Vulnerabilities > Magzter > Medium

DATE CVE VULNERABILITY TITLE RISK
2014-10-19 CVE-2014-7099 Cryptographic Issues vulnerability in Magzter Woodcraft Magazine 3
The Woodcraft Magazine (aka com.magzter.woodcraftmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
5.4
2014-10-19 CVE-2014-7076 Cryptographic Issues vulnerability in Magzter Sanctuary Asia 3
The Sanctuary Asia (aka com.magzter.sanctuaryasia) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
5.4
2014-10-19 CVE-2014-7071 Cryptographic Issues vulnerability in Magzter Autocar India 3.03
The Autocar India (aka com.magzter.autocarindia) application 3.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
5.4
2014-10-19 CVE-2014-7066 Cryptographic Issues vulnerability in Magzter Legalera 3
The LegalEra (aka com.magzter.legalera) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
5.4
2014-10-19 CVE-2014-7057 Cryptographic Issues vulnerability in Magzter Hong Kong Tatler Society 3
The Hong Kong Tatler Society (aka com.magzter.hongkongtatlersociety) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
5.4
2014-09-09 CVE-2014-5602 Cryptographic Issues vulnerability in Magzter -Magazine & Book Store 3.31
The Magzter -Magazine & Book Store (aka com.dci.magzter) application 3.31 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
5.4