https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-7606.htmlhttps://patchthecve.com/cve/CVE-2014-7606.htmlWed, 17 Jun 2026 00:15:26 +0000MEDIUM 5.4: The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.https://patchthecve.com/cve/CVE-2014-7358.htmlhttps://patchthecve.com/cve/CVE-2014-7358.htmlWed, 17 Jun 2026 00:14:47 +0000MEDIUM 5.4: The Vermont Powder (aka com.concursive.vermontpowder) application 4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.https://patchthecve.com/cve/CVE-2014-6874.htmlhttps://patchthecve.com/cve/CVE-2014-6874.htmlWed, 17 Jun 2026 00:13:59 +0000MEDIUM 5.4: The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.