Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

alex kellner powermailTYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanismCVE-2014-6288Fix available7.5 HighOctober 3, 2014
alex kellner powermailTYPO3 powermail extension has unrestricted file upload vulnerabilityCVE-2014-3947Fix available7.5 HighOctober 3, 2014
phpmyadminphpMyAdmin cross-site scripting Vulnerability via ENUM valueCVE-2014-7217Fix available3.5 LowOctober 3, 2014
h2o human harmony organization project human harmony organizationThe H2O Human Harmony Organization (aka com.netpia.ha.theh2o) application 1.6.5 for Android does...CVE-2014-69055.4 MediumOctober 3, 2014
tionetworks gulf power mobile bill payThe Gulf Power Mobile Bill Pay (aka com.tionetworks.gulf) application 1 for Android does not...CVE-2014-69035.4 MediumOctober 3, 2014
anjukeThe Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509...CVE-2014-69025.4 MediumOctober 3, 2014
nobexrc radios del ecuadorThe RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not...CVE-2014-69015.4 MediumOctober 3, 2014
core-apps eage amsterdam 2014The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for...CVE-2014-69005.4 MediumOctober 3, 2014
jazeeraairways jazeera airwaysThe Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X...CVE-2014-68995.4 MediumOctober 3, 2014
boopsie mylibraryThe Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not...CVE-2014-68985.4 MediumOctober 3, 2014
tamrielma skyrim mapThe Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509...CVE-2014-68975.4 MediumOctober 3, 2014
yikyakapp yik yakThe Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates...CVE-2014-68965.4 MediumOctober 3, 2014
nexters throne rushThe Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509...CVE-2014-68955.4 MediumOctober 3, 2014
lucktasticThe Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509...CVE-2014-68945.4 MediumOctober 3, 2014
ibm security access manager for mobile 8.0 firmware, security access manager for mobile appliance, security access manager for web 7.0 firmware +2 more +4 moreCross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access...CVE-2014-60794.3 MediumOctober 3, 2014
ibm security access manager for mobile 8.0 firmware, security access manager for mobile appliance, security access manager for web 7.0 firmware +2 more +4 moreThe administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009...CVE-2014-482310.0 HighOctober 3, 2014
ibm security access manager for web 7.0 firmware, security access manager for web 8.0 firmware, security access manager for web appliance +2 moreThe WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and...CVE-2014-48097.1 HighOctober 3, 2014
exinda wan optimization suiteCross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160)...CVE-2014-71586.8 MediumOctober 2, 2014
exinda wan optimization suiteCross-site scripting (XSS) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows...CVE-2014-71574.3 MediumOctober 2, 2014
tips and tricks hq all in one wordpress security and firewallMultiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8...CVE-2014-6242Public exploit6.5 MediumOctober 2, 2014
pushpinsapp pushpins grocery couponsThe Pushpins Grocery Coupons (aka com.pushpinsapp.pushpins) application 1.56 for Android does not...CVE-2014-68935.4 MediumOctober 2, 2014
kalahari kalahari.com shoppingThe kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify...CVE-2014-68925.4 MediumOctober 2, 2014
couponcabin - coupons \& deals project - coupons \& dealsThe CouponCabin - Coupons & Deals (aka com.couponcabin) application 3.6 for Android does not...CVE-2014-68905.4 MediumOctober 2, 2014
gunbroker gunbroker.comThe GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509...CVE-2014-68895.4 MediumOctober 2, 2014
pennytalk mobileThe PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not...CVE-2014-68885.4 MediumOctober 2, 2014
wephoneapp wephone - phone calls vs skypeThe WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not...CVE-2014-68865.4 MediumOctober 2, 2014
usbank academy sports \+ outdoors visaThe Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for...CVE-2014-68855.4 MediumOctober 2, 2014
ford credit account managerThe Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android...CVE-2014-68845.4 MediumOctober 2, 2014
cnn cnnmoney portfolio for stocksThe CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not...CVE-2014-68835.4 MediumOctober 2, 2014
western federal credit unionThe Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does...CVE-2014-68825.4 MediumOctober 2, 2014
pnc virtual wallet by pncThe PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for...CVE-2014-68815.4 MediumOctober 2, 2014
tradeheroThe TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509...CVE-2014-68805.4 MediumOctober 2, 2014
equifax mobileThe Equifax Mobile (aka com.equifax) application 1.5 for Android does not verify X.509...CVE-2014-68795.4 MediumOctober 2, 2014
rbfcu mobileThe RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not...CVE-2014-68785.4 MediumOctober 2, 2014
santanderbank santander personal bankingThe Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not...CVE-2014-68775.4 MediumOctober 2, 2014
serve american express serveThe American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not...CVE-2014-68765.4 MediumOctober 2, 2014
woodforest mobile bankingThe Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X...CVE-2014-68755.4 MediumOctober 2, 2014
concursive modsim connectedThe ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X...CVE-2014-68745.4 MediumOctober 2, 2014
amecuae amgcThe AMGC (aka com.amec.uae) application 6.0 for Android does not verify X.509 certificates from...CVE-2014-68735.4 MediumOctober 2, 2014
ttnetmuzik ttnet muzikThe TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509...CVE-2014-68725.4 MediumOctober 2, 2014
hogs fly crazy project fly crazyThe Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not...CVE-2014-68715.4 MediumOctober 2, 2014
bgenergyThe BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X...CVE-2014-68705.4 MediumOctober 2, 2014
barcode scanner project scannerThe barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify...CVE-2014-68695.4 MediumOctober 2, 2014
synology ds audioThe DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509...CVE-2014-68685.4 MediumOctober 2, 2014
sortir-en-alsace sortir en alsaceThe Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not...CVE-2014-68675.4 MediumOctober 2, 2014
homeadvisor mobileThe HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not...CVE-2014-68665.4 MediumOctober 2, 2014
jamalbates jamal bates showThe Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3...CVE-2014-68655.4 MediumOctober 2, 2014
socialknowledge forest river forumsThe Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android...CVE-2014-68645.4 MediumOctober 2, 2014
digitalfruit mootorratturid \& biker.eeThe Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android...CVE-2014-68635.4 MediumOctober 2, 2014
gencat artaccesThe ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509...CVE-2014-68625.4 MediumOctober 2, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open