Skip to content
OpenAdvisories

Archive

September 2014

Vulnerabilities first published in this month (UTC), newest first.

← August 2014 2014 / September October 2014 →
  1. 13
  2. 212
  3. 310
  4. 423
  5. 515
  6. 6 
  7. 7 
  8. 85
  9. 9326
  10. 1079
  11. 1145
  12. 1222
  13. 13 
  14. 14 
  15. 1527
  16. 16 
  17. 1732
  18. 1893
  19. 1935
  20. 2041
  21. 21 
  22. 2262
  23. 2359
  24. 2412
  25. 2527
  26. 2623
  27. 2717
  28. 2842
  29. 2953
  30. 3083
All Critical High Medium Low Exploited only Public exploit

1,146 results · Feed

  • Unscored —
    CVE-2014-6733

    The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-6725

    The SchoolXM (aka apprentice.schoolxm) application 1.2 for Android does not verify X.509 certificates from SSL servers,…

  • Unscored —
    CVE-2014-6729

    The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.509 certificates from…

  • Unscored —
    CVE-2014-6727

    The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6726

    The 30A (aka com.app30a) application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allo…

  • Unscored —
    CVE-2014-6720

    The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6722

    The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6724

    The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6730

    The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X.509 certificates f…

  • Unscored —
    CVE-2014-6723

    The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-6719

    The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6732

    The Westpac Mobile Banking (aka org.westpac.bank) application 5.21 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-6721 Public exploit

    The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL…

  • Unscored —
    CVE-2014-6731

    The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-5315

    Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and e…

  • Unscored —
    CVE-2014-5318

    The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via craf…

  • Unscored —
    CVE-2014-5319

    Directory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for Android allows remote a…

  • Unscored —
    CVE-2014-5324

    Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authe…

  • Unscored —
    CVE-2014-1568 EPSS 17%

    Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Moz…

    thunderbird firefox nss nss Debian Ubuntu
  • Unscored —
    CVE-2014-3357

    Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, a…

  • Unscored —
    CVE-2014-3360

    Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6…

  • Unscored —
    CVE-2014-3355

    The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.…

  • Unscored —
    CVE-2014-3359

    Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS,…

  • Unscored —
    CVE-2014-3361

    The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers t…

  • Unscored —
    CVE-2014-3354

    Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before…

  • Unscored —
    CVE-2014-3356

    The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.…

  • Unscored —
    CVE-2014-3358

    Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE b…

  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Unscored —
    CVE-2014-6710

    The Chifro Kids Coloring Game (aka com.chifro.kids_coloring_game) application 1.6 for Android does not verify X.509 cer…

  • Unscored —
    CVE-2014-6718

    The My Mobile Day (aka com.mymobileday) application 1.3 for Android does not verify X.509 certificates from SSL servers…

  • Unscored —
    CVE-2014-6707

    The 7Sage LSAT Prep - Proctor (aka com.sevensage.lsat) application 2.1.1 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6712

    The Airlines International (aka org.iata.IAMagazine) application 1.0 for Android does not verify X.509 certificates fro…

  • Unscored —
    CVE-2014-6714

    The WebMD (aka com.webmd.android) application 3.5 for Android does not verify X.509 certificates from SSL servers, whic…

  • Unscored —
    CVE-2014-6716

    The fastin (aka moda.azyae.fastin.net) application 1.0 for Android does not verify X.509 certificates from SSL servers,…

  • Unscored —
    CVE-2014-6713

    The MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-6706

    The Embry-Riddle (aka com.dub.app.erau) application 1.4.04 for Android does not verify X.509 certificates from SSL serv…

  • Unscored —
    CVE-2014-6704

    The Utah Jazz (aka com.sportinginnovations.jazz) application 2.0.0 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-6711

    The ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does not verify X.509 certifi…

  • Unscored —
    CVE-2014-6702

    The StarSat International (aka com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app) application 1.41.54.9222 for Andro…

  • Unscored —
    CVE-2014-6703

    The phonearabs4 (aka com.phonearabs4.myapps) application 1.4 for Android does not verify X.509 certificates from SSL se…