Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

soapmakingforum soap makingThe Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not...CVE-2014-67245.4 MediumSeptember 26, 2014
comicsplusapp comics plusThe Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not...CVE-2014-67235.4 MediumSeptember 26, 2014
clearfishing pescuit crap liteThe Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does...CVE-2014-67225.4 MediumSeptember 26, 2014
pharmaguidelineThe Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509...CVE-2014-6721Public exploit5.4 MediumSeptember 26, 2014
clearfishing pesca de carpa liteThe Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does...CVE-2014-67205.4 MediumSeptember 26, 2014
rapidmedia kayak angler magazineThe Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does...CVE-2014-67195.4 MediumSeptember 26, 2014
najeebmedia n-media file uploaderUnrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for...CVE-2014-53246.5 MediumSeptember 26, 2014
s-link slfilemanagerDirectory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for...CVE-2014-53196.4 MediumSeptember 26, 2014
jig jigbrowser\+The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same...CVE-2014-53185.8 MediumSeptember 26, 2014
adobe acrobat, coldfusion +1 moreCross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and...CVE-2014-53154.3 MediumSeptember 26, 2014
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and...CVE-2014-7199Fix available4.3 MediumSeptember 26, 2014
cisco iosThe ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which...CVE-2014-33617.1 HighSeptember 25, 2014
cisco ios, ios xe +1 moreCisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS,...CVE-2014-33607.8 HighSeptember 25, 2014
cisco ios, ios xe +1 moreMemory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3...CVE-2014-33597.8 HighSeptember 25, 2014
cisco ios, ios xe +1 moreMemory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO...CVE-2014-33587.8 HighSeptember 25, 2014
cisco ios, ios xe +1 moreCisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3...CVE-2014-33577.8 HighSeptember 25, 2014
cisco ios xeThe metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6...CVE-2014-33567.8 HighSeptember 25, 2014
cisco ios xeThe metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6...CVE-2014-33557.8 HighSeptember 25, 2014
cisco ios, ios xe +1 moreCisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2...CVE-2014-33547.8 HighSeptember 25, 2014
mymobileday1 my mobile dayThe My Mobile Day (aka com.mymobileday) application 1.3 for Android does not verify X.509...CVE-2014-67185.4 MediumSeptember 25, 2014
itriagehealth itriage healthThe iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X...CVE-2014-67175.4 MediumSeptember 25, 2014
fastin project fastinThe fastin (aka moda.azyae.fastin.net) application 1.0 for Android does not verify X.509...CVE-2014-67165.4 MediumSeptember 25, 2014
popoinnovation slotmachineThe SlotMachine (aka com.popoinnovation.SlotMachine) application 1.03 for Android does not verify...CVE-2014-67155.4 MediumSeptember 25, 2014
webmdThe WebMD (aka com.webmd.android) application 3.5 for Android does not verify X.509 certificates...CVE-2014-67145.4 MediumSeptember 25, 2014
medquiz\ medical chat and mcqs projectThe MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not...CVE-2014-67135.4 MediumSeptember 25, 2014
iata airlines internationalThe Airlines International (aka org.iata.IAMagazine) application 1.0 for Android does not verify...CVE-2014-67125.4 MediumSeptember 25, 2014
nobexrc abc lounge webradioThe ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does...CVE-2014-67115.4 MediumSeptember 25, 2014
chifro kids coloring gameThe Chifro Kids Coloring Game (aka com.chifro.kids_coloring_game) application 1.6 for Android...CVE-2014-67105.4 MediumSeptember 25, 2014
techradar news project newsThe TechRadar News (aka com.techradar.news) application 1.0 for Android does not verify X.509...CVE-2014-67095.4 MediumSeptember 25, 2014
sportinginnovations utah jazzThe Sporting Club Uphoria (aka com.sportinginnovations.skc) application 2.1.0 for Android does...CVE-2014-67085.4 MediumSeptember 25, 2014
7sage lsat prep - proctorThe 7Sage LSAT Prep - Proctor (aka com.sevensage.lsat) application 2.1.1 for Android does not...CVE-2014-67075.4 MediumSeptember 25, 2014
erau embry-riddleThe Embry-Riddle (aka com.dub.app.erau) application 1.4.04 for Android does not verify X.509...CVE-2014-67065.4 MediumSeptember 25, 2014
maher zain project zainThe Maher Zain (aka com.vanagas.app.maher_zain) application 1.1 for Android does not verify X.509...CVE-2014-67055.4 MediumSeptember 25, 2014
sportinginnovations utah jazzThe Utah Jazz (aka com.sportinginnovations.jazz) application 2.0.0 for Android does not verify X...CVE-2014-67045.4 MediumSeptember 25, 2014
phonearabs4 project phonearabs4The phonearabs4 (aka com.phonearabs4.myapps) application 1.4 for Android does not verify X.509...CVE-2014-67035.4 MediumSeptember 25, 2014
starsat internationalThe StarSat International (aka com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app) application...CVE-2014-67025.4 MediumSeptember 25, 2014
gnu bashOff-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026...CVE-2014-7187Public exploitFix availableEPSS 58.5%10.0 HighSeptember 25, 2014
gnu bashThe redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote...CVE-2014-7186Public exploitFix availableEPSS 64.3%10.0 HighSeptember 25, 2014
gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 CriticalSeptember 25, 2014
vendormate mobileThe Vendormate Mobile (aka com.vendormate.mobile) application 3.0 for Android does not verify X...CVE-2014-67015.4 MediumSeptember 24, 2014
nba game time 2013-2014The NBA Game Time 2013-2014 (aka com.nbadigital.gametimelite) application 4.11 for Android does...CVE-2014-67005.4 MediumSeptember 24, 2014
weather channelThe Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509...CVE-2014-66995.4 MediumSeptember 24, 2014
igg galaxy online 2The Galaxy Online 2 (aka air.com.igg.galaxyAPhone) application 1.2.3 for Android does not verify...CVE-2014-66985.4 MediumSeptember 24, 2014
mobilesoft morocco weatherThe Morocco Weather (aka com.mobilesoft.meteomaroc) application 3.1 for Android does not verify X...CVE-2014-66975.4 MediumSeptember 24, 2014
candy girl party makeover project girl party makeoverThe Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application 1.0.0.0...CVE-2014-66965.4 MediumSeptember 24, 2014
wedding photo frames-love pics project photo frames-love picsThe Wedding Photo Frames-Love Pics (aka com.WeddingPhotoFramesLovePics) application 1.0 for...CVE-2014-66955.4 MediumSeptember 24, 2014
5sos family planet project family planetThe 5SOS Family Planet (aka uk.co.pixelkicks.fivesos) application 2.3.4 for Android does not...CVE-2014-66945.4 MediumSeptember 24, 2014
juikerThe Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates...CVE-2014-66935.4 MediumSeptember 24, 2014
debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize...CVE-2015-3636Public exploitFix available4.9 MediumSeptember 24, 2014
debian linux, linux kernel +1 moreRace condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6...CVE-2015-3339Fix available6.2 MediumSeptember 24, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open