Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe acrobat, acrobat reader +1 moreThe NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12...CVE-2014-056810.0 HighSeptember 17, 2014
adobe acrobat, acrobat reader +1 moreHeap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0...CVE-2014-056710.0 HighSeptember 17, 2014
adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow...CVE-2014-056610.0 HighSeptember 17, 2014
adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow...CVE-2014-056510.0 HighSeptember 17, 2014
adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow...CVE-2014-05637.8 HighSeptember 17, 2014
adobe acrobat, acrobat reader +1 moreCross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x...CVE-2014-05624.3 MediumSeptember 17, 2014
adobe acrobat, acrobat reader +1 moreHeap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0...CVE-2014-056110.0 HighSeptember 17, 2014
adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0...CVE-2014-056010.0 HighSeptember 17, 2014
openjdk-7 Ubuntuopenjdk-7 updateUSN-2319-3Fix availableNo scoreSeptember 17, 2014
f5 nginx, debian linux +1 morenginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key...CVE-2014-3616Fix available4.3 MediumSeptember 17, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreThe dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old...CVE-2014-3639Fix available2.1 LowSeptember 16, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreThe bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x...CVE-2014-3638Fix available2.1 LowSeptember 16, 2014
freedesktop dbus, opensuse +1 moreD-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close...CVE-2014-3637Fix available2.1 LowSeptember 16, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreD-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a...CVE-2014-3636Fix available1.9 LowSeptember 16, 2014
d-bus project d-bus, freedesktop dbus, opensuse +2 moreOff-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running...CVE-2014-3635Fix available4.4 MediumSeptember 16, 2014
debian advanced package toolThe apt-get download command in APT before 1.0.9 does not properly validate signatures for...CVE-2014-0490Fix available7.5 HighSeptember 16, 2014
debian advanced package toolAPT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums,...CVE-2014-0489Fix available7.5 HighSeptember 16, 2014
debian advanced package toolAPT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to...CVE-2014-0488Fix available6.8 MediumSeptember 16, 2014
debian advanced package toolAPT before 1.0.9 does not verify downloaded files if they have been modified as indicated using...CVE-2014-0487Fix available7.5 HighSeptember 16, 2014
facebook, facebook messenger +1 more** DISPUTED ** Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook...CVE-2014-6392Disputed4.3 MediumSeptember 15, 2014
meucarrinho grocery list - tomatoesThe Grocery List - Tomatoes (aka com.meucarrinho) application 5.1.4 for Android does not verify X...CVE-2014-59055.4 MediumSeptember 15, 2014
miniinthebox online shoppingThe MiniInTheBox Online Shopping (aka com.miniinthebox.android) application 2.0.0 for Android...CVE-2014-59045.4 MediumSeptember 15, 2014
mobileiron mobile\@workThe Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509...CVE-2014-59035.4 MediumSeptember 15, 2014
uacinemas ua cinemas - mobile ticketingThe UA Cinemas - Mobile ticketing (aka com.mtel.uacinemaapps) application 2.9 for Android does...CVE-2014-59025.4 MediumSeptember 15, 2014
webelinx beauty bible - app for girls The Beauty Bible - App for Girls (aka com.my.beauty.bible) application 5 for Android does not...CVE-2014-59015.4 MediumSeptember 15, 2014
myhomeworkapp myhomework student plannerThe myHomework Student Planner (aka com.myhomeowork) application 3.0.2 for Android does not...CVE-2014-59005.4 MediumSeptember 15, 2014
nespressoThe Nespresso (aka com.nespresso.activities) application 2.4.1 for Android does not verify X.509...CVE-2014-58995.4 MediumSeptember 15, 2014
heavy duty truck driver simulator 3d project duty truck driver simulator 3dThe Heavy Duty Truck Driver Simulator 3D (aka com.oas.heavy.duty.truck.driver.simulator3d)...CVE-2014-58985.4 MediumSeptember 15, 2014
parallelmafia parallel mafia mmorpgThe Parallel Mafia MMORPG (aka com.perblue.pm.client) application @7F070000 for Android does not...CVE-2014-58975.4 MediumSeptember 15, 2014
seawolftech globaltalk- free phone callsThe GlobalTalk- free phone calls (aka com.seawolftech.globaltalk) application 2.1.4 for Android...CVE-2014-58965.4 MediumSeptember 15, 2014
shopyourwayThe ShopYourWay (aka com.sears.shopyourway) application 1.9 for Android does not verify X.509...CVE-2014-58955.4 MediumSeptember 15, 2014
pingshow airetalk text call \& more\!The AireTalk: Text, Call, & More! (aka com.pingshow.amper) application 2.0.73 for Android does...CVE-2014-58945.4 MediumSeptember 15, 2014
shinsegaemall froyoThe froyo (aka com.shinsegae.mobile.froyo) application 5.1.3 for Android does not verify X.509...CVE-2014-58935.4 MediumSeptember 15, 2014
olleh greenbillThe greenbill (aka com.show.greenbill_G) application 2.0.3 for Android does not verify X.509...CVE-2014-58925.4 MediumSeptember 15, 2014
snipsnap coupon appThe SnipSnap Coupon App (aka com.snipsnap.snipsnapapp) application 1.1.11 for Android does not...CVE-2014-58915.4 MediumSeptember 15, 2014
sports2i kbo sports2i 2014The KBO sports2i 2014 (aka com.sports2i) application 5.1.00 for Android does not verify X.509...CVE-2014-58905.4 MediumSeptember 15, 2014
androidforums forum for androidThe Android Forums (aka com.tapatalk.androidforumscom) application 2.4.4.9 for Android does not...CVE-2014-58895.4 MediumSeptember 15, 2014
schneider electric vampsetSchneider Electric VAMPSET Stack-based Buffer OverflowCVE-2014-54074.1 September 15, 2014
ibm filenet content manager, filenet content foundation +1 moreCross-site scripting (XSS) vulnerability in Content Navigator in Content Engine in IBM FileNet...CVE-2014-47633.5 LowSeptember 15, 2014
vmware nsx, vcloud networking and security +1 moreVMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5...CVE-2014-37965.0 MediumSeptember 15, 2014
ibm storwize unified v7000, storwize v7000 unified software +1 moreIBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4...CVE-2014-30772.1 LowSeptember 15, 2014
ecava integraxor, integraxor scada server +1 moreEcava IntegraXor SCADA Server Information Exposure Through Environmental VariablesCVE-2014-23775.0 September 15, 2014
ecava integraxor, integraxor scada server +1 moreEcava IntegraXor SCADA Server SQL InjectionCVE-2014-23767.5 September 15, 2014
ecava integraxor, integraxor scada server +1 moreEcava IntegraXor SCADA Server External Control of File Name or PathCVE-2014-23758.3 September 15, 2014
embarcadero delphi xe6, c\+\+builder xe6 +1 moreBuffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component...CVE-2014-0993Public exploit6.8 MediumSeptember 15, 2014
moodleMoodle allows discovery of an author's usernameCVE-2014-3617Fix available4.0 MediumSeptember 15, 2014
libgadulibgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in...CVE-2013-4488Fix available4.3 MediumSeptember 15, 2014
bibleslots slots\The SLOTS: Bible Slots Free (aka com.topfreegames.topbibleslots) application 1.122 for Android...CVE-2014-58885.4 MediumSeptember 12, 2014
yell local searchThe Yell Local Search (aka com.yell.launcher2) application 4.2.1.4 for Android does not verify X...CVE-2014-58875.4 MediumSeptember 12, 2014
ceskatelevize ivysilani ceske televizeThe iVysilani ceske televize (aka cz.motion.ivysilani) application 1.6 for Android does not...CVE-2014-58865.4 MediumSeptember 12, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open