Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco adaptive security appliance softwareThe SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote...CVE-2014-33985.0 MediumOctober 5, 2014
cisco ios xr, asr 9000 rsp440 router, asr 9001 +5 more +7 moreCisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address...CVE-2014-33967.5 HighOctober 5, 2014
hp systems insight managerHP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking...CVE-2014-26454.3 MediumOctober 5, 2014
hp systems insight managerUnspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote...CVE-2014-26436.5 MediumOctober 5, 2014
mediawikiThe (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x...CVE-2014-7295Fix available3.5 LowOctober 5, 2014
zyxel sbg3300-n, sbg3300-n firmware +1 moreThe login page on the ZyXEL SBG-3300 Security Gateway with firmware 1.00(AADY.4)C0 and earlier...CVE-2014-72785.0 MediumOctober 4, 2014
zyxel sbg3300-n, sbg3300-n firmware +1 moreCross-site scripting (XSS) vulnerability in the login page on the ZyXEL SBG-3300 Security Gateway...CVE-2014-72774.3 MediumOctober 4, 2014
wavea toraware takojyouThe Toraware Takojyou (aka ltd.pte.wavea.torawaretakojyou) application 1.3 for Android does not...CVE-2014-69335.4 MediumOctober 4, 2014
all navalny project navalnyThe All Navalny (aka com.all.navalny) application 1.10 for Android does not verify X.509...CVE-2014-69325.4 MediumOctober 4, 2014
myapp treves dance centerThe Treves Dance Center (aka com.myapphone.android.myapptrvesdancecenter) application 1.0 for...CVE-2014-69315.4 MediumOctober 4, 2014
nobexrc abram radio groove\!The Abram Radio Groove! (aka com.nobexinc.wls_79226887.rc) application 3.2.3 for Android does not...CVE-2014-69305.4 MediumOctober 4, 2014
core-apps aihce 2014The AIHce 2014 (aka com.coreapps.android.followme.aihce2014) application 6.1.0.0 for Android does...CVE-2014-69295.4 MediumOctober 4, 2014
rastreadordecelulares rastreador de celularesThe Rastreador de Celulares (aka com.mobincube.android.sc_9KTH8) application 5.0.0 for Android...CVE-2014-69285.4 MediumOctober 4, 2014
myanmars myanmar housing \The Myanmar Housing : mmHome (aka com.mmhome3) application 1.3 for Android does not verify X.509...CVE-2014-69275.4 MediumOctober 4, 2014
paperton allt om brollopThe Allt om Brollop (aka com.paperton.wl.alltombrollop) application 1.53 for Android does not...CVE-2014-69265.4 MediumOctober 4, 2014
gcspublishing steyr forumThe Steyr Forum (aka com.tapatalk.steyrclubcomvb) application 3.9.12 for Android does not verify...CVE-2014-69255.4 MediumOctober 4, 2014
metroseoul metro newsThe Metro News (aka com.netpia.ha.metro) application 1.6.5 for Android does not verify X.509...CVE-2014-69245.4 MediumOctober 4, 2014
mobitrips dubrovnik guided walking toursThe Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for...CVE-2014-69235.4 MediumOctober 4, 2014
listener-interactive kfai community radioThe KFAI Community Radio (aka com.skyblue.pra.kfai) application 2.0.4 for Android does not verify...CVE-2014-69225.4 MediumOctober 4, 2014
orderingapps buckhorn grillThe Buckhorn Grill (aka com.orderingapps.buckhorn) application 2.8 for Android does not verify X...CVE-2014-69215.4 MediumOctober 4, 2014
canal44 canal 44The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509...CVE-2014-69205.4 MediumOctober 4, 2014
afsinc metalcasting newsstandThe Metalcasting Newsstand (aka air.com.yudu.ReaderAIR3017071) application 3.12.0 for Android...CVE-2014-69195.4 MediumOctober 4, 2014
bikersunderground bikers undergroundThe Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509...CVE-2014-69185.4 MediumOctober 4, 2014
kftc www.knote.kr smartThe www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X...CVE-2014-69175.4 MediumOctober 4, 2014
mama mama.cnThe mama.cn (aka cn.ziipin.mama.ui) application 1.02 for Android does not verify X.509...CVE-2014-69165.4 MediumOctober 4, 2014
houcine el jasmi project el jasmiThe Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not...CVE-2014-69145.4 MediumOctober 4, 2014
paperton dive the worldThe Dive The World (aka com.paperton.wl.divetheworld) application 1.53 for Android does not...CVE-2014-69135.4 MediumOctober 4, 2014
core-apps ira\'s 59th annual conferenceThe IRA's 59th Annual Conference (aka com.coreapps.android.followme.ira_14) application 6.0.7.6...CVE-2014-69125.4 MediumOctober 4, 2014
diziturky hd 2015The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509...CVE-2014-69115.4 MediumOctober 4, 2014
memorizeit memorizeit\!The MemorizeIt! (aka com.kshinenterprises.kshinent.memorizeit) application 1.7.2 for Android does...CVE-2014-69105.4 MediumOctober 4, 2014
enyetech coca-cola fm peruThe Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android...CVE-2014-69095.4 MediumOctober 4, 2014
immigrer forum icThe Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X...CVE-2014-69085.4 MediumOctober 4, 2014
trafficgate rakuten installThe Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify...CVE-2014-69075.4 MediumOctober 4, 2014
loli chocolate cake project chocolate cakeThe Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does...CVE-2014-69065.4 MediumOctober 4, 2014
trytonTryton vulnerable to arbitrary command executionCVE-2014-6633Fix available8.8 HighOctober 4, 2014
qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 LowOctober 4, 2014
qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 LowOctober 4, 2014
rockwell automation allen-bradley micrologix 1400, rockwellautomation ab micrologix controller +1 moreRockwell Automation Micrologix 1400 Improper Input ValidationCVE-2014-54107.1 October 3, 2014
schneider electric ethernet modules for m340, quantum and premium plc ranges, schneider-electric 171ccc96020 firmware, 171ccc96020c firmware +41 more +43 moreSchneider ElectricCVE-2014-075410.0 October 3, 2014
mm forum project forumCross-site request forgery (CSRF) vulnerability in the mm_forum extension before 1.9.3 for TYPO3...CVE-2014-62996.8 MediumOctober 3, 2014
mm forum project forumUnrestricted file upload vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows...CVE-2014-62987.5 HighOctober 3, 2014
mm forum project forumCross-site scripting (XSS) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows...CVE-2014-62974.3 MediumOctober 3, 2014
wec map project mapWEC Map (wec_map) extension for TYPO3 allows Cross-site ScriptingCVE-2014-6296Fix available4.3 MediumOctober 3, 2014
wec map project mapWEC Map (wec_map) extension for TYPO3 allows SQL InjectionCVE-2014-6295Fix available7.5 HighOctober 3, 2014
external links click statistics project links click statisticsCross-site scripting (XSS) vulnerability in the External links click statistics (outstats)...CVE-2014-62944.3 MediumOctober 3, 2014
kennziffer statisticsSQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows...CVE-2014-62937.5 HighOctober 3, 2014
in2code femanagerTYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend usersCVE-2014-6292Fix available6.4 MediumOctober 3, 2014
alphabetic sitemap project sitemapCross-site scripting (XSS) vulnerability in the Alphabetic Sitemap (alpha_sitemap) extension 0.0...CVE-2014-62914.3 MediumOctober 3, 2014
news project newsThe News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified...CVE-2014-62907.5 HighOctober 3, 2014
daniel lienert yet another gallery, michael knoll tools for extbase developmen +1 moreyag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictionsCVE-2014-6289Fix available7.5 HighOctober 3, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open