Skip to content
OpenAdvisories

Archive

October 2014

Vulnerabilities first published in this month (UTC), newest first.

← September 2014 2014 / October November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,413 results · Feed

  • Unscored —
    CVE-2012-5866

    Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-2081 Public exploit

    Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua be…

  • Unscored —
    CVE-2014-8329

    Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insu…

  • Unscored —
    CVE-2014-5448

    Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sens…

  • Unscored —
    CVE-2014-5098

    Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject…

  • Unscored —
    CVE-2014-5447

    Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obt…

  • Unscored —
    CVE-2014-5094 Public exploit

    Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.…

  • Unscored —
    CVE-2014-5449

    Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows loca…

  • Unscored —
    CVE-2012-2413

    Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attacke…

  • Unscored —
    CVE-2012-5244 Public exploit

    Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2014-6308 Public exploit Scanner template EPSS 22%

    Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot…

  • Unscored —
    CVE-2014-6280

    Multiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2014-7610

    The Kadinlar Kulubu KKMobileApp (aka com.tapatalk.kadinlarkulubucom) application 3.4.3 for Android does not verify X.50…

  • Unscored —
    CVE-2014-7620

    The Authors On Tour - Live! (aka com.appmakr.app122286) application 4 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-7606

    The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SSL servers…

  • Unscored —
    CVE-2014-7529

    The Bodyguard for Hire (aka com.dreamstep.wBodyGuardforHire) application 0.18.13146.42280 for Android does not verify X…

  • Unscored —
    CVE-2014-7516

    The Central East LHIN News (aka com.wCentralEastLHINNews) application 0.1 for Android does not verify X.509 certificate…

  • Unscored —
    CVE-2014-7602

    The FRONT (aka com.magazinecloner.front) application @7F08017A for Android does not verify X.509 certificates from SSL …

  • Unscored —
    CVE-2014-7494

    The Kontan Kiosk (aka com.appsfoundry.scoopwl.id.kontankiosk) application @7F07025E for Android does not verify X.509 c…

  • Unscored —
    CVE-2014-7562

    The Health Advocate SmartHelp (aka com.healthadvocate.ui) application 3.6 for Android does not verify X.509 certificate…

  • Unscored —
    CVE-2014-7533

    The NotreDame Seguradora (aka br.com.notredame.mobile.NotreDame) application 1.2 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-7487

    The ADT Aesthetic Dentistry Today (aka com.magazinecloner.aestheticdentistry) application @7F080181 for Android does no…

  • Unscored —
    CVE-2014-7621

    The EIN Lookup (aka appinventor.ai_siwanuth.EINLookup) application 1.1 for Android does not verify X.509 certificates f…

  • Unscored —
    CVE-2014-7498

    The Space Cinema (aka it.thespacecinema.android) application 2.0.6 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-7507

    The Hector Leal (aka ad.hector.leal.com) application 13/08/14 for Android does not verify X.509 certificates from SSL s…

  • Unscored —
    CVE-2014-7559

    The InstaTalks (aka com.natrobit.instatalks) application 1.3.1 for Android does not verify X.509 certificates from SSL …

  • Unscored —
    CVE-2014-7502

    The Escucha elDiario.es (aka es.lacabradev.escuchaeldiario) application 1.2.3 for Android does not verify X.509 certifi…

  • Unscored —
    CVE-2014-7542

    The l'Informatiu (aka com.linformatiu.spm) application 2.0 for Android does not verify X.509 certificates from SSL serv…

  • Unscored —
    CVE-2014-7552

    The Zombie Diary (aka com.ezjoy.feelingtouch.zombiediary) application 1.2.2 for Android does not verify X.509 certifica…

  • Unscored —
    CVE-2014-7530

    The PRIX IMPORT (aka com.myapphone.android.myapppriximport) application 1.0 for Android does not verify X.509 certifica…

  • Unscored —
    CVE-2014-7622

    The Affinity Mobile ATM Locator (aka com.collegemobile.affinity.locator) application 1.5 for Android does not verify X.…

  • Unscored —
    CVE-2014-7617

    The www.roads365.com (aka ydx.android) application 1.0.1 for Android does not verify X.509 certificates from SSL server…

  • Unscored —
    CVE-2014-7520

    The Nova 92.1 FM (aka com.wNova921FM) application 1.0 for Android does not verify X.509 certificates from SSL servers, …

  • Unscored —
    CVE-2014-7611

    The Lost Temple (aka com.crazy.game.good.mengchenglu.templeI) application 1.6 for Android does not verify X.509 certifi…

  • Unscored —
    CVE-2014-7508

    The Help For Doc (aka com.childrens.physician.relations) application 1.0 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-7608

    The Carrier Enterprise HVAC Assist (aka com.es.CE) application 4.0 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-7560

    The Fabasoft Cloud (aka com.fabasoft.android.cmis.folio_cloud) application 3.0.1 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-7484

    The Coca-Cola FM Guatemala (aka com.enyetech.radio.coca_cola.fm_gu) application 2.0.41725 for Android does not verify X…

  • Unscored —
    CVE-2014-7604

    The Easy Tips For Glowing Skin (aka com.n.easytipsforglowingskin) application 1.0 for Android does not verify X.509 cer…

  • Unscored —
    CVE-2014-7569

    The Best Greatness Quotes (aka best.free.greatness.quotes.android.app) application 1.0 for Android does not verify X.50…