Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

apple iphone osDirectory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows...CVE-2014-43841.9 LowSeptember 18, 2014
apple iphone os, tvos +1 moreThe Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle...CVE-2014-43834.3 MediumSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreLibnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write...CVE-2014-43819.3 HighSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreThe IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds...CVE-2014-43809.3 HighSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreAn unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper...CVE-2014-43797.1 HighSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreCoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain...CVE-2014-4378Public exploit5.8 MediumSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreInteger overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote...CVE-2014-4377Public exploit6.8 MediumSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreDouble free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain...CVE-2014-43757.8 HighSeptember 18, 2014
apple iphone os, mac os x +1 moreNSXMLParser in Foundation in Apple iOS before 8 allows attackers to read arbitrary files via XML...CVE-2014-43745.0 MediumSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreThe IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple...CVE-2014-43735.5 MediumSeptember 18, 2014
apple iphone os, tvos +1 moresyslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to...CVE-2014-43723.6 LowSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreThe network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does...CVE-2014-43711.9 LowSeptember 18, 2014
apple iphone os, tvos +1 moreThe IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows...CVE-2014-43697.8 HighSeptember 18, 2014
apple iphone osThe Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen...CVE-2014-43686.9 MediumSeptember 18, 2014
apple iphone osApple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for...CVE-2014-43672.1 LowSeptember 18, 2014
apple iphone osMail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP...CVE-2014-43665.0 MediumSeptember 18, 2014
apple iphone os, tvos +1 moreThe 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong...CVE-2014-43645.6 MediumSeptember 18, 2014
apple safari, iphone os +1 moreSafari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms,...CVE-2014-43635.0 MediumSeptember 18, 2014
apple iphone osThe Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third...CVE-2014-4362Fix available5.0 MediumSeptember 18, 2014
apple iphone osThe Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API...CVE-2014-43615.0 MediumSeptember 18, 2014
apple iphone os, tvos +1 moreAccounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain...CVE-2014-43572.1 LowSeptember 18, 2014
apple iphone osApple iOS before 8 does not follow the intended configuration setting for text-message preview on...CVE-2014-43562.1 LowSeptember 18, 2014
apple iphone osApple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier for remote...CVE-2014-43545.8 MediumSeptember 18, 2014
apple iphone osRace condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information...CVE-2014-43534.3 MediumSeptember 18, 2014
apple iphone osAddress Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes...CVE-2014-43522.1 LowSeptember 18, 2014
nongnu gksuGKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper...CVE-2014-28866.8 MediumSeptember 18, 2014
spiceworksMultiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote...CVE-2012-6658Public exploit4.3 MediumSeptember 17, 2014
spiceworksSQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute...CVE-2012-2956Public exploit6.5 MediumSeptember 17, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4...CVE-2014-52354.3 MediumSeptember 17, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4...CVE-2014-52344.3 MediumSeptember 17, 2014
mini mail dashboard widget project mail dashboard widgetCross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress...CVE-2012-2583Public exploit4.3 MediumSeptember 17, 2014
orangehrmMultiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote...CVE-2012-1507Public exploit4.3 MediumSeptember 17, 2014
orangehrmSQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in...CVE-2012-1506Public exploit6.5 MediumSeptember 17, 2014
yealink gigabit color ip phone sip-t32g, gigabit color ip phone sip-t38g, ip phone sip-t19p +11 more +13 moreMultiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in...CVE-2012-1417Public exploit3.5 LowSeptember 17, 2014
episerver, siteseeker euroling siteseeker +1 moreCross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for...CVE-2012-10324.3 MediumSeptember 17, 2014
secretcircle secret circle - talk freelyThe Secret Circle - talk freely (aka com.easyxapp.secret) application 2.2.00.26 for Android does...CVE-2014-59185.4 MediumSeptember 17, 2014
grassapper slideshow 365The Slideshow 365 (aka com.Slideshow) application 3.6 for Android does not verify X.509...CVE-2014-59175.4 MediumSeptember 17, 2014
oi minha oiThe Minha Oi (aka br.com.mobicare.minhaoi) application 1.15.0 for Android does not verify X.509...CVE-2014-59165.4 MediumSeptember 17, 2014
tigo copa mundial fifa 2014The Tigo Copa Mundial FIFA 2014 (aka com.fwc2014.millicom.and) application 3.1 for Android does...CVE-2014-59155.4 MediumSeptember 17, 2014
finansbank cep subesiThe Finansbank Cep Subesi (aka com.finansbank.mobile.cepsube) application 1.1.5 for Android does...CVE-2014-59145.4 MediumSeptember 17, 2014
game-lion allies in warThe Allies in War (aka com.gamelion.aiw) application 1.3.2 for Android does not verify X.509...CVE-2014-59135.4 MediumSeptember 17, 2014
intsig innoteThe InNote (aka com.intsig.notes) application 1.0.3.20131119 for Android does not verify X.509...CVE-2014-59125.4 MediumSeptember 17, 2014
jellytap free app icons \& icon packsThe Free App Icons & Icon Packs (aka com.jellytap.cooliconfinder) application 1.4 for Android...CVE-2014-59115.4 MediumSeptember 17, 2014
dog whistle project whistleThe Dog Whistle (aka com.dogwhistle.dogtrainingandroidapp) application 1.9 for Android does not...CVE-2014-59105.4 MediumSeptember 17, 2014
watchaThe watcha (aka com.frograms.watcha) application 2.0.2 for Android does not verify X.509...CVE-2014-59095.4 MediumSeptember 17, 2014
kmartThe Kmart (aka com.kmart.android) application @7F0C00EF for Android does not verify X.509...CVE-2014-59085.4 MediumSeptember 17, 2014
libiitech pet salonThe Pet Salon (aka com.libiitech.petsalon) application 1.0.1 for Android does not verify X.509...CVE-2014-59075.4 MediumSeptember 17, 2014
youngmoney lil wayne slots\The Lil Wayne Slots: FREE SLOTS (aka com.lilwayneslots.slots.android) application 1.138 for...CVE-2014-59065.4 MediumSeptember 17, 2014
emc documentum content serverEMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not...CVE-2014-46227.1 HighSeptember 17, 2014
emc documentum content serverEMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not...CVE-2014-46218.5 HighSeptember 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open