Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

seven bulls christmas wordsThe Christmas Words (aka air.com.sevenBulls.summerWords) application 1.0.1 for Android does not...CVE-2014-55485.4 MediumSeptember 9, 2014
permadi mahjong galaxy space liteThe Mahjong Galaxy Space Lite (aka air.com.permadi.mahjongIris) application 2.5 for Android does...CVE-2014-55475.4 MediumSeptember 9, 2014
little games africa memoryThe Africa Memory (aka air.com.klon4enabor4e.AfricaMemory) application 1.0.1 for Android does not...CVE-2014-55465.4 MediumSeptember 9, 2014
torrnad0 sprint jumpThe Sprint jump (aka air.com.ilaz.appilas) application 1 for Android does not verify X.509...CVE-2014-55455.4 MediumSeptember 9, 2014
freshplanet songpopThe SongPop (aka air.com.freshplanet.games.WaM) application 1.21.2 for Android does not verify X...CVE-2014-55445.4 MediumSeptember 9, 2014
differencegames hidden object - alice freeThe Hidden Object - Alice Free (aka air.com.differencegames.hovisionsofalicefree) application 1.0...CVE-2014-55435.4 MediumSeptember 9, 2014
tamalaki hidden object mysteryThe Hidden Object Mystery (aka air.com.differencegames.hodetectivemysteryfree) application 1.0.65...CVE-2014-55425.4 MediumSeptember 9, 2014
differencegames hidden memory - aladdin free\!The Hidden Memory - Aladdin FREE! (aka air.com.differencegames.hmaladdinfree) application 1.0.31...CVE-2014-55415.4 MediumSeptember 9, 2014
flickatrade flick a tradeThe Flick a Trade (aka air.com.cygnecode.fat) application 3.3 for Android does not verify X.509...CVE-2014-55405.4 MediumSeptember 9, 2014
amiscu michael baker federal credit unionThe Michael Baker FCU (aka air.com.creditunionhomebanking.mb155) application 1.2.0 for Android...CVE-2014-55395.4 MediumSeptember 9, 2014
amiscu westmoreland water fcuThe Westmoreland Water FCU (aka air.com.creditunionhomebanking.mb115) application 1.2.0 for...CVE-2014-55385.4 MediumSeptember 9, 2014
chewysoftware abduction stacker freeThe Abduction Stacker Free (aka air.com.chewygames.abductionstacker2) application 1.0.7 for...CVE-2014-55375.4 MediumSeptember 9, 2014
bashgaming bingo bash free bingo casinoThe Bingo Bash - Free Bingo Casino (aka air.com.bitrhymes.bingo) application 1.31.1 for Android...CVE-2014-55365.4 MediumSeptember 9, 2014
girlgame baby get up - kids careThe Baby Get Up - Kids Care (aka air.brown.jordansa.getup) application 1.0.3 for Android does not...CVE-2014-55355.4 MediumSeptember 9, 2014
appministry princess shoppingThe Princess Shopping (aka air.android.PrincessShopping) application 2 for Android does not...CVE-2014-55345.4 MediumSeptember 9, 2014
adidas honoluluThe Honolulu (aka adidas.jp.android.running.honolulu) application 2 for Android does not verify X...CVE-2014-55325.4 MediumSeptember 9, 2014
goabode abodeThe Abode (aka abode.webview) application 1.7 for Android does not verify X.509 certificates from...CVE-2014-55315.4 MediumSeptember 9, 2014
gameloft libraryThe Gameloft library for Android does not verify X.509 certificates from SSL servers, which...CVE-2014-55295.4 MediumSeptember 9, 2014
appsflyerThe Appsflyer library for Android does not verify X.509 certificates from SSL servers, which...CVE-2014-55285.4 MediumSeptember 9, 2014
tapjoy libraryThe Tapjoy library for Android does not verify X.509 certificates from SSL servers, which allows...CVE-2014-55275.4 MediumSeptember 9, 2014
inmobiThe Inmobi library for Android does not verify X.509 certificates from SSL servers, which allows...CVE-2014-55265.4 MediumSeptember 9, 2014
playscape mominis libraryThe MoMinis library for Android does not verify X.509 certificates from SSL servers, which allows...CVE-2014-55255.4 MediumSeptember 9, 2014
adcolony libraryThe Adcolony library for Android does not verify X.509 certificates from SSL servers, which...CVE-2014-55245.4 MediumSeptember 9, 2014
ntop ntopngCross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng ...CVE-2014-5464Public exploit4.3 MediumSeptember 8, 2014
enigmailEnigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC...CVE-2014-5369Fix available4.3 MediumSeptember 8, 2014
ovirtThe REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows...CVE-2014-01534.3 MediumSeptember 8, 2014
ovirt, redhat ovirt-engine +1 moreSession fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows...CVE-2014-01526.8 MediumSeptember 8, 2014
nodejsNode.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive...CVE-2014-5256Fix available5.0 MediumSeptember 5, 2014
arris touchstone dg950a, touchstone dg950a software +1 moreThe Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public,...CVE-2014-4863EPSS 15.7%5.0 MediumSeptember 5, 2014
netmaster cbw700n, cbw700 software +1 moreThe Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of...CVE-2014-4862EPSS 17.1%5.0 MediumSeptember 5, 2014
emurasoft emftpEmurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is...CVE-2014-39104.4 MediumSeptember 5, 2014
falconsc wisepointSession fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers...CVE-2014-39096.8 MediumSeptember 5, 2014
sensys networks vsn240-f, vsn240-t, sensysnetworks trafficdot +1 more +3 moreSensys Networks Traffic Sensor Missing Encryption of Sensitive DataCVE-2014-23794.3 September 5, 2014
sensys networks vsn240-f, vsn240-t, sensysnetworks trafficdot +1 more +3 moreSensys Networks Traffic Sensor Download of Code Without Integrity CheckCVE-2014-23786.5 September 5, 2014
ibm cognos tm1IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass...CVE-2014-08775.0 MediumSeptember 5, 2014
sap netweaverBuffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP...CVE-2014-62526.5 MediumSeptember 5, 2014
torrentflux project torrentfluxTorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via...CVE-2014-60294.9 MediumSeptember 5, 2014
torrentflux project torrentfluxTorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid...CVE-2014-60284.0 MediumSeptember 5, 2014
srvxMultiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote...CVE-2014-55083.5 LowSeptember 5, 2014
eucalyptusThe Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell...CVE-2014-50361.9 LowSeptember 5, 2014
libtorrent-rasterbar MageiaUpdated libtorrent-rasterbar packages fixes uPnP forwarding all portsMGASA-2014-0364Fix availableNo scoreSeptember 5, 2014
net-snmp, apple mac os x, canonical ubuntu linux +2 moresnmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers...CVE-2014-3565Fix available5.0 MediumSeptember 5, 2014
point-to-point protocol project protocolInteger overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before...CVE-2014-3158Fix available7.5 HighSeptember 5, 2014
ibm cognos tm1The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10...CVE-2014-08634.0 MediumSeptember 5, 2014
novell groupwiseThe client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows...CVE-2014-061010.0 HighSeptember 5, 2014
dhcpcd project dhcpcd, google android +1 moreThe get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to...CVE-2014-6060Fix available3.3 LowSeptember 4, 2014
sap crystal reportsDouble free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary...CVE-2014-55066.8 MediumSeptember 4, 2014
sap crystal reportsStack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary...CVE-2014-55056.8 MediumSeptember 4, 2014
solarwinds log and event managerSolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for...CVE-2014-55047.5 HighSeptember 4, 2014
manageengine device expertReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote...CVE-2014-5377Public exploitEPSS 57.5%5.0 MediumSeptember 4, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open