Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

pdc disaster alertThe Disaster Alert (aka disasterAlert.PDC) application 3.2 for Android does not verify X.509...CVE-2014-58855.4 MediumSeptember 12, 2014
1und1 1\&1 online storageThe 1&1 Online Storage (aka de.einsundeins.smartdrive) application 5.0.11 for Android does not...CVE-2014-58845.4 MediumSeptember 12, 2014
7-elevenThe 7-ELEVEN (aka ecowork.seven) application 2.08.000 for Android does not verify X.509...CVE-2014-58835.4 MediumSeptember 12, 2014
fatfreecrm fat free crmFat Free CRM subject to Cross-site ScriptingCVE-2014-5441Fix available4.3 MediumSeptember 12, 2014
mpexsolutions mx-smartimerSQL injection vulnerability in Login.aspx in MPEX Business Solutions MX-SmartTimer before 13.19...CVE-2014-54407.5 HighSeptember 12, 2014
blackcat-cms blackcat cmsCross-site scripting (XSS) vulnerability in cattranslate.php in the CatTranslate JQuery plugin in...CVE-2014-52594.3 MediumSeptember 12, 2014
mywebsqlCross-site scripting (XSS) vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to...CVE-2014-47354.3 MediumSeptember 12, 2014
mpay24 project mpay24The mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to obtain credentials...CVE-2014-2009Public exploit5.0 MediumSeptember 12, 2014
mpay24 project mpay24SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop...CVE-2014-2008Public exploit7.5 HighSeptember 12, 2014
synology diskstation manager, photo station +1 moreCross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM...CVE-2012-1556Public exploit4.3 MediumSeptember 12, 2014
ibm san volume controller software, storwize v3500, storwize v3700 +2 more +4 moreIBM Storwize 3500, 3700, 5000, and 7000 devices and SAN Volume Controller 6.x and 7.x before 7.2...CVE-2014-48117.5 HighSeptember 12, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...CVE-2014-47924.0 MediumSeptember 12, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF13 and 8...CVE-2014-47623.5 LowSeptember 12, 2014
cisco unified communications managerCross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications...CVE-2014-33633.5 LowSeptember 12, 2014
cisco telepresence system edge 75 mxp, telepresence system edge 85 mxp, telepresence system edge 95 mxp +1 more +3 moreMemory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows...CVE-2014-33627.8 HighSeptember 12, 2014
cisco cli, ios xr +1 moreThe CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via...CVE-2014-33424.0 MediumSeptember 12, 2014
ibm rational quality manager, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality...CVE-2014-30925.0 MediumSeptember 12, 2014
apache tomcatApache Tomcat Unrestricted file upload vulnerabilityCVE-2013-4444Fix availableEPSS 14.0%6.8 MediumSeptember 12, 2014
squid-cache squid, oracle solaris +1 moreOff-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP...CVE-2014-6270Fix availableEPSS 23.3%6.8 MediumSeptember 12, 2014
apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 MediumSeptember 11, 2014
spiceworksCross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote...CVE-2014-3740Public exploit3.5 LowSeptember 11, 2014
applica homoo ijiriThe Homoo Ijiri (aka jp.co.applica) application 3.7 for Android does not verify X.509...CVE-2014-58825.4 MediumSeptember 11, 2014
yahoo yboxThe Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify...CVE-2014-58815.4 MediumSeptember 11, 2014
tvguide project tvguideThe tvguide (aka kenneth.tvguide) application 1.9.14 for Android does not verify X.509...CVE-2014-58795.4 MediumSeptember 11, 2014
zohocorp manageengine eventlog analyzerZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict...CVE-2014-6043Public exploitEPSS 12.8%6.5 MediumSeptember 11, 2014
tribulant tibulant slideshow galleryUnrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for...CVE-2014-5460Public exploitEPSS 70.9%6.5 MediumSeptember 11, 2014
sos jobschedulerDirectory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler...CVE-2014-53934.0 MediumSeptember 11, 2014
sos jobschedulerCross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS...CVE-2014-53914.3 MediumSeptember 11, 2014
avolvesoftware projectdoxCross-site scripting (XSS) vulnerability in Avolve Software ProjectDox 8.1 allows remote...CVE-2014-51294.3 MediumSeptember 11, 2014
wt directory project directorySQL injection vulnerability in the wt_directory extension before 1.4.1 for TYPO3 allows remote...CVE-2014-62417.5 HighSeptember 11, 2014
google sitemap project sitemapCross-site scripting (XSS) vulnerability in the Google Sitemap (weeaar_googlesitemap) extension 0...CVE-2014-62404.3 MediumSeptember 11, 2014
address visualization with google maps project visualization with google mapsSQL injection vulnerability in the Address visualization with Google Maps (st_address_map)...CVE-2014-62397.5 HighSeptember 11, 2014
akronymmanager project akronymmanagerCross-site scripting (XSS) vulnerability in the Akronymmanager (aka SB Folderdownload) extension...CVE-2014-62384.3 MediumSeptember 11, 2014
news pack project packCross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3...CVE-2014-62373.5 LowSeptember 11, 2014
lumonet php include project php includeUnspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for...CVE-2014-62367.5 HighSeptember 11, 2014
kennziffer ke dompdfUnspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote...CVE-2014-6235Public exploit7.5 HighSeptember 11, 2014
open graph protocol project graph protocolCross-site scripting (XSS) vulnerability in the Open Graph protocol (jh_opengraphprotocol)...CVE-2014-62344.3 MediumSeptember 11, 2014
flat manager project managerSQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3...CVE-2014-62337.5 HighSeptember 11, 2014
ldap project ldapUnspecified vulnerability in the LDAP (eu_ldap) extension before 2.8.18 for TYPO3 allows remote...CVE-2014-62324.0 MediumSeptember 11, 2014
cwt frontend edit project frontend editUnspecified vulnerability in the CWT Frontend Edit (cwt_feedit) extension before 1.2.5 for TYPO3...CVE-2014-62317.5 HighSeptember 11, 2014
adiscon loganalyzerMultiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow...CVE-2014-6070Public exploit4.3 MediumSeptember 11, 2014
phpwiki project phpwikiThe Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell...CVE-2014-5519Public exploitEPSS 65.0%7.5 HighSeptember 11, 2014
ploggerUnrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and...CVE-2014-2223Public exploitEPSS 10.0%7.5 HighSeptember 11, 2014
group-office groupofficeSQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90...CVE-2012-4240Public exploit6.5 MediumSeptember 11, 2014
xoopsMultiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers...CVE-2012-0984Public exploit4.3 MediumSeptember 11, 2014
imperva securesphere web application firewallCross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX...CVE-2011-48874.3 MediumSeptember 11, 2014
i-um iumThe ium (aka net.ium.mobile.android) application 3.3.4 for Android does not verify X.509...CVE-2014-58785.4 MediumSeptember 11, 2014
mini group tv guideThe TV Guide (aka net.micene.minigroup.palimpsests.lite) application 5.4.3 for Android does not...CVE-2014-58775.4 MediumSeptember 11, 2014
westerndigital wd my cloudThe WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509...CVE-2014-58765.4 MediumSeptember 11, 2014
sylpheo sylphoneThe Sylphone (aka com.sylpheo.prospectosyl) application 5.3.8 for Android does not verify X.509...CVE-2014-58755.4 MediumSeptember 11, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open