Skip to content
OpenAdvisories

Archive

22 September 2014

Vulnerabilities first published on this day (UTC), newest first.

← August 2014 2014 / September /22 October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

62 results · Feed

  • Unscored —
    CVE-2012-5700 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2014-0484

    The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the …

    acpi-support Debian
  • Unscored —
    CVE-2014-3637

    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that h…

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-3635

    Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and…

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-3639

    The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows loc…

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-3595

    Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (…

  • Unscored —
    CVE-2014-3638

    The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local …

    dbus dbus Debian Ubuntu
  • Unscored —
    CVE-2014-7153 Public exploit

    SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1…

  • Unscored —
    CVE-2014-6007

    The LikeHero Get Instagram Likes (aka com.fraoula.likehero) application 1.0.7 for Android does not verify X.509 certifi…

  • Unscored —
    CVE-2014-6002

    The DTE Energy (aka com.dteenergy.mydte) application 3.0.3 for Android does not verify X.509 certificates from SSL serv…

  • Unscored —
    CVE-2014-6638

    The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates from SSL servers, whic…

  • Unscored —
    CVE-2014-6642

    The Mark's Daily Apple Forum (aka com.tapatalk.marksdailyapplecomforum) application 2.4.9.3 for Android does not verify…

  • Unscored —
    CVE-2014-6011

    The cutprice (aka kr.co.wedoit.cutprice) application 1.0.4 for Android does not verify X.509 certificates from SSL serv…

  • Unscored —
    CVE-2014-6006

    The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does not verify X.509 ce…

  • Unscored —
    CVE-2014-6000

    The FreshDirect (aka com.freshdirect.android) application 2.7.1 for Android does not verify X.509 certificates from SSL…

  • Unscored —
    CVE-2014-6004

    The Pocket Cam Photo Editor (aka mobi.pocketcam.editor) application 3 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-6641

    The Homesteading Today (aka com.tapatalk.homesteadingtodaycom) application 3.7.14 for Android does not verify X.509 cer…

  • Unscored —
    CVE-2014-6018

    The global beauty research (aka com.appems.topgirl) application 1.6 for Android does not verify X.509 certificates from…

  • Unscored —
    CVE-2014-6010

    The Rasta Weed Widgets HD (aka aw.awesomewidgets.rastaweed) application 4 for Android does not verify X.509 certificate…

  • Unscored —
    CVE-2014-6639

    The TIO MobilePay - Bill Payments (aka com.tionetworks.mobile.android.tioclient) application 1.1.1 for Android does not…

  • Unscored —
    CVE-2014-6022

    The Versent Books (aka com.versentbooks) application 1.1.99 for Android does not verify X.509 certificates from SSL ser…

  • Unscored —
    CVE-2014-6012

    The Gravity Bounce (aka net.toddm.gb) application 1.1 for Android does not verify X.509 certificates from SSL servers, …

  • Unscored —
    CVE-2014-6023

    The s-peek credit rating report (aka com.rhomobile.speek) application 2.1.3 for Android does not verify X.509 certifica…

  • Unscored —
    CVE-2014-6643

    The FIAT Forum (aka com.tapatalk.fiatforumcom) application 3.8.41 for Android does not verify X.509 certificates from S…

  • Unscored —
    CVE-2014-6645

    The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attac…

  • Unscored —
    CVE-2014-6020

    The Fuel Rewards Network (aka com.excentus.frn) application 1 for Android does not verify X.509 certificates from SSL s…

  • Unscored —
    CVE-2014-6637

    The Facebook Facts (aka com.wFacebookFacts) application 0.1 for Android does not verify X.509 certificates from SSL ser…

  • Unscored —
    CVE-2014-6001

    The gewara (aka com.gewara) application 5.2.3 for Android does not verify X.509 certificates from SSL servers, which al…

  • Unscored —
    CVE-2014-6015

    The TuCarro (aka com.tucarro) application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which …

  • Unscored —
    CVE-2014-6016

    The Celluloid (aka com.eurisko.celluloid) application 1.3 for Android does not verify X.509 certificates from SSL serve…

  • Unscored —
    CVE-2014-6640

    The DNB Trade (aka lt.dnb.mobiletrade) application 1 for Android does not verify X.509 certificates from SSL servers, w…

  • Unscored —
    CVE-2014-6019

    The psychology (aka com.alek.psychology) application 1.0.2 for Android does not verify X.509 certificates from SSL serv…

  • Unscored —
    CVE-2014-6003

    The Belas Frases de Amor (aka com.goodbarber.frasesdeamor) application 1 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6014

    The Conquest Of Fantasia (aka air.com.ingen.studios.cof.sg) application 1.0.1 for Android does not verify X.509 certifi…

  • Unscored —
    CVE-2014-6008

    The Blitz Bingo (aka com.appMobi.sbbingo.app) application 2.3 for Android does not verify X.509 certificates from SSL s…

  • Unscored —
    CVE-2014-6017

    The Doodle Drop (aka net.lazyer.DoodleDrop) application 1 for Android does not verify X.509 certificates from SSL serve…

  • Unscored —
    CVE-2014-6009

    The Zombie Detector (aka com.jimmybolstad.zombiedetector) application 1.2 for Android does not verify X.509 certificate…

  • Unscored —
    CVE-2014-6636

    The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-6005

    The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 certificates from S…

  • Unscored —
    CVE-2014-6021

    The Harley-Davidson Visa (aka com.usbank.icsmobile.harleydavidson) application 1.18 for Android does not verify X.509 c…