CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

• cisco webex meetings server Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of... CVE-2014-3395 5.0 MediumSeptember 30, 2014
• starkvilleelectric sed account The SED Account (aka com.starkville.smartapps) application 1.153.0034 for Android does not verify... CVE-2014-6850 5.4 MediumSeptember 30, 2014
• synology ds file The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509... CVE-2014-6848 5.4 MediumSeptember 30, 2014
• horoscopesanddreams horoscopes and dreams The Horoscopes and Dreams (aka com.horoscopesanddreams) application 1.0.1 for Android does not... CVE-2014-6847 5.4 MediumSeptember 30, 2014
• intelitycorp four seasons beverly hills The Four Seasons Beverly Hills (aka com.intelitycorp.FourSeasons.android.ice) application ... CVE-2014-6846 5.4 MediumSeptember 30, 2014
• mediafire The MediaFire (aka com.mediafire.android) application 1.1.1 for Android does not verify X.509... CVE-2014-6845 5.4 MediumSeptember 30, 2014
• tabtale abc song The ABC Song (aka com.tabtale.abcsingalong) application 1.0.0 for Android does not verify X.509... CVE-2014-6844 5.4 MediumSeptember 30, 2014
• orderingapps sweatshop The Sweatshop (aka com.orderingapps.sweatshop) application 2.96 for Android does not verify X.509... CVE-2014-6843 5.4 MediumSeptember 30, 2014
• gannett daily advertiser print The Daily Advertiser Print (aka com.lafayettedailyadv.android.prod) application 6.7 for Android... CVE-2014-6842 5.4 MediumSeptember 30, 2014
• rtiindia rti india The RTI INDIA (aka com.vbulletin.build_890) application 3.8.21 for Android does not verify X.509... CVE-2014-6841 5.4 MediumSeptember 30, 2014
• weddingselections my wedding planner The My Wedding Planner (aka app.wedding) application 1.5 for Android does not verify X.509... CVE-2014-6840 5.4 MediumSeptember 30, 2014
• webizz alma corinthiana The Alma Corinthiana (aka com.alma.corinthiana) application 1.0 for Android does not verify X.509... CVE-2014-6839 5.4 MediumSeptember 30, 2014
• twitter groupama toujours la The Groupama toujours la (aka com.groupama.toujoursla) application 1.3.0 for Android does not... CVE-2014-6838 5.4 MediumSeptember 30, 2014
• hillside project hillside The Hillside (aka com.hillside.hermanus) application 1.1 for Android does not verify X.509... CVE-2014-6837 5.4 MediumSeptember 30, 2014
• openfiler Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote... CVE-2014-7190 Public exploit 6.8 MediumSeptember 30, 2014
• restaurantmis restaurant script Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script ... CVE-2014-6619 Public exploit 4.3 MediumSeptember 30, 2014
• your online shop project online shop Cross-site scripting (XSS) vulnerability in Your Online Shop allows remote attackers to inject... CVE-2014-6618 4.3 MediumSeptember 30, 2014
• tp-link tl-wdr4300, tl-wdr4300 firmware +1 more The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router (TL-WDR4300) with firmware... CVE-2014-4728 5.0 MediumSeptember 30, 2014
• tp-link tl-wdr4300, tl-wdr4300 firmware +1 more Cross-site scripting (XSS) vulnerability in the DHCP clients page in the TP-LINK N750 Wireless... CVE-2014-4727 4.3 MediumSeptember 30, 2014
• haproxy Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1... CVE-2014-6269 Fix available 5.0 MediumSeptember 30, 2014
• yorba geary Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is... CVE-2014-5444 Fix available 4.3 MediumSeptember 30, 2014
• redhat hibernate validator Improper Authentication in Hibernate Validator CVE-2014-3558 Fix available 5.0 MediumSeptember 30, 2014
• jboss teiid, redhat jboss data virtualization +1 more Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3... CVE-2014-0170 4.3 MediumSeptember 30, 2014
• tp-link tl-wr841n, tl-wr841n firmware +1 more Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware... CVE-2012-6316 4.3 MediumSeptember 30, 2014
• plone, zope +1 more Plone and Zope2 affected by Race Condition CVE-2012-5507 Fix available 4.3 MediumSeptember 30, 2014
• plone Plone denial of service via RSS Feed Request CVE-2012-5506 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone Information Disclosure CVE-2012-5505 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone Cross-site scripting Vulnerability CVE-2012-5504 Fix available 4.3 MediumSeptember 30, 2014
• plone Plone allows remote attackers to read hidden folder contents CVE-2012-5503 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone Cross-site scripting Vulnerability CVE-2012-5502 Fix available 3.5 LowSeptember 30, 2014
• plone Plone Arbitrary File Read CVE-2012-5501 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone is vulnerable to denial of service CVE-2012-5499 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone denial of service via Caching Bypass CVE-2012-5498 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone User account enumeration via crafted URL CVE-2012-5497 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone DoS via Crafted URL CVE-2012-5496 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone python code injection CVE-2012-5495 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone Cross-site scripting Vulnerability CVE-2012-5494 Fix available 4.3 MediumSeptember 30, 2014
• plone Plone Sandbox Bypass CVE-2012-5493 Fix available 8.5 HighSeptember 30, 2014
• plone Plone Metadata Disclosure CVE-2012-5492 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone Information Disclosure CVE-2012-5491 Fix available 4.3 MediumSeptember 30, 2014
• plone Plone Cross-site scripting Vulnerability CVE-2012-5490 Fix available 4.3 MediumSeptember 30, 2014
• plone, zope +1 more Plone and Zope2 vulnerable to unauthorized access to restricted attributes CVE-2012-5489 Fix available 6.5 MediumSeptember 30, 2014
• plone Plone Code Injection vulnerability CVE-2012-5488 Fix available 5.0 MediumSeptember 30, 2014
• plone Plone Sandbox Bypass CVE-2012-5487 Fix available 8.5 HighSeptember 30, 2014
• plone, zope +1 more HTTP header injection in Plone and Zope2 CVE-2012-5486 Fix available 6.4 MediumSeptember 30, 2014
• plone Plone Code Injection vulnerability CVE-2012-5485 Fix available 6.8 MediumSeptember 30, 2014
• synology ds photo\+ The DS photo+ (aka com.synology.dsphoto) application 3.3 for Android does not verify X.509... CVE-2014-6836 5.4 MediumSeptember 30, 2014
• freetibet herbal guide The Herbal Guide (aka com.pocket.herbal.guide) application 1.0 for Android does not verify X.509... CVE-2014-6835 5.4 MediumSeptember 30, 2014
• instaroid - instagram viewer project - instagram viewer The Instaroid - Instagram Viewer (aka net.muik.instaroid) application 1.2.1 for Android does not... CVE-2014-6834 5.4 MediumSeptember 30, 2014
• auctiontrac dealer The AuctionTrac Dealer (aka com.adesa.dealer.phone) application 2.0.3 for Android does not verify... CVE-2014-6833 5.4 MediumSeptember 30, 2014
• Show olderLoading…