CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities (CVSS score between 5 and 5.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
6801 CVE-2014-7737 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The FMAC : Federation Culinaire (aka com.fmac) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6802 CVE-2014-7739 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Anahi A Adopter FR (aka com.wAnahiAAdopterFR) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6803 CVE-2014-7740 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Pony Magazine (aka com.triactivemedia.ponymagazine) application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6804 CVE-2014-7741 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Healing Bookstore (aka com.wHealingBookstore) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6805 CVE-2014-7742 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Noticias del Vaticano (aka com.wNoticiasdelVaticano) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6806 CVE-2014-7743 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Humor Ironias y Realidades (aka com.wHumork) application 0.63.13371.13576 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6807 CVE-2014-7744 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Musulmanin.com (aka com.wSalyafiyailimurdjiya) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6808 CVE-2014-7745 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Flight Manager (aka com.flightmanager.view) application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6809 CVE-2014-7746 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Fusion Flowers - Weddings (aka com.triactivemedia.fusionweddings) application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6810 CVE-2014-7748 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Garip Ve Ilginc Olaylar (aka com.wGaripveeIlgincOlay) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6811 CVE-2014-7749 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The CamDictionary (aka com.intsig.camdict) application 2.3.0.20131118 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6812 CVE-2014-7750 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Taster Magazine (aka com.magazinecloner.taster) application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6813 CVE-2014-7751 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Recetas de Tragos (aka com.wRecetasdeTragos) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6814 CVE-2014-7752 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The NASIOC (aka net.endoftime.android.forumrunner.nasioc) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6815 CVE-2014-7753 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Circa News (aka cir.ca) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6816 CVE-2014-7754 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Condor S.E. (aka com.app_condorsoutheast.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6817 CVE-2014-7755 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The eTopUpOnline (aka com.moremagic.etopup.client.android) application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6818 CVE-2014-7756 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Radiohead fan (aka nl.jborsje.android.bandnews.radiohead) application 4.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6819 CVE-2014-7757 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Awful Ninja Game (aka com.absolutelyawfulapplications.awfulninjagame) application 1.0.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6820 CVE-2014-7758 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The AMKAMAL Science Portfolio (aka com.wAMKAMALSciencePortfolio) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6821 CVE-2014-7759 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Jazz Lovers Radio (aka com.nobexinc.wls_99273254.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6822 CVE-2014-7760 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Health assistance service (aka net.nttcloud.ft.karada) application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6823 CVE-2014-7761 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Ink Cards (aka com.sincerely.android.ink) application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6824 CVE-2014-7762 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Bite it! (aka com.ASA1Touch.Bite_it) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6825 CVE-2014-7763 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Listen up! mirucho (aka jp.ameba.kiiteyo.android) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6826 CVE-2014-7764 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Semper Invicta Fitness (aka com.semper.invicta.fitness) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6827 CVE-2014-7765 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Hundred Thousands Kid Book (aka it.tinytap.attsa.thousands) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6828 CVE-2014-7766 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The 7 Habits Personal Development (aka appinventor.ai_ingka_d_jiw.TheCompleteGuideToApplyingThe7HabitsInHolisticPersonalDevelopment) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6829 CVE-2014-7767 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The A+ (aka cn.xrzcm) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6830 CVE-2014-7768 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Analects of Confucius (aka com.azbc88881.lunyu) application 8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6831 CVE-2014-7769 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Accurate Lending (aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0) application 1.0021.b0021 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6832 CVE-2014-7770 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Lagu POP Indonesia (aka com.lagu.pop.indonesia.xygwphqpuomclljvaa) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6833 CVE-2014-7771 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The World Tamil Bayan (aka com.wWorldTamilBayan) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6834 CVE-2014-7772 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The MB Tickets (aka com.xcr.android.mbtickets) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6835 CVE-2014-7773 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6836 CVE-2014-7774 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Herbs & Flowers Dictionary (aka com.wHerbsNFlowersDictionary) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6837 CVE-2014-7775 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6838 CVE-2014-7776 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Kavita KS (aka com.snaplion.kavitaks) application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6839 CVE-2014-7777 310 +Info 2014-10-21 2014-11-19
5.4
 None Local Network Medium Not required Partial Partial Partial
The Slingshot Forum (aka com.tapatalk.theslingshotforumcom) application 3.9.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6840 CVE-2014-7778 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6841 CVE-2014-7779 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Kuran'in Bilimsel Mucizeleri (aka com.wKurannBilimselMucizeleri) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6842 CVE-2014-7780 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Pakistan Cricket News (aka com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app) application 1.21.38.6504 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6843 CVE-2014-7781 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Marijuana Handbook Lite - Weed (aka com.fallacystudios.marijuanahandbooklite) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6844 CVE-2014-7782 310 +Info 2014-10-21 2015-02-04
5.4
 None Local Network Medium Not required Partial Partial Partial
The Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6845 CVE-2014-7783 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Bill G. Bennett (aka com.billgbennett) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6846 CVE-2014-7784 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Schon! Magazine (aka com.magzter.schonmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6847 CVE-2014-7785 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The AAAA Discount Bail (aka com.onesolutionapps.aaaadiscountbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6848 CVE-2014-7786 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The English Football Magazine (aka com.magzter.englishfootball) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6849 CVE-2014-7787 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The iShuttle (aka com.synapse.ishuttle_user) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
6850 CVE-2014-7788 310 +Info 2014-10-21 2014-11-14
5.4
 None Local Network Medium Not required Partial Partial Partial
The Best Free Giveaways (aka com.wIphone5GiveAways) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.