Skip to content
OpenAdvisories

Archive

26 September 2014

Vulnerabilities first published on this day (UTC), newest first.

← August 2014 2014 / September /26 October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2014-7152

    Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remo…

  • Unscored —
    CVE-2014-4958

    Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20…

  • Unscored —
    CVE-2014-6446 Public exploit EPSS 46%

    The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allow…

  • Unscored —
    CVE-2014-6445

    Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 t…

  • Unscored —
    CVE-2014-6728

    The ThinkPal (aka com.mythinkpalapp) application 1.6.3 for Android does not verify X.509 certificates from SSL servers,…

  • Unscored —
    CVE-2014-6733

    The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-6725

    The SchoolXM (aka apprentice.schoolxm) application 1.2 for Android does not verify X.509 certificates from SSL servers,…

  • Unscored —
    CVE-2014-6729

    The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.509 certificates from…

  • Unscored —
    CVE-2014-6727

    The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6726

    The 30A (aka com.app30a) application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allo…

  • Unscored —
    CVE-2014-6720

    The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6722

    The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6724

    The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6730

    The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X.509 certificates f…

  • Unscored —
    CVE-2014-6723

    The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-6719

    The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6732

    The Westpac Mobile Banking (aka org.westpac.bank) application 5.21 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-6721 Public exploit

    The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL…

  • Unscored —
    CVE-2014-6731

    The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-5315

    Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and e…

  • Unscored —
    CVE-2014-5318

    The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via craf…

  • Unscored —
    CVE-2014-5319

    Directory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for Android allows remote a…

  • Unscored —
    CVE-2014-5324

    Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authe…