Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

prochatrooms text chat roomsMultiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat...CVE-2014-5275Public exploit6.5 MediumOctober 20, 2014
tomatocartSQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute...CVE-2014-3978Public exploit6.5 MediumOctober 20, 2014
tomatocartCross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote...CVE-2014-38304.3 MediumOctober 20, 2014
bulbsecurity smartphone pentest frameworkThe btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1...CVE-2012-56974.6 MediumOctober 20, 2014
bulbsecurity smartphone pentest frameworkBulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access...CVE-2012-56965.0 MediumOctober 20, 2014
bulbsecurity smartphone pentest frameworkMultiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest...CVE-2012-56956.8 MediumOctober 20, 2014
bulbsecurity smartphone pentest frameworkMultiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before...CVE-2012-56946.8 MediumOctober 20, 2014
schrack technik microcontrol, technik microcontrol firmware +1 moreSchrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under...CVE-2014-832910.0 HighOctober 20, 2014
jamroom search moduleCross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows...CVE-2014-50984.3 MediumOctober 20, 2014
status2kStatus2k allows remote attackers to obtain configuration information via a phpinfo action in a...CVE-2014-5094Public exploit5.0 MediumOctober 20, 2014
iii vtls-virtuaMultiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in...CVE-2014-2081Public exploit7.5 HighOctober 20, 2014
achievoCross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers...CVE-2012-58664.3 MediumOctober 20, 2014
achievoSQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to...CVE-2012-5865Public exploit6.5 MediumOctober 20, 2014
dotprojectMultiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated...CVE-2012-5701Public exploit6.8 MediumOctober 20, 2014
osclassDirectory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read...CVE-2014-6308Public exploitEPSS 22.3%5.0 MediumOctober 20, 2014
osclassMultiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote...CVE-2014-62804.3 MediumOctober 20, 2014
bananadance banana danceMultiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers...CVE-2012-5244Public exploit7.5 HighOctober 20, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier...CVE-2012-24134.3 MediumOctober 20, 2014
atmeThe Atme (aka com.bedigital.atme) application 1.0.10 for Android does not verify X.509...CVE-2014-76265.4 MediumOctober 20, 2014
aiadp guess the pixel character quizThe Guess the Pixel Character Quiz (aka com.aiadp.pixelcQuiz) application 1.3 for Android does...CVE-2014-76245.4 MediumOctober 20, 2014
affinitycu affinity mobile atm locatorThe Affinity Mobile ATM Locator (aka com.collegemobile.affinity.locator) application 1.5 for...CVE-2014-76225.4 MediumOctober 20, 2014
ein lookup project lookupThe EIN Lookup (aka appinventor.ai_siwanuth.EINLookup) application 1.1 for Android does not...CVE-2014-76215.4 MediumOctober 20, 2014
authorsontourlive authors on tour - live\!The Authors On Tour - Live! (aka com.appmakr.app122286) application 4 for Android does not verify...CVE-2014-76205.4 MediumOctober 20, 2014
moderndecoration interior designThe Interior Design (aka com.interior.design.mcreda) application 1.0 for Android does not verify...CVE-2014-76185.4 MediumOctober 20, 2014
roads365 www.roads365.comThe www.roads365.com (aka ydx.android) application 1.0.1 for Android does not verify X.509...CVE-2014-76175.4 MediumOctober 20, 2014
physicsforums physics forumsThe Physics Forums (aka com.tapatalk.physicsforumscom) application 3.9.22 for Android does not...CVE-2014-76165.4 MediumOctober 20, 2014
warrior beach retreat project beach retreatThe Warrior Beach Retreat (aka com.wWarriorBeachRetreat) application 0.1 for Android does not...CVE-2014-76145.4 MediumOctober 20, 2014
pocketmags wasps official programmesThe WASPS Official Programmes (aka com.triactivemedia.wasps) application @7F080130 for Android...CVE-2014-76135.4 MediumOctober 20, 2014
e-kioskThe e-Kiosk (aka com.ekioskreader.android.pdfviewer) application 1.74 for Android does not verify...CVE-2014-76125.4 MediumOctober 20, 2014
lost temple project templeThe Lost Temple (aka com.crazy.game.good.mengchenglu.templeI) application 1.6 for Android does...CVE-2014-76115.4 MediumOctober 20, 2014
kadinlar kulubu kkmobileapp project kulubu kkmobileappThe Kadinlar Kulubu KKMobileApp (aka com.tapatalk.kadinlarkulubucom) application 3.4.3 for...CVE-2014-76105.4 MediumOctober 20, 2014
miniclip istunt 2The iStunt 2 (aka com.miniclip.istunt2) application 1.1.2 for Android does not verify X.509...CVE-2014-76095.4 MediumOctober 20, 2014
carrierenterprise carrier enterprise hvac assistThe Carrier Enterprise HVAC Assist (aka com.es.CE) application 4.0 for Android does not verify X...CVE-2014-76085.4 MediumOctober 20, 2014
swamiji swamiji.tvThe Swamiji.tv (aka org.yidl.SwamijiTV) application 2.0 for Android does not verify X.509...CVE-2014-76075.4 MediumOctober 20, 2014
concursiveThe Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509...CVE-2014-76065.4 MediumOctober 20, 2014
actorskey actors keyThe Actors Key (aka com.conduit.app_f83daeb6861b401bb103c33ea4210029.app) application 1.6.24.477...CVE-2014-76055.4 MediumOctober 20, 2014
easy tips for glowing skin project tips for glowing skinThe Easy Tips For Glowing Skin (aka com.n.easytipsforglowingskin) application 1.0 for Android...CVE-2014-76045.4 MediumOctober 20, 2014
graveydesign gravey designThe Gravey Design (aka com.dreamstep.wGraveyDesign) application 0.58.13357.54919 for Android does...CVE-2014-76035.4 MediumOctober 20, 2014
pocketmags frontThe FRONT (aka com.magazinecloner.front) application @7F08017A for Android does not verify X.509...CVE-2014-76025.4 MediumOctober 20, 2014
poker puzzle project puzzleThe Poker Puzzle (aka com.sharpiq.pokerpuzzle) application 1.0.0 for Android does not verify X...CVE-2014-75985.4 MediumOctober 20, 2014
gowkster fabulas infantilesThe Fabulas Infantiles (aka com.mobincube.android.sc_9I1A3) application 3.0.0 for Android does...CVE-2014-75975.4 MediumOctober 20, 2014
paramore project paramoreThe Paramore (aka uk.co.pixelkicks.paramore) application 2.3.4 for Android does not verify X.509...CVE-2014-75965.4 MediumOctober 20, 2014
devada project devadaThe devada.co.uk (aka com.wdevadacouk) application 1.2 for Android does not verify X.509...CVE-2014-75955.4 MediumOctober 20, 2014
appytimes mr whippet - yorkshire iceThe Mr Whippet - Yorkshire Ice (aka com.appytimes.ice) application 1.1 for Android does not...CVE-2014-75935.4 MediumOctober 20, 2014
fanshawec folThe FOL (aka com.desire2learn.fol.mobile.app.campuslife.directory) application 3.0.729.1459 for...CVE-2014-75925.4 MediumOctober 20, 2014
ireadercity demonThe Demon (aka com.ireadercity.c24) application 3.0.2 for Android does not verify X.509...CVE-2014-75915.4 MediumOctober 20, 2014
webpromoexpertsThe WebPromoExperts (aka ua.com.webpromoexperts) application 1.8 for Android does not verify X...CVE-2014-75905.4 MediumOctober 20, 2014
icbc industrial and commercial bank of chinaThe Industrial and Commercial Bank of China (ICBC) Banking (aka com.icbc.android) application 2...CVE-2014-75895.4 MediumOctober 20, 2014
designtoolkits blocked in freeThe Blocked in Free (aka com.blueup.blocked) application 1.0 for Android does not verify X.509...CVE-2014-75875.4 MediumOctober 20, 2014
gcspublishing biplane forumThe Biplane Forum (aka com.gcspublishing.biplaneforum) application 3.7.14 for Android does not...CVE-2014-75855.4 MediumOctober 20, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open