CVE-2014-5881

The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-310

• http://jvn.jp/en/jp/JVN48270605/index.htmlVendor Advisory
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000116.htmlVendor Advisory
• http://www.kb.cert.org/vuls/id/228385Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/582497Third Party Advisory, US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
• http://jvn.jp/en/jp/JVN48270605/index.htmlVendor Advisory
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000116.htmlVendor Advisory
• http://www.kb.cert.org/vuls/id/228385Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/582497Third Party Advisory, US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing

Published

Sep 11, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-5875The Sylphone (aka com.sylpheo.prospectosyl) application 5.3.…
• CVE-2014-5876The WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for An…
• CVE-2014-5877The TV Guide (aka net.micene.minigroup.palimpsests.lite) app…
• CVE-2014-5878The ium (aka net.ium.mobile.android) application 3.3.4 for A…
• CVE-2014-5879The tvguide (aka kenneth.tvguide) application 1.9.14 for And…
• CVE-2014-5880Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-5882The Homoo Ijiri (aka jp.co.applica) application 3.7 for Andr…
• CVE-2014-5883The 7-ELEVEN (aka ecowork.seven) application 2.08.000 for An…
• CVE-2014-5884The 1&1 Online Storage (aka de.einsundeins.smartdrive) appli…
• CVE-2014-5885The Disaster Alert (aka disasterAlert.PDC) application 3.2 f…
• CVE-2014-5886The iVysilani ceske televize (aka cz.motion.ivysilani) appli…
• CVE-2014-5887The Yell Local Search (aka com.yell.launcher2) application 4…