Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

gcspublishing bersa forumThe Bersa Forum (aka com.gcspublishing.bersaforum) application 3.9.16 for Android does not verify...CVE-2014-68325.4 MediumSeptember 30, 2014
hippostudio hippo studioThe Hippo Studio (aka com.appgreen.hippostudio) application 1.0 for Android does not verify X.509...CVE-2014-68315.4 MediumSeptember 30, 2014
covetfashion covet fashion - shopping gameThe Covet Fashion - Shopping Game (aka com.crowdstar.covetfashion) application 2.14.40 for...CVE-2014-68305.4 MediumSeptember 30, 2014
gethook hookThe Hook (aka com.hook.android) application 0.9.3 for Android does not verify X.509 certificates...CVE-2014-68295.4 MediumSeptember 30, 2014
gecu gulf credit unionThe Gulf Credit Union (aka Fi_Mobile.Gulf) application 1.1 for Android does not verify X.509...CVE-2014-68285.4 MediumSeptember 30, 2014
halgame dk online betaThe DK ONLINE Beta (aka com.sgmobile.dkonline) application 1.0.2 for Android does not verify X...CVE-2014-68275.4 MediumSeptember 30, 2014
tic-tac to the max free project to the max freeThe Tic-Tac To The MAX FREE (aka com.tothemax) application 1.2 for Android does not verify X.509...CVE-2014-68265.4 MediumSeptember 30, 2014
teatrofrancoparenti teatro franco parentiThe Teatro Franco Parenti (aka com.mintlab.mx.teatroparenti) application 1.4.0 for Android does...CVE-2014-68255.4 MediumSeptember 30, 2014
kamkomesan project kamkomesanThe kamkomesan (aka com.anek.kamkomesan) application 1.0 for Android does not verify X.509...CVE-2014-68245.4 MediumSeptember 30, 2014
zhtiantian kuailecaidengmiThe kuailecaidengmi (aka com.licai.kuailecaidengmi) application 1.7.12.15 for Android does not...CVE-2014-68235.4 MediumSeptember 30, 2014
nerdico project nerdicoThe Nerdico (aka com.nerdico.danielepais) application 1.9 Stable for Android does not verify X...CVE-2014-68225.4 MediumSeptember 30, 2014
voetbal project voetbalThe voetbal (aka nl.jborsje.android.voetbal.az) application 4.7.2 for Android does not verify X...CVE-2014-68215.4 MediumSeptember 30, 2014
amebra ameba project amebaThe Amebra Ameba (aka jp.honeytrap15.amebra) application 1.0.0 for Android does not verify X.509...CVE-2014-68205.4 MediumSeptember 30, 2014
lappgroup lapp group catalogueThe Lapp Group Catalogue (aka com.prinovis.LappKabel) application 1.4 for Android does not verify...CVE-2014-68195.4 MediumSeptember 30, 2014
core-apps ohbm 20th annual meetingThe OHBM 20th Annual Meeting (aka com.coreapps.android.followme.ohbm2014) application 6.0.9.2 for...CVE-2014-68185.4 MediumSeptember 30, 2014
covechurch coveThe Cove (aka org.covechurch.app) application 1.0.2 for Android does not verify X.509...CVE-2014-68175.4 MediumSeptember 30, 2014
lvtu99 wisdomThe WISDOM (aka lvtu99.com.nescmxiaoniuniu) application 2.1 for Android does not verify X.509...CVE-2014-68165.4 MediumSeptember 30, 2014
voucherry vouch\!The Vouch! (aka com.voucherry.voucherry) application 2.1.6 for Android does not verify X.509...CVE-2014-68155.4 MediumSeptember 30, 2014
sentinels randomizer project randomizerThe Sentinels Randomizer (aka com.mikehipps.sentinelsrandomizer) application 1.1.0 for Android...CVE-2014-68145.4 MediumSeptember 30, 2014
klassens project klassensThe klassens (aka com.mcreda.klassens.apps) application 1.0 for Android does not verify X.509...CVE-2014-68135.4 MediumSeptember 30, 2014
qmania aloha guideThe Aloha Guide (aka com.aloha.guide.english) application 1.5 for Android does not verify X.509...CVE-2014-68125.4 MediumSeptember 30, 2014
core-apps rims 2014 annual conferenceThe RIMS 2014 Annual Conference (aka com.coreapps.android.followme.rims2014) application 6.0.7.4...CVE-2014-68105.4 MediumSeptember 30, 2014
active 24 project 24The Active 24 (aka com.zentity.app.active24) application 1.0.1 for Android does not verify X.509...CVE-2014-68085.4 MediumSeptember 30, 2014
olaschool ola schoolThe OLA School (aka com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) application 1.2.7.132...CVE-2014-68075.4 MediumSeptember 30, 2014
intellegere thanodi - setswana translatorThe Thanodi - Setswana Translator (aka com.thanodi.thanodi) application 1.0.0 for Android does...CVE-2014-68065.4 MediumSeptember 30, 2014
weibo project weiboThe weibo (aka magic.weibo) application 1.2 for Android does not verify X.509 certificates from...CVE-2014-68055.4 MediumSeptember 30, 2014
gnu bashGNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of...CVE-2014-6278In KEVPublic exploitFix availableEPSS 99.7%10.0 HighSeptember 30, 2014
data dumper project dumper, perl +1 moreThe Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows...CVE-2014-4330Fix available2.1 LowSeptember 30, 2014
ulli horlacher fexThe addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows...CVE-2014-3875Fix available6.1 MediumSeptember 30, 2014
rsyslog, sysklogd project sysklogd +1 morersyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to...CVE-2014-3634Fix available7.5 HighSeptember 30, 2014
redhat network satellite, suse manager +1 moreXML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5...CVE-2014-8162Fix available7.5 HighSeptember 29, 2014
redhat satellite, spacewalk, suse manager +2 moreCross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before...CVE-2014-78123.5 LowSeptember 29, 2014
redhat spacewalk, network satellite, suse manager +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...CVE-2014-78113.5 LowSeptember 29, 2014
openmediavaultThe Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron...CVE-2013-3632Public exploitEPSS 57.1%9.0 HighSeptember 29, 2014
belkin n300, n300 firmware +1 moreThe Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain...CVE-2013-30928.3 HighSeptember 29, 2014
belkin n300, n300 firmware +1 moreCross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router...CVE-2013-30896.8 MediumSeptember 29, 2014
belkin n900, n900 firmware +1 moreCross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows...CVE-2013-30866.8 MediumSeptember 29, 2014
belkin f5d8236-4 v2Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4...CVE-2013-3083Public exploit6.8 MediumSeptember 29, 2014
cisco linksys wrt310n router firmware, linksys wrt350n +1 moreCross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows...CVE-2013-30686.8 MediumSeptember 29, 2014
linksys ea6500, ea6500 firmware +1 moreLinksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote...CVE-2013-30667.1 HighSeptember 29, 2014
linksys ea6500, ea6500 firmware +1 moreCross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with...CVE-2013-30653.5 LowSeptember 29, 2014
linksys ea6500, ea6500 firmware +1 moreOpen redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28...CVE-2013-30646.8 MediumSeptember 29, 2014
apachefriends xamppXAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to...CVE-2013-2586Public exploit4.3 MediumSeptember 29, 2014
gentoo portageGentoo Portage does not verify X.509 certificates from SSL serversCVE-2013-2100Fix available9.3 HighSeptember 29, 2014
call-cc chickenUntrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute...CVE-2013-1874Fix available4.4 MediumSeptember 29, 2014
bcron project execbcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files...CVE-2012-6110Fix available2.1 LowSeptember 29, 2014
apache axis2\/cApache Axis2/C does not verify that the server hostname matches a domain name in the subject's...CVE-2012-61074.3 MediumSeptember 29, 2014
ekigalib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a...CVE-2012-56215.0 MediumSeptember 29, 2014
sleuthkit the sleuth kitThe Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file...CVE-2012-5619Fix available2.1 LowSeptember 29, 2014
juniper junos pulse secure access serviceCross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure...CVE-2014-38244.3 MediumSeptember 29, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open