Skip to content
OpenAdvisories

Archive

2 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /2 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2014-6864

    The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509…

  • Unscored —
    CVE-2014-6877

    The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certific…

  • Unscored —
    CVE-2014-6882

    The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6885

    The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verif…

  • Unscored —
    CVE-2014-6876

    The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates …

  • Unscored —
    CVE-2014-6858

    The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-4765

    IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3…

  • Unscored —
    CVE-2014-4793

    IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain …

  • Unscored —
    CVE-2014-3059

    Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote…

  • Unscored —
    CVE-2014-3060

    Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administr…

  • Unscored —
    CVE-2014-3097

    Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 b…

  • Unscored —
    CVE-2014-2641

    Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authent…

  • Unscored —
    CVE-2014-2640

    Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to i…

  • Unscored —
    CVE-2014-2642

    HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified …