HabitsInHolisticPersonalDevelopment) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
161 CVE-2014-7765 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Hundred Thousands Kid Book (aka it.tinytap.attsa.thousands) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
162 CVE-2014-7764 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Semper Invicta Fitness (aka com.semper.invicta.fitness) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
163 CVE-2014-7763 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Listen up! mirucho (aka jp.ameba.kiiteyo.android) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
164 CVE-2014-7762 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Bite it! (aka com.ASA1Touch.Bite_it) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
165 CVE-2014-7761 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Ink Cards (aka com.sincerely.android.ink) application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
166 CVE-2014-7760 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Health assistance service (aka net.nttcloud.ft.karada) application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
167 CVE-2014-7759 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Jazz Lovers Radio (aka com.nobexinc.wls_99273254.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
168 CVE-2014-7758 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The AMKAMAL Science Portfolio (aka com.wAMKAMALSciencePortfolio) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
169 CVE-2014-7757 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Awful Ninja Game (aka com.absolutelyawfulapplications.awfulninjagame) application 1.0.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
170 CVE-2014-7756 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Radiohead fan (aka nl.jborsje.android.bandnews.radiohead) application 4.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
171 CVE-2014-7755 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The eTopUpOnline (aka com.moremagic.etopup.client.android) application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
172 CVE-2014-7754 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Condor S.E. (aka com.app_condorsoutheast.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
173 CVE-2014-7753 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Circa News (aka cir.ca) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
174 CVE-2014-7752 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The NASIOC (aka net.endoftime.android.forumrunner.nasioc) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
175 CVE-2014-7751 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Recetas de Tragos (aka com.wRecetasdeTragos) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
176 CVE-2014-7750 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Taster Magazine (aka com.magazinecloner.taster) application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
177 CVE-2014-7749 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The CamDictionary (aka com.intsig.camdict) application 2.3.0.20131118 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
178 CVE-2014-7748 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Garip Ve Ilginc Olaylar (aka com.wGaripveeIlgincOlay) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
179 CVE-2014-7746 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Fusion Flowers - Weddings (aka com.triactivemedia.fusionweddings) application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
180 CVE-2014-7745 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Flight Manager (aka com.flightmanager.view) application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
181 CVE-2014-7744 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Musulmanin.com (aka com.wSalyafiyailimurdjiya) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
182 CVE-2014-7743 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Humor Ironias y Realidades (aka com.wHumork) application 0.63.13371.13576 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
183 CVE-2014-7742 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Noticias del Vaticano (aka com.wNoticiasdelVaticano) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
184 CVE-2014-7741 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Healing Bookstore (aka com.wHealingBookstore) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
185 CVE-2014-7740 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Pony Magazine (aka com.triactivemedia.ponymagazine) application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
186 CVE-2014-7739 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Anahi A Adopter FR (aka com.wAnahiAAdopterFR) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
187 CVE-2014-7737 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The FMAC : Federation Culinaire (aka com.fmac) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
188 CVE-2014-7735 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Dr. Sheikh Adnan Ibrahim (aka com.amitaff.adnanIbrahim) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
189 CVE-2014-7734 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Reds Anytime Bail (aka com.onesolutionapps.redsanytimebailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
190 CVE-2014-7733 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Karaf Magazin (aka com.magzter.karafmagazin) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
191 CVE-2014-7731 310 +Info 2014-10-21 2015-02-11
5.4
 None Local Network Medium Not required Partial Partial Partial
The Radio de la Cato (aka com.radio.de.la.cato) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
192 CVE-2014-7728 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Logan Banner (aka com.soln.S8B5C1F53B8CBE06D5DE0A0E7E23DCDA7) application 1.0010.b0010 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
193 CVE-2014-7727 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Dj Brad H (aka com.dreamstep.wDjBradH) application 0.90 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
194 CVE-2014-7726 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Golosinas Simpson1 (aka com.wGolosinasSimpson1) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
195 CVE-2014-7725 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Rally Albania Live 2014 (aka com.wRallyAlbaniaLIVE2014) application 0.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
196 CVE-2014-7724 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Chemssou Blink (aka com.chemssou.blink) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
197 CVE-2014-7723 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
198 CVE-2014-7722 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Indian Jeweller (aka com.magzter.indianjeweller) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
199 CVE-2014-7721 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The President Clicker (aka com.flexymind.pclicker) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
200 CVE-2014-7720 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Better Homes and Gardens Aus (aka com.pacificmagazines.betterhomesandgardens) application @7F0801B2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Total number of vulnerabilities : 1414   Page : 1 2 3 4 (This Page)5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.