CVE-2014-8538

The Hijab Modern (aka com.Aisyaidea.HijabModern) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-310

• http://www.kb.cert.org/vuls/id/200313
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharingUS Government Resource
• http://www.kb.cert.org/vuls/id/200313
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharingUS Government Resource

Published

Oct 29, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8532Unspecified vulnerability in McAfee Network Data Loss Preven…
• CVE-2014-8533McAfee Network Data Loss Prevention (NDLP) before 9.3 allows…
• CVE-2014-8534Unspecified vulnerability in the login form in McAfee Networ…
• CVE-2014-8535McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allo…
• CVE-2014-8536McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allo…
• CVE-2014-8537McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allo…
• CVE-2014-8539Cross-site scripting (XSS) vulnerability in Simple Email For…
• CVE-2014-8540The groups API in GitLab 6.x and 7.x before 7.4.3 allows rem…
• CVE-2014-8541libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only …
• CVE-2014-8542libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain co…
• CVE-2014-8543libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not conside…
• CVE-2014-8544libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly v…