Skip to content
OpenAdvisories

Archive

October 2014

Vulnerabilities first published in this month (UTC), newest first.

← September 2014 2014 / October November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,413 results · Feed

  • Medium —
    CVE-2014-3621

    OpenStack Identity Keystone Exposure of Sensitive Information

    The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by "$(admin_token)" in the publicurl en…

    keystone keystone keystone Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-6875

    The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509 certificates from …

  • Unscored —
    CVE-2014-6856

    The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certificates from SSL server…

  • Unscored —
    CVE-2014-6880

    The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificates from SSL servers,…

  • Unscored —
    CVE-2014-6873

    The AMGC (aka com.amec.uae) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allo…

  • Unscored —
    CVE-2014-6884

    The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android does not verify X.509…

  • Unscored —
    CVE-2014-6888

    The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6857

    The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.509 certificates from…

  • Unscored —
    CVE-2014-6862

    The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL ser…

  • Unscored —
    CVE-2014-6874

    The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 certificates from SS…

  • Unscored —
    CVE-2014-6870

    The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from S…

  • Unscored —
    CVE-2014-6879

    The Equifax Mobile (aka com.equifax) application 1.5 for Android does not verify X.509 certificates from SSL servers, w…

  • Unscored —
    CVE-2014-6872

    The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates from SSL servers, …

  • Unscored —
    CVE-2014-6871

    The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X.509 certificates f…

  • Unscored —
    CVE-2014-6859

    The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from…

  • Unscored —
    CVE-2014-6869

    The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-6881

    The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android does not verify X.5…

  • Unscored —
    CVE-2014-6863

    The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does not verify X.509 ce…

  • Unscored —
    CVE-2014-6878

    The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X.509 certificates f…

  • Unscored —
    CVE-2014-6861

    The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android does not verify X.…

  • Unscored —
    CVE-2014-6860

    The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not verify X.509 certificat…

  • Unscored —
    CVE-2014-6893

    The Pushpins Grocery Coupons (aka com.pushpinsapp.pushpins) application 1.56 for Android does not verify X.509 certific…

  • Unscored —
    CVE-2014-6883

    The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certifica…

  • Unscored —
    CVE-2014-6867

    The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates …

  • Unscored —
    CVE-2014-6889

    The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 certificates from SSL…

  • Unscored —
    CVE-2014-6866

    The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates…

  • Unscored —
    CVE-2014-6865

    The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does…

  • Unscored —
    CVE-2014-6868

    The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers…

  • Unscored —
    CVE-2014-6890

    The CouponCabin - Coupons & Deals (aka com.couponcabin) application 3.6 for Android does not verify X.509 certificates …

  • Unscored —
    CVE-2014-6892

    The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-6886

    The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certifica…

  • Unscored —
    CVE-2014-6864

    The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509…

  • Unscored —
    CVE-2014-6877

    The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not verify X.509 certific…

  • Unscored —
    CVE-2014-6882

    The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does not verify X.509 cert…

  • Unscored —
    CVE-2014-6885

    The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verif…

  • Unscored —
    CVE-2014-6876

    The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify X.509 certificates …

  • Unscored —
    CVE-2014-6858

    The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates fr…

  • Unscored —
    CVE-2014-4765

    IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3…

  • Unscored —
    CVE-2014-4793

    IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain …

  • Unscored —
    CVE-2014-3059

    Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote…