CVE-2014-7802

The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2) application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-310

• http://www.kb.cert.org/vuls/id/582497US Government Resource
• http://www.kb.cert.org/vuls/id/851953US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• http://www.kb.cert.org/vuls/id/851953US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing

Published

Oct 21, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7796The House365 Radio (aka com.nobexinc.wls_27853803.rc) applic…
• CVE-2014-7797The Thai food (aka com.foods.thaifood) application 1.0 for A…
• CVE-2014-7798The Coca-Cola FM Brasil (aka com.enyetech.radio.coca_cola.fm…
• CVE-2014-7799The Squishy birds (aka com.tatmob.squishybirds) application …
• CVE-2014-7800The Daily Green (aka it.opentt.blog.dailygreen) application …
• CVE-2014-7801Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7803The Woodward Bail (aka com.onesolutionapps.woodwardbailandro…
• CVE-2014-7804The Gangsta Auto Thief III (aka com.apptreestudios.gdup3) ap…
• CVE-2014-7805Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7806Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7807Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 …
• CVE-2014-7808Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x befo…7.5