CVE-2014-6750

The $0.99 Kindle Books (aka com.kindle.books.for99) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-310

• http://www.kb.cert.org/vuls/id/483233US Government Resource
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharingUS Government Resource
• http://www.kb.cert.org/vuls/id/483233US Government Resource
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharingUS Government Resource

Published

Sep 28, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-6744The Al-Ahsa News (aka com.alahsa.news) application 2.0 for A…
• CVE-2014-6745The Family Location (aka com.sosocome.family) application 3.…
• CVE-2014-6746The Infiniti Roadside Assistance (aka com.ccas.rsa.common.in…
• CVE-2014-6747The SeeOn (aka com.seeon) application 4.0.7 for Android does…
• CVE-2014-6748The GEMAIRE's HVAC Assist (aka com.es.Gemaire) application 5…
• CVE-2014-6749The American Nurses Association (aka com.dub.poweredbydub.as…
• CVE-2014-6751The Grasshopper Beta (aka com.grasshopper.dialer) applicatio…
• CVE-2014-6752The Mindless Behavior Fan Base (aka com.mindless.behavior.fa…
• CVE-2014-6753The sunnat e rasool (aka com.imsoft.sunnat_e_rasool) applica…
• CVE-2014-6754The Vector Outage Manager (aka nz.co.vector.outagemanager) a…
• CVE-2014-6755The SDN Forum (TapaTalk) (aka com.tapatalk.forumshiftdeleten…
• CVE-2014-6756The Reddit Aww (aka org.biais.redditawww) application 1.2.1 …