CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In September 2014

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
701 CVE-2014-5593 310 +Info 2014-09-09 2014-09-10
5.4
None Local Network Medium Not required Partial Partial Partial
The Christian Dating Cafe (aka com.christiancafe.mobile.android) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
702 CVE-2014-5592 310 +Info 2014-09-09 2014-09-10
5.4
None Local Network Medium Not required Partial Partial Partial
The Free Dating Heart COL (aka com.choiceoflove.dating) application 2.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
703 CVE-2014-5591 310 +Info 2014-09-09 2014-09-10
5.4
None Local Network Medium Not required Partial Partial Partial
The Frankly Chat (aka com.chatfrankly.android) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
704 CVE-2014-5590 310 +Info 2014-09-09 2014-11-13
5.4
None Local Network Medium Not required Partial Partial Partial
The Snake Evolution (aka com.btwgames.snake) application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
705 CVE-2014-5589 310 +Info 2014-09-09 2014-09-10
5.4
None Local Network Medium Not required Partial Partial Partial
The Now Browser (Material) (aka com.browser.nowbasic) 2.8.1 application Material for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
706 CVE-2014-5588 310 +Info 2014-09-09 2014-11-13
5.4
None Local Network Medium Not required Partial Partial Partial
The Free eBooks (aka com.bmfapps.freekindlebooks) application 14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
707 CVE-2014-5587 310 +Info 2014-09-09 2014-11-09
5.4
None Local Network Medium Not required Partial Partial Partial
The brokenscreencrank (aka com.biggame.brokenscreencrank) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
708 CVE-2014-5586 310 +Info 2014-09-09 2014-09-10
5.4
None Local Network Medium Not required Partial Partial Partial
The BIATNET (aka com.biatnet.mobile) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
709 CVE-2014-5585 310 +Info 2014-09-09 2014-11-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Like4Like: Get Instagram Likes (aka com.bepop.bepop) application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
710 CVE-2014-5584 310 +Info 2014-09-09 2014-09-12
5.4
None Local Network Medium Not required Partial Partial Partial
The Background Check BeenVerified (aka com.beenverified.android) application 4.01.67 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
711 CVE-2014-5583 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Most Popular Ringtones (aka com.bbs.mostpopularringtones) application 32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
712 CVE-2014-5582 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Ingress Intel Helper (aka com.bb.ingressintel) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
713 CVE-2014-5581 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The mirror photo shape (aka com.baiwang.styleinstamirror) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
714 CVE-2014-5580 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The BackgroundCheckProTool (aka com.BackgroundCheckProTool) application 3.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
715 CVE-2014-5579 310 +Info 2014-09-09 2017-07-11
5.4
None Local Network Medium Not required Partial Partial Partial
The Anywhere Pad-Meet, Collaborate (aka com.azeus.anywherepad) application 4.0.1031 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
716 CVE-2014-5578 310 +Info 2014-09-09 2015-11-04
5.4
None Local Network Medium Not required Partial Partial Partial
The Trading 212 FOREX (aka com.avuscapital.trading212) application before 2.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
717 CVE-2014-5577 310 +Info 2014-09-09 2014-11-19
5.4
None Local Network Medium Not required Partial Partial Partial
The AVON Buy & Sell (aka com.AVONBeautyntheRep) application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
718 CVE-2014-5576 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Avira Secure Backup (aka com.avira.avirabackup) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
719 CVE-2014-5574 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Ask.fm - Social Q&A Network (aka com.askfm) application 1.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
720 CVE-2014-5573 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Appstros - FREE Gift Cards! (aka com.appstros.main) application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
721 CVE-2014-5572 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Jazzpodium De Tor (aka com.appmakr.app273713) application 206160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
722 CVE-2014-5571 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Appeak Poker (aka com.appeak.poker) application 2.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
723 CVE-2014-5570 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The DailyFinance - Stocks & News (aka com.aol.mobile.dailyFinance) application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
724 CVE-2014-5569 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Star Girl (aka com.animoca.google.starGirl) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
725 CVE-2014-5568 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Las Vegas Lottery Scratch Off (aka com.androkera.lottery) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
726 CVE-2014-5567 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The hasb_e_haal (aka com.anawaz.hasb_e_haal) application 1.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
727 CVE-2014-5566 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Selfshot - Front Flash Camera (aka com.americos.selfshot) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
728 CVE-2014-5565 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The GadgetTrak Mobile Security (aka com.activetrak.android.app) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
729 CVE-2014-5564 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Angry Gran Toss (aka com.aceviral.angrygrantoss) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
730 CVE-2014-5563 310 +Info 2014-09-09 2014-11-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Show do Milhao 2014 (aka br.com.lgrmobile.sdm) application 1.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
731 CVE-2014-5562 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Coles Credit Card App (aka au.com.colesfinancialservices.mobile) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
732 CVE-2014-5561 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Word Search Free (aka air.wordSearchFree) application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
733 CVE-2014-5560 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Popscene (Music Industry Sim) (aka air.Popscene) application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
734 CVE-2014-5559 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Kids GoldFish Care (aka air.josiane.sauveterre.kidsgoldfishcare) application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
735 CVE-2014-5558 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Hard Time (Prison Sim) (aka air.HardTime) application 1.111 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
736 CVE-2014-5557 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The America's Economy for Phone (aka air.gov.census.mobile.phone.americaseconomy) application 1.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
737 CVE-2014-5556 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Fly Fishing & Fly Tying (aka air.com.yudu.ReaderAIR3209899) application 3.21.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
738 CVE-2014-5555 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Counting & Addition Kids Games (aka air.com.tribalnova.ilearnwith.ipad.PokoAddEn) application 1.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
739 CVE-2014-5554 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Fun Preschool Creativity Game (aka air.com.tribalnova.ilearnwith.ipad.MotherAppEn) application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
740 CVE-2014-5553 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Kids Preschool Learning Games (aka air.com.tribalnova.ilearnwith.ipad.App3En) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
741 CVE-2014-5552 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Numbers & Addition! Math games (aka air.com.tribalnova.ilearnwith.ipad.App2En) application 1.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
742 CVE-2014-5551 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Alphabet & Spelling Kids Games (aka air.com.tribalnova.ilearnwith.ipad.App1En) application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
743 CVE-2014-5550 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Animals! Kids Preschool Games (aka air.com.tribalnova.Animals) application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
744 CVE-2014-5549 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Puppy Slots (aka air.com.starluxstudios.PuppySlotsFree) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
745 CVE-2014-5548 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Christmas Words (aka air.com.sevenBulls.summerWords) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
746 CVE-2014-5547 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Mahjong Galaxy Space Lite (aka air.com.permadi.mahjongIris) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
747 CVE-2014-5546 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Africa Memory (aka air.com.klon4enabor4e.AfricaMemory) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
748 CVE-2014-5545 310 +Info 2014-09-09 2014-11-06
5.4
None Local Network Medium Not required Partial Partial Partial
The Sprint jump (aka air.com.ilaz.appilas) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
749 CVE-2014-5544 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The SongPop (aka air.com.freshplanet.games.WaM) application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
750 CVE-2014-5543 310 +Info 2014-09-09 2014-09-09
5.4
None Local Network Medium Not required Partial Partial Partial
The Hidden Object - Alice Free (aka air.com.differencegames.hovisionsofalicefree) application 1.0.17 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Total number of vulnerabilities : 1150   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 (This Page)16 17 18 19 20 21 22 23
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.