# CVEs published 2014-10-19

244 CVEs were published on October 19, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-7052](https://cve.now/CVE-2014-7052.md): The sahab-alkher.com (aka com.tapatalk.sahabalkhercomvb) application 2.4.9.7 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7056](https://cve.now/CVE-2014-7056.md): The Yeast Infection (aka com.wyeastinfectionapp) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7070](https://cve.now/CVE-2014-7070.md): The Air War Hero (aka com.dev.airwar) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7075](https://cve.now/CVE-2014-7075.md): The HAPPY (aka com.tw.knowhowdesign.sinfonghuei) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7079](https://cve.now/CVE-2014-7079.md): The Romeo and Juliet (aka jp.co.cybird.appli.android.rjs) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7080](https://cve.now/CVE-2014-7080.md): The Sigong ebook (aka com.sigongsa.sigonggenre) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7083](https://cve.now/CVE-2014-7083.md): The Jiu Jik (aka com.scmp.jiujik) application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7084](https://cve.now/CVE-2014-7084.md): The Hesheng 80 (aka com.ireadercity.c29) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7100](https://cve.now/CVE-2014-7100.md): The www.sm3ny.com (aka sm3ny.com) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-m (no CVSS)
- [CVE-2014-7108](https://cve.now/CVE-2014-7108.md): The Stop Headaches and Migraines (aka com.StopHeadachesandMigraines) application 1.2 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7109](https://cve.now/CVE-2014-7109.md): The Nesvarnik (aka cz.dtest.nesvarnik) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7111](https://cve.now/CVE-2014-7111.md): The Android Excellence (aka an.exc.ap) application 1.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7113](https://cve.now/CVE-2014-7113.md): The NASA Universe Wallpapers Xeus (aka com.xeusNASA) application 1.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7115](https://cve.now/CVE-2014-7115.md): The Letters to God - soc. (no CVSS)
- [CVE-2014-7116](https://cve.now/CVE-2014-7116.md): The NRA Journal (aka com.magazinecloner.nationalrifleassociationjournal) application @7F080181 for Android does not verify X.509 certificate (no CVSS)
- [CVE-2014-7117](https://cve.now/CVE-2014-7117.md): The Forest Area FCU Mobile (aka com.metova.cuae.fafcu) application 1.0.29 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7118](https://cve.now/CVE-2014-7118.md): The Itography Item Hunt (aka com.itography.application) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7119](https://cve.now/CVE-2014-7119.md): The GNAM 2013 (aka com.beepeers.gndam) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7120](https://cve.now/CVE-2014-7120.md): The Model Laboratory (aka com.magazinecloner.modellaboratory) application @7F080193 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7121](https://cve.now/CVE-2014-7121.md): The Dhanam (aka com.magzter.dhanam) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7122](https://cve.now/CVE-2014-7122.md): The Lansing State Journal Print (aka com.lansingjournal.android.prod) application 6.7 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7123](https://cve.now/CVE-2014-7123.md): The Brevir Harian V2 (aka com.brevir.harian.v) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7124](https://cve.now/CVE-2014-7124.md): The IP Alarm (aka com.cosesy.gadget.alarm) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7125](https://cve.now/CVE-2014-7125.md): The Motor (aka com.magzter.motorhwpublishing) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7127](https://cve.now/CVE-2014-7127.md): The Football Espana magazine (aka com.triactivemedia.footballespana) application @7F0801AA for Android does not verify X.509 certificates fr (no CVSS)
- [CVE-2014-7128](https://cve.now/CVE-2014-7128.md): The Toyota OC (aka com.tapatalk.toyotaownersclubcomforums) application 3.6.1 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7129](https://cve.now/CVE-2014-7129.md): The Argus Leader Print Edition (aka com.argusleader.android.prod) application 6.7 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7131](https://cve.now/CVE-2014-7131.md): The Digital Content NewFronts 2014 (aka com.coreapps.android.followme.newfronts2014) application 6.0.7.6 for Android does not verify X.509 c (no CVSS)
- [CVE-2014-7132](https://cve.now/CVE-2014-7132.md): The Jambatan PBB Semporna (aka com.wJAMBATANPBBSEMPORNA) application 13523.82613 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7134](https://cve.now/CVE-2014-7134.md): The PROF. (no CVSS)
- [CVE-2014-7135](https://cve.now/CVE-2014-7135.md): The Ayuntamiento de Coana (aka com.wInfoCoa) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7307](https://cve.now/CVE-2014-7307.md): The ForoSocuellamos (aka com.forosocuellamos.tlcttbeukajwpeqreg) application 1.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7309](https://cve.now/CVE-2014-7309.md): The Where2Stop-Cardlocks-Free (aka appinventor.ai\_kidatheart99.Where2Stop\_Cardlocks) application 6.1 for Android does not verify X.509 certi (no CVSS)
- [CVE-2014-7310](https://cve.now/CVE-2014-7310.md): The Ali Visual (aka com.ali.visual) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7313](https://cve.now/CVE-2014-7313.md): The One You Fitness (aka com.app\_oneyou.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7314](https://cve.now/CVE-2014-7314.md): The Intelligent SME (aka com.magzter.intelligentsme) application 3.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7315](https://cve.now/CVE-2014-7315.md): The Where Atlanta (aka com.magzter.whereatlanta) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7316](https://cve.now/CVE-2014-7316.md): The Safe Arrival (aka com.synrevoice.safearrival) application 1.2 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7317](https://cve.now/CVE-2014-7317.md): The Aloha Bail Bonds (aka com.onesolutionapps.alohabailbondsandroid) application 1.1 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7320](https://cve.now/CVE-2014-7320.md): The SHIRAKABA (aka com.SHIRAKABA) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-m (no CVSS)
- [CVE-2014-7321](https://cve.now/CVE-2014-7321.md): The Firenze map (aka com.wFirenzemap) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7323](https://cve.now/CVE-2014-7323.md): The Dignity Dialogue (aka com.magzter.dignitydialogue) application 3.0 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7325](https://cve.now/CVE-2014-7325.md): The Business Intelligence (aka com.magzter.businessintelligence) application 3.0 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7326](https://cve.now/CVE-2014-7326.md): The ETA Mobile (aka com.en2grate.etamobile) application 1.6.6 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7327](https://cve.now/CVE-2014-7327.md): The Macau Business (aka com.magzter.macaubusiness) application 3.0 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7328](https://cve.now/CVE-2014-7328.md): The brain abundance info (aka com.wbrainabundance) application 0.1 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7329](https://cve.now/CVE-2014-7329.md): The Motoring Classics (aka com.aptusi.android.motoring) application 1.8.6 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7330](https://cve.now/CVE-2014-7330.md): The XtendCU Mobile (aka com.metova.cuae.xtend) application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7331](https://cve.now/CVE-2014-7331.md): The TodaysSeniorsNetwork (aka com.wTodaysSeniorsNetwork) application 0.21.13245.84038 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7333](https://cve.now/CVE-2014-7333.md): The Aloha Guide (aka com.aloha.guide.japnese) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7334](https://cve.now/CVE-2014-7334.md): The Where Dallas (aka com.magzter.wheredallas) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7335](https://cve.now/CVE-2014-7335.md): The Liver Health - Hepatitis C (aka gov.nyc.dohmh.HepC) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7336](https://cve.now/CVE-2014-7336.md): The Taking Your Company Public (aka biz.app4mobile.app\_016e43d03ee54d1facd6c9532a00e724.app) application 1.28.44.441 for Android does not ve (no CVSS)
- [CVE-2014-7337](https://cve.now/CVE-2014-7337.md): The Acorn Estate Agents (aka com.acorn.ea) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7338](https://cve.now/CVE-2014-7338.md): The faailkhair (aka com.faailkhair.app) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7339](https://cve.now/CVE-2014-7339.md): The Cuanto Conoces A un Amigo (aka com.makeitpossible.CuantoConocesAunAmigo) application 2.0 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7340](https://cve.now/CVE-2014-7340.md): The Old Bike Mart (aka com.magazinecloner.oldbike) application @7F08017E for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7341](https://cve.now/CVE-2014-7341.md): The SAsync (aka com.sasync.sasyncmap) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7342](https://cve.now/CVE-2014-7342.md): The Echo News (aka com.solo.report) 1.10 application (beta) for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7344](https://cve.now/CVE-2014-7344.md): The Classic Arms & Militaria (aka com.magazinecloner.classicarmsandm) application @7F080193 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7345](https://cve.now/CVE-2014-7345.md): The DIYChatroom (aka com.tapatalk.diychatroomcom) application 3.4.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7346](https://cve.now/CVE-2014-7346.md): The Bespoke (aka com.magzter.bespoke) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7348](https://cve.now/CVE-2014-7348.md): The HOT CARS (aka com.magzter.hotcars) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7351](https://cve.now/CVE-2014-7351.md): The GLOBAL MOVIE MAGAZINE (aka com.magzter.globalmoviemagazine) application 3.0 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7352](https://cve.now/CVE-2014-7352.md): The India's Anthem (aka appinventor.ai\_opalfoxy83.India\_Anthem) application 1.0 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7353](https://cve.now/CVE-2014-7353.md): The JAZAN 24 (aka com.jazan24.Mcreda) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7354](https://cve.now/CVE-2014-7354.md): The Penumbra eMag (aka com.magzter.penumbraemag) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7357](https://cve.now/CVE-2014-7357.md): The Grandparenting is Great (aka com.app\_gig.layout) application 1.400 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7358](https://cve.now/CVE-2014-7358.md): The Vermont Powder (aka com.concursive.vermontpowder) application 4.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7359](https://cve.now/CVE-2014-7359.md): The MAPA DA MINA (aka com.wMAPADAMINA) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7360](https://cve.now/CVE-2014-7360.md): The How To Boil Eggs (aka com.appmakr.app842173) application 251333 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7361](https://cve.now/CVE-2014-7361.md): The Harry's Pub (aka com.emunching.harryspub) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7362](https://cve.now/CVE-2014-7362.md): The Naranjas Con Tocados (aka com.NaranjasConTocados.com) application 0.1 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7364](https://cve.now/CVE-2014-7364.md): The Promotional Items (aka com.wPromotionalItems) application 0.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7366](https://cve.now/CVE-2014-7366.md): The Identity (aka com.magzter.identity) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7367](https://cve.now/CVE-2014-7367.md): The TuS 1947 Radis (aka com.tus1947radis) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7368](https://cve.now/CVE-2014-7368.md): The Compassion Satisfaction (aka com.wCompassionSatisfactionWorkshopPresentation) application 0.75.13440.35155 for Android does not verify X (no CVSS)
- [CVE-2014-7369](https://cve.now/CVE-2014-7369.md): The Il Brillo Parlante (aka com.wIlBrilloParlante) application 0.1 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7370](https://cve.now/CVE-2014-7370.md): The Job MoBleeps (aka com.wJobMoBleeps) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7371](https://cve.now/CVE-2014-7371.md): The Magic Balloonman Marty Boone (aka com.app\_martyboone.layout) application 1.400 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7372](https://cve.now/CVE-2014-7372.md): The Mr.Sausage (aka com.app\_mrsausage.layout) application 1.301 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7373](https://cve.now/CVE-2014-7373.md): The Inspire Weddings (aka com.magzter.inspireweddings) application 3.0 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7374](https://cve.now/CVE-2014-7374.md): The SPIN - Motion Comic (aka me.narr8.android.serial.spin) application 2.1.7 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7375](https://cve.now/CVE-2014-7375.md): The Childcare (aka com.app\_macchildcare.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7376](https://cve.now/CVE-2014-7376.md): The Facebook Profits on Steroids (aka com.wFacebookProfitsonSteroids) application 0.1 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7378](https://cve.now/CVE-2014-7378.md): The Jobranco (aka com.jobranco) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid (no CVSS)
- [CVE-2014-7379](https://cve.now/CVE-2014-7379.md): The Kiddie Kinderschoenen (aka nl.eigenwinkelapp.kiddiekinderschoenen) application 1.0 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7380](https://cve.now/CVE-2014-7380.md): The Cedar Kiosk (aka com.apps2you.cedarkiosk) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7382](https://cve.now/CVE-2014-7382.md): The Alternative Connection (aka com.wAlternativeConnection) application 0.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7384](https://cve.now/CVE-2014-7384.md): The Joe's Lawn Service (aka com.appexpress.joeslawnservice) application 1.5 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7385](https://cve.now/CVE-2014-7385.md): The Aperture Mobile Media (aka com.app\_aperturemobilemedia.layout) application 1.404 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7387](https://cve.now/CVE-2014-7387.md): The ACC Advocacy Action (aka com.acc.app.android.ui) application 2.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7388](https://cve.now/CVE-2014-7388.md): The Sunday Indian Oriya (aka com.magzter.thesundayindianoriya) application 3.0.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7389](https://cve.now/CVE-2014-7389.md): The Amnesia Groove (aka com.nobexinc.wls\_88552576.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7390](https://cve.now/CVE-2014-7390.md): The Enchanted Fashion Crush (aka com.tabtale.springcrushbundleint) application 1.0.0 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7391](https://cve.now/CVE-2014-7391.md): The Synx addictive puzzle game (aka us.synx.mobile.play) application 1.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7392](https://cve.now/CVE-2014-7392.md): The Russian Federation Traffic Rules (aka com.russia.pdd) application 1.21 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7393](https://cve.now/CVE-2014-7393.md): The 100 Beauty Tips (aka com.ww100BeautyTipsApp) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7394](https://cve.now/CVE-2014-7394.md): The www.alaaliwat.com (aka com.alaliwat.marsa) application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7395](https://cve.now/CVE-2014-7395.md): The USF BCM (aka com.appmakr.app193115) application 252847 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7396](https://cve.now/CVE-2014-7396.md): The PocketKnife Bravo Super (aka com.wPocketKnifeBravo) application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7397](https://cve.now/CVE-2014-7397.md): The ileri Gazetesi - Yozgat (aka com.byfes.ilerigazetesi) application 1.0 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7398](https://cve.now/CVE-2014-7398.md): The Dil Bilgisi Kurallari (aka com.buronya.dilbilgisi) application 1.0 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7399](https://cve.now/CVE-2014-7399.md): The Suzanne Glathar (aka com.app\_sglathar.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7402](https://cve.now/CVE-2014-7402.md): The SK encar (aka com.encardirect.app) application @7F050000 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7403](https://cve.now/CVE-2014-7403.md): The NZHondas.com (aka com.tapatalk.nzhondascom) application 3.6.14 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7405](https://cve.now/CVE-2014-7405.md): The Belaire Family Orthodontics (aka com.app\_bf.layout) application 1.304 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7406](https://cve.now/CVE-2014-7406.md): The Deakin University (aka com.desire2learn.campuslife.deakin.edu.au.directory) application 1.1.729.1694 for Android does not verify X.509 c (no CVSS)
- [CVE-2014-7407](https://cve.now/CVE-2014-7407.md): The Game Day Tix (aka com.xcr.android.mygamedaytickets) application 2.4 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7408](https://cve.now/CVE-2014-7408.md): The Gary Johnson for President '12 (aka com.GaryJohnson2012) application 0.75.13439.53899 for Android does not verify X.509 certificates fro (no CVSS)
- [CVE-2014-7409](https://cve.now/CVE-2014-7409.md): The Liburan Hemat (aka com.liburan.bro) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7410](https://cve.now/CVE-2014-7410.md): The Aptallik Testi (aka com.wAptallikTesti) application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7413](https://cve.now/CVE-2014-7413.md): The Rajendra Suriji (aka com.rajendrasuriji.nakodabhairav.com) application 1.1 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-7414](https://cve.now/CVE-2014-7414.md): The CLEO Malaysia (aka com.magzter.cleomalaysia) application 3.01 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7415](https://cve.now/CVE-2014-7415.md): The Asylum! (aka com.nobexinc.wls\_96362255.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7416](https://cve.now/CVE-2014-7416.md): The Craft Stamper Magazine (aka com.triactivemedia.craftstamper) application @7F080183 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7417](https://cve.now/CVE-2014-7417.md): The Real Academia de Bellas Artes (aka com.adianteventures.adianteapps.real\_academia\_de\_bellas\_artes) application 1.0 for Android does not v (no CVSS)
- [CVE-2014-7418](https://cve.now/CVE-2014-7418.md): The BBC Knowledge Magazine (aka com.magzter.bbcknowledge) application 3.01 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7419](https://cve.now/CVE-2014-7419.md): The PokeCreator Lite (aka com.pokecreator.builderlite) application 1.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7420](https://cve.now/CVE-2014-7420.md): The Just Bureaucracy (aka com.magzter.justbureaucracy) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7421](https://cve.now/CVE-2014-7421.md): The Revel in the Rideau Lakes (aka com.mytoursapp.android.app326) application 1.0.6 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7422](https://cve.now/CVE-2014-7422.md): The HEA Mobile (aka com.homerelectric.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7423](https://cve.now/CVE-2014-7423.md): The Youth Incorporated (aka com.magzter.youthincorporated) application 3.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7424](https://cve.now/CVE-2014-7424.md): The Quran Abu Bakr AshShatiri Free (aka com.wQuranAbuBakrFREE) application 1.0 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-7425](https://cve.now/CVE-2014-7425.md): The Doodle Devil Free (aka com.joybits.doodledevil\_free) application 2.1.4 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7427](https://cve.now/CVE-2014-7427.md): The Hunting Trophy Whitetails (aka com.wHuntingTrophyWhitetails) application 0.75.13441.88885 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7428](https://cve.now/CVE-2014-7428.md): The 7725.com Three Kingdoms (aka com.platform7725.youai.jiejian) application 2.4 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7430](https://cve.now/CVE-2014-7430.md): The Flood-It (aka com.appspot.eoltek.flood) application 4.2 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7431](https://cve.now/CVE-2014-7431.md): The Breeze Jersey (aka com.sc.breezeje.banking) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7432](https://cve.now/CVE-2014-7432.md): The CalculatorApp (aka com.intuit.alm.testandroidapp) application 4.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7433](https://cve.now/CVE-2014-7433.md): The Student ID (aka com.computas.studentbevis) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7434](https://cve.now/CVE-2014-7434.md): The RTSinfo (aka ch.rts.rtsinfo) application 1.4.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the- (no CVSS)
- [CVE-2014-7435](https://cve.now/CVE-2014-7435.md): The AJD Bail Bonds (aka com.onesolutionapps.ajdbailbondsandroid) application 1.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7436](https://cve.now/CVE-2014-7436.md): The SOS recette (aka com.sos.recette) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7437](https://cve.now/CVE-2014-7437.md): The Love Horoscope Guide (aka com.charl.charlylovehoroscopes) application 1.0 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7439](https://cve.now/CVE-2014-7439.md): The bene+ odmeny a slevy (aka cz.gemoney.bene.android) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7441](https://cve.now/CVE-2014-7441.md): The Pakan Ken Tube (aka com.PakanKen) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7443](https://cve.now/CVE-2014-7443.md): The Face Fun Photo Collage Maker 2 (aka com.kauf.facefunphotocollagemaker2) application 1.3.0 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7444](https://cve.now/CVE-2014-7444.md): The Baidu Navigation (aka com.baidu.navi) application 3.5.0 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7445](https://cve.now/CVE-2014-7445.md): The LEGEND OF TRANCE (aka com.legendoftrance) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7446](https://cve.now/CVE-2014-7446.md): The Bilingual Magic Ball (aka com.wBilingualMagicBall) application 0.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7447](https://cve.now/CVE-2014-7447.md): The Dattch - The Lesbian App (aka com.dattch.dattch.app) application 0.30 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7448](https://cve.now/CVE-2014-7448.md): The DealSide Institutional (aka com.magzter.dealsideinstitutional) application 3.1 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7449](https://cve.now/CVE-2014-7449.md): The My NGEMC Account (aka com.ngemc.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7450](https://cve.now/CVE-2014-7450.md): The allnurses (aka com.tapatalk.allnursescom) application 3.4.10 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7452](https://cve.now/CVE-2014-7452.md): The Shaklee Product Catalog (aka com.wProductCatalog) application 2.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7454](https://cve.now/CVE-2014-7454.md): The Detox Juicing Diet Recipes (aka com.wDetoxJuicingDietRecipes) application 1.1 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7455](https://cve.now/CVE-2014-7455.md): The Zoella Unofficial (aka com.automon.ay.zoella) application 1.4.0.5 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7456](https://cve.now/CVE-2014-7456.md): The Digit Magazine (aka com.magzter.digitmagazine) application 3.01 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7457](https://cve.now/CVE-2014-7457.md): The Electronics For You (aka com.magzter.electronicsforyou) application 3.02 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7458](https://cve.now/CVE-2014-7458.md): The BloomYou Valentine (aka com.bloomyouteam.bloomyou.valentine) application 2.4 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7459](https://cve.now/CVE-2014-7459.md): The Press-Leader (aka com.soln.S95309F65AD59F99CFC2C710A517B0B7E) application 1.0011.b0011 for Android does not verify X.509 certificates fr (no CVSS)
- [CVE-2014-7460](https://cve.now/CVE-2014-7460.md): The Slots Heaven:FREE Slot Machine (aka com.twelvegigs.heaven.slots) application 1.123 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7461](https://cve.now/CVE-2014-7461.md): The A King Sperm by Dr. (no CVSS)
- [CVE-2014-7462](https://cve.now/CVE-2014-7462.md): The Fashion Story: Neon 90's (aka com.teamlava.fashionstory39) application 1.5.6.5 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7463](https://cve.now/CVE-2014-7463.md): The IM5 Fans Planet (aka uk.co.pixelkicks.im5) application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7464](https://cve.now/CVE-2014-7464.md): The Magic Stamp (aka vn.avagame.apotatem) application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7465](https://cve.now/CVE-2014-7465.md): The PC Advisor (aka com.triactivemedia.pcadvisor) application @7F08017A for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7466](https://cve.now/CVE-2014-7466.md): The Live TV Browser (aka com.wHDSmartBrowser) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7467](https://cve.now/CVE-2014-7467.md): The HoneyBee Mag (aka com.magzter.honeybeemag) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7468](https://cve.now/CVE-2014-7468.md): The AG Klettern Odenwald (aka de.appack.project.agko) application 1.2 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7469](https://cve.now/CVE-2014-7469.md): The Best Beginning (aka com.bbbeta) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7470](https://cve.now/CVE-2014-7470.md): The I Know the Movie (aka com.guilardi.jesaislefilm2) application jesais\_film\_android\_1.1 for Android does not verify X.509 certificates fro (no CVSS)
- [CVE-2014-7471](https://cve.now/CVE-2014-7471.md): The international-arbitration-attorney.com (aka com.w0f1d79a1010d819acbee876007d0bebc) application 0.1 for Android does not verify X.509 cer (no CVSS)
- [CVE-2014-7472](https://cve.now/CVE-2014-7472.md): The CSApp - Colegio San Agustin (aka com.goodbarber.csapp) application 1.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7475](https://cve.now/CVE-2014-7475.md): The Ionic View (aka com.ionic.viewapp) application 0.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7476](https://cve.now/CVE-2014-7476.md): The Healthy Lunch Diet Recipes (aka com.best.lunchdietrecipes) application 3.6.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7478](https://cve.now/CVE-2014-7478.md): The nashaplaneta.su (aka com.wNashaPlaneta) application 1.02 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7481](https://cve.now/CVE-2014-7481.md): The ETG Hosting (aka com.etg.web.hosting) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7483](https://cve.now/CVE-2014-7483.md): The Desire2Learn FUSION 2014 (aka com.desire2learn.fusion2012) application 4.0.729.1748 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-2358](https://cve.now/CVE-2014-2358.md): Fox-IT DataDiode Appliance CSRF (no CVSS, Fox-IT DataDiode Appliance)
- [CVE-2014-2647](https://cve.now/CVE-2014-2647.md): Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11 (no CVSS)
- [CVE-2014-3021](https://cve.now/CVE-2014-3021.md): IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 does not properly handle HTTP header (no CVSS)
- [CVE-2014-3368](https://cve.now/CVE-2014-3368.md): Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2014-3369](https://cve.now/CVE-2014-3369.md): The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attacke (no CVSS)
- [CVE-2014-3370](https://cve.now/CVE-2014-3370.md): Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2014-3381](https://cve.now/CVE-2014-3381.md): The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archive (no CVSS)
- [CVE-2014-3397](https://cve.now/CVE-2014-3397.md): The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumpti (no CVSS)
- [CVE-2014-3406](https://cve.now/CVE-2014-3406.md): Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to (no CVSS)
- [CVE-2014-3408](https://cve.now/CVE-2014-3408.md): Cross-site scripting (XSS) vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2014-3513](https://cve.now/CVE-2014-3513.md): Memory leak in d1\_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (mem (no CVSS)
- [CVE-2014-3567](https://cve.now/CVE-2014-3567.md): Memory leak in the tls\_decrypt\_ticket function in t1\_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows re (no CVSS)
- [CVE-2014-3568](https://cve.now/CVE-2014-3568.md): OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote (no CVSS)
- [CVE-2014-4822](https://cve.now/CVE-2014-4822.md): IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow loc (no CVSS)
- [CVE-2014-4825](https://cve.now/CVE-2014-4825.md): IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not properly implement secure connections, which allows man-in-the-middle atta (no CVSS)
- [CVE-2014-4827](https://cve.now/CVE-2014-4827.md): Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to inject arbit (no CVSS)
- [CVE-2014-4828](https://cve.now/CVE-2014-4828.md): IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request. (no CVSS)
- [CVE-2014-4830](https://cve.now/CVE-2014-4830.md): IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, w (no CVSS)
- [CVE-2014-4833](https://cve.now/CVE-2014-4833.md): IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote authenticated users to gain privileges via invalid input. (no CVSS)
- [CVE-2014-4836](https://cve.now/CVE-2014-4836.md): Cross-site scripting (XSS) vulnerability in breakOutWithName.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 befor (no CVSS)
- [CVE-2014-4837](https://cve.now/CVE-2014-4837.md): Cross-site scripting (XSS) vulnerability in NewDocument.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3 (no CVSS)
- [CVE-2014-4838](https://cve.now/CVE-2014-4838.md): Cross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3 (no CVSS)
- [CVE-2014-4840](https://cve.now/CVE-2014-4840.md): IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remot (no CVSS)
- [CVE-2014-5330](https://cve.now/CVE-2014-5330.md): Cross-site scripting (XSS) vulnerability in BirdBlog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. (no CVSS)
- [CVE-2014-5331](https://cve.now/CVE-2014-5331.md): Cross-site scripting (XSS) vulnerability in Aflax allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. (no CVSS)
- [CVE-2014-5420](https://cve.now/CVE-2014-5420.md): CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded application password, which makes it easier for rem (no CVSS)
- [CVE-2014-5421](https://cve.now/CVE-2014-5421.md): CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for l (no CVSS)
- [CVE-2014-5422](https://cve.now/CVE-2014-5422.md): CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded service password, which makes it easier for remote (no CVSS)
- [CVE-2014-5423](https://cve.now/CVE-2014-5423.md): CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 allows local users to obtain potentially sensitive information by r (no CVSS)
- [CVE-2014-5425](https://cve.now/CVE-2014-5425.md): IOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds read and master entry consumption) via a nu (no CVSS)
- [CVE-2014-6100](https://cve.now/CVE-2014-6100.md): Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2. (no CVSS)
- [CVE-2014-6116](https://cve.now/CVE-2014-6116.md): The Telemetry Component in WebSphere MQ 8.0.0.1 before p000-001-L140910 allows remote attackers to bypass authentication by setting the JAAS (no CVSS)
- [CVE-2014-7053](https://cve.now/CVE-2014-7053.md): The City Star ME (aka com.citystarme) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7054](https://cve.now/CVE-2014-7054.md): The musica de barrios sonideros (aka com.nobexinc.wls\_93155702.rc) application 3.3.10 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7055](https://cve.now/CVE-2014-7055.md): The NCCI's Annual Issues Symposium (aka com.quickmobile.ais14) application 1.0 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-7057](https://cve.now/CVE-2014-7057.md): The Hong Kong Tatler Society (aka com.magzter.hongkongtatlersociety) application 3.0 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7058](https://cve.now/CVE-2014-7058.md): The Efendimizin Sunnetleri (aka com.wEfendimizinSunnetleri) application 2.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7059](https://cve.now/CVE-2014-7059.md): The TheDevildogGamer (aka com.wTheDevildogGamer) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7060](https://cve.now/CVE-2014-7060.md): The Your Tango (aka com.your.tango) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7061](https://cve.now/CVE-2014-7061.md): The MODSIM World 2014 (aka com.concursive.modsimworld) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7062](https://cve.now/CVE-2014-7062.md): The Association Min Ajlik (aka com.association.min.ajlik) application 1.0 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7063](https://cve.now/CVE-2014-7063.md): The Bikers Romagna (aka com.bikers.romagna) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7064](https://cve.now/CVE-2014-7064.md): The ben10 omniverse walkthrough (aka com.wben10omniverse2walkthrough) application 0.7 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7065](https://cve.now/CVE-2014-7065.md): The Nigerias Business Directory (aka com.wNigeriasBusinessDirectory) application 0.70.13414.17619 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-7066](https://cve.now/CVE-2014-7066.md): The LegalEra (aka com.magzter.legalera) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7067](https://cve.now/CVE-2014-7067.md): The BTD5 Videos (aka com.wxTYILIEIRBTD5Videos) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7068](https://cve.now/CVE-2014-7068.md): The Neumann Student Activities (aka com.appmakr.app153856) application 216607 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7069](https://cve.now/CVE-2014-7069.md): The Aventino Brand (aka com.AventinoBrand) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7071](https://cve.now/CVE-2014-7071.md): The Autocar India (aka com.magzter.autocarindia) application 3.03 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7072](https://cve.now/CVE-2014-7072.md): The Venezia map (aka com.wVeneziamap) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7073](https://cve.now/CVE-2014-7073.md): The Andrew Magdy Kamal's Network (aka com.wAndSocialREWApps) application 0.1 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7076](https://cve.now/CVE-2014-7076.md): The Sanctuary Asia (aka com.magzter.sanctuaryasia) application 3.0 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7077](https://cve.now/CVE-2014-7077.md): The Gulf Coast Educators FCU (aka com.metova.cuae.gcefcu) application 1.0.27 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7078](https://cve.now/CVE-2014-7078.md): The Payoneer Sign Up (aka com.wPayoneerSignUp) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7082](https://cve.now/CVE-2014-7082.md): The No Disturb (aka com.blogspot.imapp.imnodisturb) application 3.3 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7085](https://cve.now/CVE-2014-7085.md): The i Newspaper (aka com.independent.thei) application @7F080184 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7086](https://cve.now/CVE-2014-7086.md): The Killer Screen lock (aka com.cc.theme.shashou) application 0.5 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7087](https://cve.now/CVE-2014-7087.md): The Top Roller Coasters Europe 1 (aka com.appaapps.top10tallesteuropeanrollercoasters1) application @7F050001 for Android does not verify X. (no CVSS)
- [CVE-2014-7088](https://cve.now/CVE-2014-7088.md): The JDM Lifestyle (aka com.hondatech) application 6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7089](https://cve.now/CVE-2014-7089.md): The COMPETITION INFORMATION (aka com.ear.bilgiyarismasi) application 0.1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7090](https://cve.now/CVE-2014-7090.md): The MyVCCCD (aka com.dub.app.ventura) application 1.4.14 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7091](https://cve.now/CVE-2014-7091.md): The Sacramento Kings (aka com.tibco.gse.sports) application 6.0.8 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7092](https://cve.now/CVE-2014-7092.md): The Ubooly (aka com.ubooly.ubooly) application 4.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-7093](https://cve.now/CVE-2014-7093.md): The Superbike Magazine (aka com.triactivemedia.superbike) application @7F08017A for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7098](https://cve.now/CVE-2014-7098.md): The Fylet Secure Large File Sender (aka com.application.fyletFileSender) application 2.0 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7099](https://cve.now/CVE-2014-7099.md): The Woodcraft Magazine (aka com.magzter.woodcraftmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7101](https://cve.now/CVE-2014-7101.md): The Talk Radio Europe (aka com.nobexinc.wls\_31251464.rc) application 3.3.10 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7102](https://cve.now/CVE-2014-7102.md): The Car Insurance Quote Comparison (aka com.seopa.quotezone) application 2.3 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7103](https://cve.now/CVE-2014-7103.md): The Oskarshamnsliv (aka appinventor.ai\_stadslivsguiden.Oskarshamnsliv) application 6.0 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7104](https://cve.now/CVE-2014-7104.md): The gymnoOVP (iOVP) (aka com.johtru.gymnoOVP) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7106](https://cve.now/CVE-2014-7106.md): The Orakel-Ball (aka com.wOrakelball) application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7107](https://cve.now/CVE-2014-7107.md): The Human Factor (aka com.magzter.thehumanfactor) application 3.01 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7191](https://cve.now/CVE-2014-7191.md): The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of (no CVSS, qs)
- [CVE-2014-7874](https://cve.now/CVE-2014-7874.md): Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.