Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

splashidThe SplashID (aka com.splashidandroid) application 7.2.2 for Android does not verify X.509...CVE-2014-58745.4 MediumSeptember 11, 2014
searsThe Sears (aka com.sears.android) application 6.2.8 for Android does not verify X.509...CVE-2014-58735.4 MediumSeptember 11, 2014
safenet-inc safenetmobile passThe SafeNetMobile Pass (aka securecomputing.devices.android.controller) application 8.3.7.11 for...CVE-2014-58725.4 MediumSeptember 11, 2014
piwik mobile 2The Piwik Mobile 2 (aka org.piwik.mobile2) application 2.0.1 for Android does not verify X.509...CVE-2014-58715.4 MediumSeptember 11, 2014
kmartThe Kmart (aka com.kmart.android) application 6.2.8 for Android does not verify X.509...CVE-2014-58705.4 MediumSeptember 11, 2014
cnn cnnmoney portfolioThe CNNMoney Portfolio (aka com.cnn.cnnmoney) application 1.03 for Android does not verify X.509...CVE-2014-58695.4 MediumSeptember 11, 2014
cisco technical supportThe Cisco Technical Support (aka com.cisco.swtg_android) application 3.7.1 for Android does not...CVE-2014-58685.4 MediumSeptember 11, 2014
sparkpay capital one sparkThe Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not...CVE-2014-58675.4 MediumSeptember 11, 2014
dmv.ca.gov ca dmvThe CA DMV (aka gov.ca.dmv) application 2 for Android does not verify X.509 certificates from SSL...CVE-2014-58665.4 MediumSeptember 11, 2014
ask ask.comThe Ask.com (aka com.ask.android) application 2.2.5 for Android does not verify X.509...CVE-2014-58655.4 MediumSeptember 11, 2014
getswish swish paymentsThe Swish payments (aka se.bankgirot.swish) application 2 for Android does not verify X.509...CVE-2014-58645.4 MediumSeptember 11, 2014
netmarble mpang.gpThe mpang.gp (aka air.com.cjenm.mpang.gp) application 4.0.0 for Android does not verify X.509...CVE-2014-58635.4 MediumSeptember 11, 2014
hp network node manager iUnspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote...CVE-2014-2624Public exploitEPSS 65.4%10.0 HighSeptember 11, 2014
ia32-libs Debian, ia32-libs-gtk Debian +1 moreia32-libs - security updateDLA-52-1Fix availableNo scoreSeptember 11, 2014
cacheguard cacheguardosCross-site request forgery (CSRF) vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7...CVE-2014-4865Public exploit6.8 MediumSeptember 10, 2014
fortinet fortiosThe FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on...CVE-2014-03515.4 MediumSeptember 10, 2014
ibm urbancode deployIBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret...CVE-2014-60744.0 MediumSeptember 10, 2014
zhwnl ecalendar2The ecalendar2 (aka cn.etouch.ecalendar2) application 4.5.3 for Android does not verify X.509...CVE-2014-58625.4 MediumSeptember 10, 2014
skout boyahoy - gay chatThe BoyAhoy - Gay Chat (aka com.boyahoy.android) application 4.3.6 for Android does not verify X...CVE-2014-58615.4 MediumSeptember 10, 2014
aximediasoft slide show creatorThe Slide Show Creator (aka com.amem) application 4.4.3 for Android does not verify X.509...CVE-2014-58605.4 MediumSeptember 10, 2014
animoca star girl\The Star Girl: Colors of Spring (aka com.animoca.google.starGirlSpring) application 3.4.1 for...CVE-2014-58595.4 MediumSeptember 10, 2014
candy blast project blastThe Candy Blast (aka com.appgame7.candyblast) application 1.1.001 for Android does not verify X...CVE-2014-58585.4 MediumSeptember 10, 2014
avantar white \& yellow pagesThe White & Yellow Pages (aka com.avantar.wny) application 5.1.1 for Android does not verify X...CVE-2014-58575.4 MediumSeptember 10, 2014
sixapart movabletypeCross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before...CVE-2014-53133.5 LowSeptember 10, 2014
netgear prosafe firmwareThe NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing...CVE-2014-48643.3 LowSeptember 10, 2014
ibm initiate master data serviceSession fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7...CVE-2014-47896.8 MediumSeptember 10, 2014
ibm initiate master data serviceIBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0...CVE-2014-47885.0 MediumSeptember 10, 2014
ibm initiate master data serviceCross-site scripting (XSS) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5...CVE-2014-47873.5 LowSeptember 10, 2014
ibm initiate master data serviceIBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0...CVE-2014-47864.9 MediumSeptember 10, 2014
ibm initiate master data serviceCross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9...CVE-2014-47856.0 MediumSeptember 10, 2014
ibm initiate master data serviceIBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0...CVE-2014-47844.3 MediumSeptember 10, 2014
ibm initiate master data serviceCross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9...CVE-2014-47836.8 MediumSeptember 10, 2014
ibm rational license key serverThe Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8...CVE-2014-47563.5 LowSeptember 10, 2014
cisco integrated management controller, unified computing system e140d, unified computing system e140dp +5 more +7 moreThe SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified...CVE-2014-33485.0 MediumSeptember 10, 2014
cisco ios xrCisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a...CVE-2014-33434.3 MediumSeptember 10, 2014
ibm rational license key serverThe Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8...CVE-2014-30792.1 LowSeptember 10, 2014
ibm rational engineering lifecycle manager, rational rhapsody design manager, rational software architect design manager +2 moreCross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka...CVE-2014-30376.0 MediumSeptember 10, 2014
ibm rational license key serverThe Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8...CVE-2014-09095.0 MediumSeptember 10, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and...CVE-2014-0554Fix available10.0 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4111EPSS 15.1%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4110EPSS 15.1%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4109Public exploitEPSS 31.2%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4108EPSS 15.1%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4107EPSS 15.1%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4106EPSS 15.1%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4105EPSS 15.1%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4104EPSS 16.0%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4103EPSS 16.0%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-4102EPSS 16.0%9.3 HighSeptember 10, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-4101EPSS 19.5%9.3 HighSeptember 10, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open