CVE-2014-6xxx

There are 899 CVE in this subgroup.
Last updated: 
ID Summary Flags Max Score
CVE-2014-6000 The FreshDirect (aka com.freshdirect.android) application 2.7.1 for Android does not verify X.509 ce...
CVE-2014-6001 The gewara (aka com.gewara) application 5.2.3 for Android does not verify X.509 certificates from SS...
CVE-2014-6002 The DTE Energy (aka com.dteenergy.mydte) application 3.0.3 for Android does not verify X.509 certifi...
CVE-2014-6003 The Belas Frases de Amor (aka com.goodbarber.frasesdeamor) application 1 for Android does not verify...
CVE-2014-6004 The Pocket Cam Photo Editor (aka mobi.pocketcam.editor) application 3 for Android does not verify X....
CVE-2014-6005 The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 ...
CVE-2014-6006 The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does ...
CVE-2014-6007 The LikeHero Get Instagram Likes (aka com.fraoula.likehero) application 1.0.7 for Android does not v...
CVE-2014-6008 The Blitz Bingo (aka com.appMobi.sbbingo.app) application 2.3 for Android does not verify X.509 cert...
CVE-2014-6009 The Zombie Detector (aka com.jimmybolstad.zombiedetector) application 1.2 for Android does not verif...
CVE-2014-6010 The Rasta Weed Widgets HD (aka aw.awesomewidgets.rastaweed) application 4 for Android does not verif...
CVE-2014-6011 The cutprice (aka kr.co.wedoit.cutprice) application 1.0.4 for Android does not verify X.509 certifi...
CVE-2014-6012 The Gravity Bounce (aka net.toddm.gb) application 1.1 for Android does not verify X.509 certificates...
CVE-2014-6013 The nuSquare (aka tw.com.nuphoto.nusquare) application 1.0.78 for Android does not verify X.509 cert...
CVE-2014-6014 The Conquest Of Fantasia (aka air.com.ingen.studios.cof.sg) application 1.0.1 for Android does not v...
CVE-2014-6015 The TuCarro (aka com.tucarro) application 2.0.5 for Android does not verify X.509 certificates from ...
CVE-2014-6016 The Celluloid (aka com.eurisko.celluloid) application 1.3 for Android does not verify X.509 certific...
CVE-2014-6017 The Doodle Drop (aka net.lazyer.DoodleDrop) application 1 for Android does not verify X.509 certific...
CVE-2014-6018 The global beauty research (aka com.appems.topgirl) application 1.6 for Android does not verify X.50...
CVE-2014-6019 The psychology (aka com.alek.psychology) application 1.0.2 for Android does not verify X.509 certifi...
CVE-2014-6020 The Fuel Rewards Network (aka com.excentus.frn) application 1 for Android does not verify X.509 cert...
CVE-2014-6021 The Harley-Davidson Visa (aka com.usbank.icsmobile.harleydavidson) application 1.18 for Android does...
CVE-2014-6022 The Versent Books (aka com.versentbooks) application 1.1.99 for Android does not verify X.509 certif...
CVE-2014-6023 The s-peek credit rating report (aka com.rhomobile.speek) application 2.1.3 for Android does not ver...
CVE-2014-6024 The Flurry library before 3.4.0 for Android does not verify X.509 certificates from SSL servers, whi...
CVE-2014-6025 The Chartboost library before 2.0.2 for Android does not verify X.509 certificates from SSL servers,...
CVE-2014-6027 Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.4 allow (1) remote attackers to...
E
CVE-2014-6028 TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid paramet...
E
CVE-2014-6029 TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the c...
E
CVE-2014-6030 Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remo...
E
CVE-2014-6031 Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 ...
CVE-2014-6032 Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, AS...
E
CVE-2014-6033 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6032. Reason: This candidate...
R
CVE-2014-6034 Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCo...
E S
CVE-2014-6035 Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, ...
E S
CVE-2014-6036 Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11....
E S
CVE-2014-6037 Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer ...
E
CVE-2014-6038 Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Di...
E
CVE-2014-6039 ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnera...
E
CVE-2014-6040 GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of servic...
E S
CVE-2014-6041 The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy v...
E
CVE-2014-6043 ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict acc...
E
CVE-2014-6045 SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain...
CVE-2014-6046 Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote at...
CVE-2014-6047 phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary ...
CVE-2014-6048 phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request....
CVE-2014-6049 phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorizati...
CVE-2014-6050 phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replayi...
CVE-2014-6051 Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier ...
S
CVE-2014-6052 The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier doe...
E S
CVE-2014-6053 The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and ear...
S
CVE-2014-6054 The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and ear...
S
CVE-2014-6055 Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0....
S
CVE-2014-6059 WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability...
E
CVE-2014-6060 The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause...
S
CVE-2014-6064 The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and...
CVE-2014-6070 Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote...
E S
CVE-2014-6071 jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors relat...
CVE-2014-6074 IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret ke...
S
CVE-2014-6075 IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1...
S
CVE-2014-6076 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6077 Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before...
CVE-2014-6078 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6079 Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Ma...
S
CVE-2014-6080 SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security ...
CVE-2014-6082 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6083 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6084 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6086 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6087 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6088 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6089 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x befo...
CVE-2014-6090 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2)...
S
CVE-2014-6091 Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management (SPM) 6.0.4 before 6...
S
CVE-2014-6092 IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0....
S
CVE-2014-6093 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x th...
CVE-2014-6095 Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows re...
CVE-2014-6096 Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 al...
CVE-2014-6097 IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated ...
S
CVE-2014-6098 IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover cleartext ...
CVE-2014-6099 The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a locko...
CVE-2014-6100 Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6...
CVE-2014-6101 Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process Manag...
S
CVE-2014-6102 IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Mana...
S
CVE-2014-6105 IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjackin...
CVE-2014-6106 Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 a...
S
CVE-2014-6107 IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive co...
CVE-2014-6108 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x...
S
CVE-2014-6109 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x...
S
CVE-2014-6110 IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, whic...
CVE-2014-6111 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x...
S
CVE-2014-6112 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x...
S
CVE-2014-6113 Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager...
S
CVE-2014-6114 The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7....
CVE-2014-6115 IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive i...
S
CVE-2014-6116 The Telemetry Component in WebSphere MQ 8.0.0.1 before p000-001-L140910 allows remote attackers to b...
CVE-2014-6119 IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFi...
CVE-2014-6120 IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source ...
CVE-2014-6121 Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002,...
CVE-2014-6122 IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFi...
CVE-2014-6123 IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source ...
CVE-2014-6125 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows rem...
S
CVE-2014-6126 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote att...
S
CVE-2014-6129 IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and ...
S
CVE-2014-6130 The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selecti...
CVE-2014-6131 IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and ...
S
CVE-2014-6132 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit...
CVE-2014-6133 IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information ...
CVE-2014-6134 IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager bef...
S
CVE-2014-6135 IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFi...
CVE-2014-6136 IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which al...
CVE-2014-6137 Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager...
S
CVE-2014-6138 The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users ...
CVE-2014-6139 The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote auth...
S
CVE-2014-6140 IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMA...
E
CVE-2014-6141 IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 throug...
CVE-2014-6143 The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensi...
CVE-2014-6144 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 2.x and 3.x before 3....
S
CVE-2014-6145 Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 befo...
CVE-2014-6146 IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configure...
CVE-2014-6147 IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local ...
S
CVE-2014-6148 IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 throug...
S
CVE-2014-6149 Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Mana...
CVE-2014-6150 Cross-site scripting (XSS) vulnerability in IBM Tivoli Application Dependency Discovery Manager (TAD...
S
CVE-2014-6151 CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated...
CVE-2014-6152 Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Integrated Portal (TIP) 2.2.x allo...
CVE-2014-6153 The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x thro...
CVE-2014-6154 Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on ...
S
CVE-2014-6155 Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Regi...
CVE-2014-6158 Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication Syste...
S
CVE-2014-6159 IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and...
CVE-2014-6160 IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are...
CVE-2014-6161 Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-I...
CVE-2014-6163 Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 b...
CVE-2014-6164 IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attack...
CVE-2014-6166 The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x befo...
CVE-2014-6167 Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application S...
CVE-2014-6168 Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15...
CVE-2014-6169 Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remo...
CVE-2014-6170 The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM...
CVE-2014-6171 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 t...
CVE-2014-6172 IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics info...
S
CVE-2014-6173 Cross-site scripting (XSS) vulnerability in the Process Inspector in IBM Business Process Manager (B...
CVE-2014-6174 IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5....
CVE-2014-6175 Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8...
CVE-2014-6176 IBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process Manager...
CVE-2014-6177 IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 d...
CVE-2014-6178 Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Reposi...
CVE-2014-6179 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit...
CVE-2014-6180 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit...
CVE-2014-6181 IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-co...
CVE-2014-6182 Directory traversal vulnerability in an export function in the Process Center in IBM Business Proces...
S
CVE-2014-6183 IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1....
CVE-2014-6184 Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through ...
CVE-2014-6185 dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and...
S
CVE-2014-6186 IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7....
CVE-2014-6187 Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Rep...
CVE-2014-6188 Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository...
CVE-2014-6189 Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 71...
CVE-2014-6190 The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensiti...
S
CVE-2014-6191 Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and ...
S
CVE-2014-6192 Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26,...
CVE-2014-6193 IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages settin...
S
CVE-2014-6194 Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 thro...
S
CVE-2014-6195 The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive c...
S
CVE-2014-6196 Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, ...
CVE-2014-6197 IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allo...
S
CVE-2014-6198 Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 ...
S
CVE-2014-6199 The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 a...
CVE-2014-6209 IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 o...
CVE-2014-6210 IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and...
CVE-2014-6211 The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7....
S
CVE-2014-6212 The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0...
S
CVE-2014-6214 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 a...
S
CVE-2014-6215 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 t...
CVE-2014-6221 The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17...
S
CVE-2014-6222 Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x be...
CVE-2014-6228 Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook...
CVE-2014-6229 The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) bef...
CVE-2014-6230 WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote atta...
E
CVE-2014-6231 Unspecified vulnerability in the CWT Frontend Edit (cwt_feedit) extension before 1.2.5 for TYPO3 all...
S
CVE-2014-6232 Unspecified vulnerability in the LDAP (eu_ldap) extension before 2.8.18 for TYPO3 allows remote auth...
S
CVE-2014-6233 SQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows r...
S
CVE-2014-6234 Cross-site scripting (XSS) vulnerability in the Open Graph protocol (jh_opengraphprotocol) extension...
S
CVE-2014-6235 Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers ...
S
CVE-2014-6236 Unspecified vulnerability in the LumoNet PHP Include (lumophpinclude) extension before 1.2.1 for TYP...
S
CVE-2014-6237 Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allo...
S
CVE-2014-6238 Cross-site scripting (XSS) vulnerability in the Akronymmanager (aka SB Folderdownload) extension 0.5...
S
CVE-2014-6239 SQL injection vulnerability in the Address visualization with Google Maps (st_address_map) extension...
S
CVE-2014-6240 Cross-site scripting (XSS) vulnerability in the Google Sitemap (weeaar_googlesitemap) extension 0.4....
S
CVE-2014-6241 SQL injection vulnerability in the wt_directory extension before 1.4.1 for TYPO3 allows remote attac...
S
CVE-2014-6242 Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 ...
E
CVE-2014-6243 Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for WordPre...
E S
CVE-2014-6251 Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified ...
CVE-2014-6252 Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP Net...
CVE-2014-6253 Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow rem...
CVE-2014-6254 Multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote att...
CVE-2014-6255 Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attack...
CVE-2014-6256 Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and plac...
CVE-2014-6257 Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using...
CVE-2014-6258 An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of...
CVE-2014-6259 Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allow...
CVE-2014-6260 Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string, whi...
CVE-2014-6261 Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows...
CVE-2014-6262 Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core befor...
S
CVE-2014-6268 The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of serv...
CVE-2014-6269 Multiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1.5-...
E
CVE-2014-6270 Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP po...
S
CVE-2014-6271 GNU Bash through 4.3 processes trailing strings after function definitions in the values of environm...
KEV E S
CVE-2014-6272 Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22,...
CVE-2014-6273 Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-mid...
S
CVE-2014-6275 FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by pr...
CVE-2014-6276 schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permis...
S
CVE-2014-6277 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of enviro...
E S
CVE-2014-6278 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of enviro...
E S
CVE-2014-6280 Multiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote attackers t...
E
CVE-2014-6283 SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 befo...
E
CVE-2014-6284 SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attac...
E
CVE-2014-6287 The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer...
KEV E
CVE-2014-6288 The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA pr...
CVE-2014-6289 The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools fo...
CVE-2014-6290 The News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impa...
S
CVE-2014-6291 Cross-site scripting (XSS) vulnerability in the Alphabetic Sitemap (alpha_sitemap) extension 0.0.3 a...
CVE-2014-6292 The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the ...
S
CVE-2014-6293 SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows rem...
CVE-2014-6294 Cross-site scripting (XSS) vulnerability in the External links click statistics (outstats) extension...
CVE-2014-6295 SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote ...
S
CVE-2014-6296 Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 a...
S
CVE-2014-6297 Cross-site scripting (XSS) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows rem...
S
CVE-2014-6298 Unrestricted file upload vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remot...
S
CVE-2014-6299 Cross-site request forgery (CSRF) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 all...
S
CVE-2014-6300 Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x bef...
S
CVE-2014-6301 Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in PNMsoft Seque...
CVE-2014-6302 The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers t...
CVE-2014-6303 The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect r...
CVE-2014-6304 The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain...
CVE-2014-6308 Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary ...
E
CVE-2014-6309 The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 an...
CVE-2014-6310 Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code vi...
S
CVE-2014-6311 generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory w...
CVE-2014-6312 Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-wi...
E
CVE-2014-6313 Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows...
E
CVE-2014-6315 Multiple cross-site scripting (XSS) vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 an...
E
CVE-2014-6316 core/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running under t...
E
CVE-2014-6317 Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Win...
S
CVE-2014-6318 The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Ser...
S
CVE-2014-6319 Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative U...
CVE-2014-6320 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6321 Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1...
E S
CVE-2014-6322 The Windows Audio service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window...
S
CVE-2014-6323 Microsoft Internet Explorer 7 through 11 allows remote attackers to obtain sensitive clipboard infor...
CVE-2014-6324 The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, ...
KEV S
CVE-2014-6325 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update...
CVE-2014-6326 Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update...
CVE-2014-6327 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o...
CVE-2014-6328 Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a craf...
CVE-2014-6329 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o...
CVE-2014-6330 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2014-6331 Microsoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML Rel...
CVE-2014-6332 OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2...
KEV E S
CVE-2014-6333 Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to ex...
CVE-2014-6334 Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to ex...
CVE-2014-6335 Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to ex...
CVE-2014-6336 Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properl...
CVE-2014-6337 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a d...
CVE-2014-6338 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6339 Microsoft Internet Explorer 8 and 9 allows remote attackers to bypass the ASLR protection mechanism ...
CVE-2014-6340 Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1...
CVE-2014-6341 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause ...
CVE-2014-6342 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2014-6343 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ...
CVE-2014-6344 Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a den...
CVE-2014-6345 Microsoft Internet Explorer 9 and 10 allows remote attackers to read content from a different (1) do...
CVE-2014-6346 Microsoft Internet Explorer 8 through 11 allows remote attackers to read content from a different (1...
CVE-2014-6347 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o...
CVE-2014-6348 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2014-6349 Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web s...
CVE-2014-6350 Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web s...
CVE-2014-6351 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause ...
CVE-2014-6352 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8...
KEV S
CVE-2014-6353 Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause ...
CVE-2014-6354 Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explore...
CVE-2014-6355 The Graphics Component in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 ...
CVE-2014-6356 Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allow...
CVE-2014-6357 Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT ...
CVE-2014-6358 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6359 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6360 Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to ex...
CVE-2014-6361 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and O...
CVE-2014-6362 Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows re...
CVE-2014-6363 vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and ...
E
CVE-2014-6364 Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 20...
CVE-2014-6365 Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a craf...
CVE-2014-6366 Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a den...
CVE-2014-6367 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6368 Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a...
CVE-2014-6369 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ...
CVE-2014-6370 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6371 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6372 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6373 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o...
CVE-2014-6374 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause ...
CVE-2014-6375 Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2014-6376 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o...
CVE-2014-6377 Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity ic...
CVE-2014-6378 Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X4...
CVE-2014-6379 Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 befo...
CVE-2014-6380 Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 befor...
E
CVE-2014-6381 Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x b...
CVE-2014-6382 The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14...
CVE-2014-6383 The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE module...
CVE-2014-6384 Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12...
CVE-2014-6385 Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 b...
CVE-2014-6386 Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 be...
CVE-2014-6387 gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a pas...
E
CVE-2014-6388 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3634. Reason: This candida...
R
CVE-2014-6389 backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands v...
E
CVE-2014-6392 Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10....
CVE-2014-6393 The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset fiel...
CVE-2014-6394 visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a director...
E
CVE-2014-6395 Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ett...
CVE-2014-6396 The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remo...
CVE-2014-6407 Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code v...
CVE-2014-6408 Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image contai...
CVE-2014-6409 Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers...
E
CVE-2014-6410 The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict...
E
CVE-2014-6412 WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a ...
CVE-2014-6413 A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name paramet...
E
CVE-2014-6414 OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to se...
S
CVE-2014-6416 Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remo...
E
CVE-2014-6417 net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the...
E
CVE-2014-6418 net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate aut...
E
CVE-2014-6420 Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inj...
CVE-2014-6421 Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote a...
CVE-2014-6422 The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channe...
CVE-2014-6423 The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshar...
CVE-2014-6424 The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in...
CVE-2014-6425 The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in ...
CVE-2014-6426 The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12....
CVE-2014-6427 Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RT...
CVE-2014-6428 The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x b...
CVE-2014-6429 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1....
CVE-2014-6430 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1....
CVE-2014-6431 Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file par...
CVE-2014-6432 The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1....
CVE-2014-6433 gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a...
CVE-2014-6434 gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2...
CVE-2014-6435 cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check...
E
CVE-2014-6436 Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows...
E
CVE-2014-6437 Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensiti...
E
CVE-2014-6438 The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause ...
S
CVE-2014-6439 Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Bet...
S
CVE-2014-6440 VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a ...
E S
CVE-2014-6444 Multiple cross-site scripting (XSS) vulnerabilities in the Titan Framework plugin before 1.6 for Wor...
CVE-2014-6445 Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integr...
CVE-2014-6446 The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict ...
E S
CVE-2014-6447 Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scr...
CVE-2014-6448 Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to b...
CVE-2014-6449 Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 be...
CVE-2014-6450 Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 ...
CVE-2014-6451 J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to ...
CVE-2014-6452 Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0...
S
CVE-2014-6453 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6454 Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0...
S
CVE-2014-6455 Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0...
S
CVE-2014-6456 Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confiden...
S
CVE-2014-6457 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and...
S
CVE-2014-6458 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confid...
S
CVE-2014-6459 Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0...
S
CVE-2014-6460 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr...
S
CVE-2014-6461 Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.2 a...
S
CVE-2014-6462 Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2....
S
CVE-2014-6463 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows re...
S
CVE-2014-6464 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows re...
S
CVE-2014-6465 Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle...
S
CVE-2014-6466 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer,...
S
CVE-2014-6467 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6468 Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integ...
S
CVE-2014-6469 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows re...
S
CVE-2014-6470 Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int...
S
CVE-2014-6471 Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12...
S
CVE-2014-6472 Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite ...
S
CVE-2014-6473 Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiali...
S
CVE-2014-6474 Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated user...
S
CVE-2014-6475 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr...
S
CVE-2014-6476 Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrit...
S
CVE-2014-6477 Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, ...
S
CVE-2014-6478 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows ...
S
CVE-2014-6479 Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite...
S
CVE-2014-6480 Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 ...
S
CVE-2014-6481 Unspecified vulnerability in Oracle Solaris 10 and 11 allows remote attackers to affect confidential...
S
CVE-2014-6482 Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft...
S
CVE-2014-6483 Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2....
S
CVE-2014-6484 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows ...
S
CVE-2014-6485 Unspecified vulnerability in Oracle Java SE 8u20 and JavaFX 2.2.65 allows remote attackers to affect...
S
CVE-2014-6486 Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products ...
S
CVE-2014-6487 Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1....
S
CVE-2014-6488 Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterpri...
S
CVE-2014-6489 Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated user...
S
CVE-2014-6490 Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability vi...
S
CVE-2014-6491 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows re...
S
CVE-2014-6492 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows re...
S
CVE-2014-6493 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect c...
S
CVE-2014-6494 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows ...
S
CVE-2014-6495 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows ...
S
CVE-2014-6496 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows ...
S
CVE-2014-6497 Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk...
S
CVE-2014-6498 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain P...
S
CVE-2014-6499 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2...
S
CVE-2014-6500 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows ...
S
CVE-2014-6501 Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via ...
S
CVE-2014-6502 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60,...
S
CVE-2014-6503 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect c...
S
CVE-2014-6504 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allow...
S
CVE-2014-6505 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows ...
S
CVE-2014-6506 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60,...
S
CVE-2014-6507 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows ...
S
CVE-2014-6508 Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availabi...
S
CVE-2014-6509 Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability via unknown...
S
CVE-2014-6510 Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integri...
S
CVE-2014-6511 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to ...
S
CVE-2014-6512 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and...
S
CVE-2014-6513 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows ...
S
CVE-2014-6514 Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2...
S
CVE-2014-6515 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect i...
S
CVE-2014-6516 Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ...
S
CVE-2014-6517 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit...
S
CVE-2014-6518 Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and ava...
S
CVE-2014-6519 Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote ...
S
CVE-2014-6520 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated user...
S
CVE-2014-6521 Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integri...
S
CVE-2014-6522 Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 1...
S
CVE-2014-6523 Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite ...
S
CVE-2014-6524 Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integri...
S
CVE-2014-6525 Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Bu...
S
CVE-2014-6526 Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusi...
S
CVE-2014-6527 Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrit...
S
CVE-2014-6528 Unspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8.1....
S
CVE-2014-6529 Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality...
S
CVE-2014-6530 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows ...
S
CVE-2014-6531 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60,...
S
CVE-2014-6532 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect c...
S
CVE-2014-6533 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain P...
S
CVE-2014-6534 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2...
S
CVE-2014-6535 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr...
S
CVE-2014-6536 Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 all...
S
CVE-2014-6537 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6538 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6539 Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite ...
S
CVE-2014-6540 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ...
S
CVE-2014-6541 Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11...
S
CVE-2014-6542 Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0...
S
CVE-2014-6543 Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 all...
S
CVE-2014-6544 Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0...
S
CVE-2014-6545 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6546 Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, ...
S
CVE-2014-6547 Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, ...
S
CVE-2014-6548 Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 all...
S
CVE-2014-6549 Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, ...
S
CVE-2014-6550 Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business S...
S
CVE-2014-6551 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows lo...
S
CVE-2014-6552 Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1....
S
CVE-2014-6553 Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1....
S
CVE-2014-6554 Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2....
S
CVE-2014-6555 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows re...
S
CVE-2014-6556 Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.1...
S
CVE-2014-6557 Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise M...
S
CVE-2014-6558 Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and...
S
CVE-2014-6559 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows ...
S
CVE-2014-6560 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6561 Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6...
S
CVE-2014-6562 Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, ...
S
CVE-2014-6563 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11....
S
CVE-2014-6564 Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated user...
S
CVE-2014-6565 Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ...
S
CVE-2014-6566 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr...
CVE-2014-6567 Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, ...
S
CVE-2014-6568 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows ...
S
CVE-2014-6569 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2...
S
CVE-2014-6570 Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk...
S
CVE-2014-6571 Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0...
S
CVE-2014-6572 Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business ...
S
CVE-2014-6573 Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manage...
S
CVE-2014-6574 Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Produ...
S
CVE-2014-6575 Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availabi...
S
CVE-2014-6576 Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middlewar...
S
CVE-2014-6577 Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2....
E S
CVE-2014-6578 Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11....
S
CVE-2014-6579 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr...
S
CVE-2014-6580 Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1...
S
CVE-2014-6581 Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1...
S
CVE-2014-6582 Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business S...
S
CVE-2014-6583 Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12...
S
CVE-2014-6584 Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun System...
S
CVE-2014-6585 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to ...
S
CVE-2014-6586 Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products ...
CVE-2014-6587 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confid...
S
CVE-2014-6588 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ...
CVE-2014-6589 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ...
CVE-2014-6590 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ...
CVE-2014-6591 Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 al...
S
CVE-2014-6592 Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 P...
S
CVE-2014-6593 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and ...
E S
CVE-2014-6594 Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows r...
S
CVE-2014-6595 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ...
CVE-2014-6596 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 ...
CVE-2014-6597 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr...
CVE-2014-6598 Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle...
S
CVE-2014-6599 Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1....
CVE-2014-6600 Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk...
S
CVE-2014-6601 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect c...
S
CVE-2014-6602 Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate at...
E
CVE-2014-6603 The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote a...
E
CVE-2014-6604 Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before ...
E
CVE-2014-6607 M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which all...
E
CVE-2014-6609 The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated u...
S
CVE-2014-6610 Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 1...
S
CVE-2014-6611 The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry...
CVE-2014-6616 Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with ...
E
CVE-2014-6617 Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for t...
E
CVE-2014-6618 Cross-site scripting (XSS) vulnerability in Your Online Shop allows remote attackers to inject arbit...
E
CVE-2014-6619 Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (Pizza...
E
CVE-2014-6620 Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6...
CVE-2014-6621 Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting an...
CVE-2014-6622 Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine th...
CVE-2014-6623 Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass be...
CVE-2014-6624 The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote aut...
CVE-2014-6625 The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote aut...
CVE-2014-6626 Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to un...
CVE-2014-6627 Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbi...
CVE-2014-6628 Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute ...
CVE-2014-6631 Cross-site scripting (XSS) vulnerability in com_media in Joomla! 3.2.x before 3.2.5 and 3.3.x before...
CVE-2014-6632 Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to aut...
CVE-2014-6633 The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11,...
CVE-2014-6635 Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arb...
CVE-2014-6636 The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not veri...
CVE-2014-6637 The Facebook Facts (aka com.wFacebookFacts) application 0.1 for Android does not verify X.509 certif...
CVE-2014-6638 The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates fro...
CVE-2014-6639 The TIO MobilePay - Bill Payments (aka com.tionetworks.mobile.android.tioclient) application 1.1.1 f...
CVE-2014-6640 The DNB Trade (aka lt.dnb.mobiletrade) application 1 for Android does not verify X.509 certificates ...
CVE-2014-6641 The Homesteading Today (aka com.tapatalk.homesteadingtodaycom) application 3.7.14 for Android does n...
CVE-2014-6642 The Mark's Daily Apple Forum (aka com.tapatalk.marksdailyapplecomforum) application 2.4.9.3 for Andr...
CVE-2014-6643 The FIAT Forum (aka com.tapatalk.fiatforumcom) application 3.8.41 for Android does not verify X.509 ...
CVE-2014-6644 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6645 The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-...
CVE-2014-6646 The bellyhoodcom (aka com.tapatalk.bellyhoodcom) application 3.4.23 for Android does not verify X.50...
CVE-2014-6647 The ElForro.com (aka com.tapatalk.elforrocom) application 2.4.3.10 for Android does not verify X.509...
CVE-2014-6648 The iPhone4.TW (aka com.tapatalk.iPhone4TWforums) application 3.3.20 for Android does not verify X.5...
CVE-2014-6649 The MyBroadband Tapatalk (aka com.tapatalk.mybroadbandcozavb) application 3.9.22 for Android does no...
CVE-2014-6650 The NextGenUpdate (aka com.tapatalk.nextgenupdatecomforums) application 3.1.6 for Android does not v...
CVE-2014-6651 The Planet of the Vapes Forum (aka com.tapatalk.planetofthevapescoukforums) application 3.7.9 for An...
CVE-2014-6652 The Wizaz Forum (aka com.tapatalk.wizazplforum) application 3.6.4 for Android does not verify X.509 ...
CVE-2014-6653 The Afghan Radio (aka com.wordbox.afghanRadio) application 2.5 for Android does not verify X.509 cer...
CVE-2014-6654 The wTrootrooTvIzle (aka com.wTrootrooTvIzle) application 0.1 for Android does not verify X.509 cert...
CVE-2014-6655 The Tortoise Forum (aka org.tortoiseforum.android.forumrunner) application 3.5.16 for Android does n...
CVE-2014-6656 The drareym (aka com.drareym) application 0.1 for Android does not verify X.509 certificates from SS...
CVE-2014-6657 The Leadership Newspapers (aka com.LeadershipNewspapers) application 1.2 for Android does not verify...
CVE-2014-6658 The Apploi Job Search- Find Jobs (aka com.apploi) application 4.19 for Android does not verify X.509...
CVE-2014-6659 The Defence.pk (aka com.tapatalk.defencepkforums) application 2.4.13.1 for Android does not verify X...
CVE-2014-6660 The Koleksi Hadis Nabi SAW (aka com.wKoleksiHadisNabiSAW) application 0.1 for Android does not verif...
CVE-2014-6661 The netease movie (aka com.netease.movie) application 4.7.2 for Android does not verify X.509 certif...
CVE-2014-6662 The Forum Krstarice (aka com.tapatalk.forumkrstaricacom) application 3.5.14 for Android does not ver...
CVE-2014-6663 The Addis Gag Funny Amharic Pic (aka com.wAmharicFunnyPicture) application 0.1 for Android does not ...
CVE-2014-6664 The Latin Angels Music HD (aka com.applizards.lafreetj) application 2.0 for Android does not verify ...
CVE-2014-6665 The Ahmed Bukhatir Nasheeds TV (aka com.wAhmedBukhatirApp) application 1.0 for Android does not veri...
CVE-2014-6666 The Baglamukhi (aka com.wshribaglamukhiblog) application 0.1 for Android does not verify X.509 certi...
CVE-2014-6667 The racemotocross (aka com.bossappsmk.racemotocross) application 1.2 for Android does not verify X.5...
CVE-2014-6668 The African Radios Live (aka com.nana.africanradioslive) application 1.0.6 for Android does not veri...
CVE-2014-6669 The Inside Crochet (aka com.magazinecloner.insidecrochet) application @7F08017A for Android does not...
CVE-2014-6670 The SingaporeMotherhood Forum (aka com.tapatalk.singaporemotherhoodcomforum) application 3.6.6 for A...
CVE-2014-6671 The World Cup 2014 Brazil - Xem TV (aka vn.letshare.football.worldcup) application 2.6 for Android d...
CVE-2014-6672 The Friendcaster (aka uk.co.senab.blueNotifyFree) application 5.4.5 for Android does not verify X.50...
CVE-2014-6673 The ChallengerTX (aka com.zhtiantian.ChallengerTX) application 3.9.12.5 for Android does not verify ...
CVE-2014-6674 The Amazighmusic (aka nl.appsandroo.Amazighmusic) application 1.0 for Android does not verify X.509 ...
CVE-2014-6675 The Ruta Exacta (aka com.rutaexacta.m) application 1.0 for Android does not verify X.509 certificate...
CVE-2014-6676 The Exercitii pentru abdomen (aka com.rareartifact.exercitiipentruabdomen41E29322) application 1.0 f...
CVE-2014-6677 The Ticket Round Up (aka com.xcr.android.ticketroundupapp) application 3.0.1 for Android does not ve...
CVE-2014-6678 The Algeria Radio (aka com.wordbox.algeriaRadio) application 2.5 for Android does not verify X.509 c...
CVE-2014-6679 The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not v...
CVE-2014-6680 The superheroquiz (aka com.davidhey.superheroquiz) application 1.0 for Android does not verify X.509...
CVE-2014-6681 The Mahabharata Audiocast (aka com.wordbox.mahabharataAudiocast) application 1.0 for Android does no...
CVE-2014-6682 The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1 fo...
CVE-2014-6683 The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify ...
CVE-2014-6684 The MOL bringaPONT (aka hu.mol.bringapont) application 1.1 for Android does not verify X.509 certifi...
CVE-2014-6685 The Tsushima Travel Guide (aka com.netjapan.ntsushima) application 1.9 for Android does not verify X...
CVE-2014-6686 The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not verify X...
CVE-2014-6687 The wSaudichannelAlNasr (aka com.wSaudichannelAlNasr) application 0.1 for Android does not verify X....
CVE-2014-6688 The Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509 certificate...
CVE-2014-6689 The JW Cards (aka com.jingwei.card) application 3.8.0 for Android does not verify X.509 certificates...
CVE-2014-6690 The InstaMessage - Instagram Chat (aka com.futurebits.instamessage.free) application 1.6.2 for Andro...
CVE-2014-6691 The UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not verify X.509 ce...
CVE-2014-6692 The Kingsoft Clip (Office Tool) (aka cn.wps.clip) application 1.5.1 for Android does not verify X.50...
CVE-2014-6693 The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from...
CVE-2014-6694 The 5SOS Family Planet (aka uk.co.pixelkicks.fivesos) application 2.3.4 for Android does not verify ...
CVE-2014-6695 The Wedding Photo Frames-Love Pics (aka com.WeddingPhotoFramesLovePics) application 1.0 for Android ...
CVE-2014-6696 The Candy Girl Party Makeover (aka com.bearhugmedia.android_candygirlparty) application 1.0.0.0 for ...
CVE-2014-6697 The Morocco Weather (aka com.mobilesoft.meteomaroc) application 3.1 for Android does not verify X.50...
CVE-2014-6698 The Galaxy Online 2 (aka air.com.igg.galaxyAPhone) application 1.2.3 for Android does not verify X.5...
CVE-2014-6699 The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 ce...
CVE-2014-6700 The NBA Game Time 2013-2014 (aka com.nbadigital.gametimelite) application 4.11 for Android does not ...
CVE-2014-6701 The Vendormate Mobile (aka com.vendormate.mobile) application 3.0 for Android does not verify X.509 ...
CVE-2014-6702 The StarSat International (aka com.conduit.app_b15a1814d2d840198e70e3c235af5e8b.app) application 1.4...
CVE-2014-6703 The phonearabs4 (aka com.phonearabs4.myapps) application 1.4 for Android does not verify X.509 certi...
CVE-2014-6704 The Utah Jazz (aka com.sportinginnovations.jazz) application 2.0.0 for Android does not verify X.509...
CVE-2014-6705 The Maher Zain (aka com.vanagas.app.maher_zain) application 1.1 for Android does not verify X.509 ce...
CVE-2014-6706 The Embry-Riddle (aka com.dub.app.erau) application 1.4.04 for Android does not verify X.509 certifi...
CVE-2014-6707 The 7Sage LSAT Prep - Proctor (aka com.sevensage.lsat) application 2.1.1 for Android does not verify...
CVE-2014-6708 The Sporting Club Uphoria (aka com.sportinginnovations.skc) application 2.1.0 for Android does not v...
CVE-2014-6709 The TechRadar News (aka com.techradar.news) application 1.0 for Android does not verify X.509 certif...
CVE-2014-6710 The Chifro Kids Coloring Game (aka com.chifro.kids_coloring_game) application 1.6 for Android does n...
CVE-2014-6711 The ABC Lounge Webradio (aka com.nobexinc.wls_66087017.rc) application 3.3.10 for Android does not v...
CVE-2014-6712 The Airlines International (aka org.iata.IAMagazine) application 1.0 for Android does not verify X.5...
CVE-2014-6713 The MedQuiz: Medical Chat and MCQs (aka com.pdevsmedd.med) application 1.5 for Android does not veri...
CVE-2014-6714 The WebMD (aka com.webmd.android) application 3.5 for Android does not verify X.509 certificates fro...
CVE-2014-6715 The SlotMachine (aka com.popoinnovation.SlotMachine) application 1.03 for Android does not verify X....
CVE-2014-6716 The fastin (aka moda.azyae.fastin.net) application 1.0 for Android does not verify X.509 certificate...
CVE-2014-6717 The iTriage Health (aka com.healthagen.iTriage) application 5.29 for Android does not verify X.509 c...
CVE-2014-6718 The My Mobile Day (aka com.mymobileday) application 1.3 for Android does not verify X.509 certificat...
CVE-2014-6719 The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does no...
CVE-2014-6720 The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does no...
CVE-2014-6721 The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 ce...
CVE-2014-6722 The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does no...
CVE-2014-6723 The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not veri...
CVE-2014-6724 The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify...
CVE-2014-6725 The SchoolXM (aka apprentice.schoolxm) application 1.2 for Android does not verify X.509 certificate...
CVE-2014-6726 The 30A (aka com.app30a) application 5.26.2 for Android does not verify X.509 certificates from SSL ...
CVE-2014-6727 The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify...
CVE-2014-6728 The ThinkPal (aka com.mythinkpalapp) application 1.6.3 for Android does not verify X.509 certificate...
CVE-2014-6729 The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.50...
CVE-2014-6730 The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X...
CVE-2014-6731 The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509...
CVE-2014-6732 The Westpac Mobile Banking (aka org.westpac.bank) application 5.21 for Android does not verify X.509...
CVE-2014-6733 The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509...
CVE-2014-6734 The Wine Making (aka com.gcspublishing.winemakingtalk) application 3.7.15 for Android does not verif...
CVE-2014-6735 The imagine Next bmobile (aka com.conduit.app_51c3c19581af465092327dd25591b224.app) application 1.7....
CVE-2014-6736 The EPL Hat Trick (aka com.hat.trick.goal) application 1.0 for Android does not verify X.509 certifi...
CVE-2014-6737 The Ultimate Target-Armored Sniper (aka air.wood.liame.ultimatetarget) application 1.0.1 for Android...
CVE-2014-6738 The Maccabi Tel Aviv (aka com.monkeytech.maccabi) application 1.0 for Android does not verify X.509 ...
CVE-2014-6739 The Well-Being Connect Mobile (aka com.healthways.wellbeinggo) application 2.9 for Android does not ...
CVE-2014-6740 The XD Forum (aka com.tapatalk.xdforumcomforum) application 3.9.17 for Android does not verify X.509...
CVE-2014-6741 The John MacArthur (aka com.john.macarthur) application 1.0.26 for Android does not verify X.509 cer...
CVE-2014-6742 The All around Cyprus (aka com.cyprus.newspapers) application 2.11 for Android does not verify X.509...
CVE-2014-6743 The Hearsay: A Social Party Game (aka air.com.lip.per) application 1.7.000 for Android does not veri...
CVE-2014-6744 The Al-Ahsa News (aka com.alahsa.news) application 2.0 for Android does not verify X.509 certificate...
CVE-2014-6745 The Family Location (aka com.sosocome.family) application 3.4 2014-5-20 for Android does not verify ...
CVE-2014-6746 The Infiniti Roadside Assistance (aka com.ccas.rsa.common.infiniti) application 1.1 for Android does...
CVE-2014-6747 The SeeOn (aka com.seeon) application 4.0.7 for Android does not verify X.509 certificates from SSL ...
CVE-2014-6748 The GEMAIRE's HVAC Assist (aka com.es.Gemaire) application 5.0 for Android does not verify X.509 cer...
CVE-2014-6749 The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android d...
CVE-2014-6750 The $0.99 Kindle Books (aka com.kindle.books.for99) application 6.0 for Android does not verify X.50...
CVE-2014-6751 The Grasshopper Beta (aka com.grasshopper.dialer) application 2.1 for Android does not verify X.509 ...
CVE-2014-6752 The Mindless Behavior Fan Base (aka com.mindless.behavior.fan.base) application 1.0 for Android does...
CVE-2014-6753 The sunnat e rasool (aka com.imsoft.sunnat_e_rasool) application 2.0 for Android does not verify X.5...
CVE-2014-6754 The Vector Outage Manager (aka nz.co.vector.outagemanager) application 1.7 for Android does not veri...
CVE-2014-6755 The SDN Forum (TapaTalk) (aka com.tapatalk.forumshiftdeletenet) application 3.6.5 for Android does n...
CVE-2014-6756 The Reddit Aww (aka org.biais.redditawww) application 1.2.1 for Android does not verify X.509 certif...
CVE-2014-6757 The Koran - AlqoranVideos (aka com.alqoran.videos.example) application 1.0 for Android does not veri...
CVE-2014-6758 The Qin Story (aka com.kongzhong.tjmammoth.android.cqqslengp) application 1.00 for Android does not ...
CVE-2014-6759 The Downton Abbey Fan Portal (aka com.downton.abbey.fan.portal) application 1.0 for Android does not...
CVE-2014-6760 The Harem Thief Dating (aka com.haremthief.haremthief) application 1.2.1 for Android does not verify...
CVE-2014-6761 The Aprende a Meditar (aka com.rareartifact.aprendeameditar544CB0A2) application 1.0 for Android doe...
CVE-2014-6762 The bongomovie (aka com.mbwasi.bongomovie) application 1.0 for Android does not verify X.509 certifi...
CVE-2014-6763 The Codename Birdgame (aka com.devsecondfictioncom.devsecondfictioncom.birdadhoc) application 1.0 fo...
CVE-2014-6764 The Assyrian (aka com.b2.assyrian.activity) application 2.2 for Android does not verify X.509 certif...
CVE-2014-6765 The No Fuss Home Loans (aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7) application 1.0035.b0035 for...
CVE-2014-6766 The Afro-Beat (aka com.zero.themelock.tambourine) application 0.2 for Android does not verify X.509 ...
CVE-2014-6767 The Juggle! FREE (aka com.jakyl.juggleforfree) application 3.0.0 for Android does not verify X.509 c...
CVE-2014-6768 The Anywhere Anytime Yoga Workout (aka com.bayart.yoga) application 1.0 for Android does not verify ...
CVE-2014-6769 The Meteo Belgique (aka com.mobilesoft.belgiumweather) application 3.2 for Android does not verify X...
CVE-2014-6770 The Aerospace Jobs (aka com.app_aerospacejobs.layout) application 1.399 for Android does not verify ...
CVE-2014-6771 The United Heritage Mobile (aka Fi_Mobile.UHCU) application 1.1 for Android does not verify X.509 ce...
CVE-2014-6772 The United Educational CU (aka com.metova.cuae.uecu) application 1.0.27 for Android does not verify ...
CVE-2014-6773 The CIH Quiz game (aka com.bowenehs.cihquizgameapp) application 1.3 for Android does not verify X.50...
CVE-2014-6774 The USEK (aka com.university.usek) application 1.0.8 for Android does not verify X.509 certificates ...
CVE-2014-6775 The Light for Pets (aka com.helenwoodward.light4pets) application 1.0 for Android does not verify X....
CVE-2014-6776 The United Advantage NW Federal Cr (aka com.myappengine.uanwfcu) application 1.7 for Android does no...
CVE-2014-6777 The blueeleph (aka eg.film.blueeleph) application 1.0 for Android does not verify X.509 certificates...
CVE-2014-6778 The Goat Forum (aka com.gcspublishing.goatspot) application 3.9.15 for Android does not verify X.509...
CVE-2014-6779 The Cart App (aka com.virtecha.mobilewallet) application 1.5 for Android does not verify X.509 certi...
CVE-2014-6780 The MeiTalk (aka com.playjia.meitalk) application @7F060012 for Android does not verify X.509 certif...
CVE-2014-6781 The Aloha Stadium - Hawaii (aka com.stadium.aloha) application 1.2 for Android does not verify X.509...
CVE-2014-6782 The Abraham Tours (aka com.mytoursapp.android.app432) application 1.1.2 for Android does not verify ...
CVE-2014-6783 The Campus Link - Campus TV HKUSU (aka com.campus.tv.hkusu) application 2.2 for Android does not ver...
CVE-2014-6784 The Fermononrespiri Mobile (aka com.tapatalk.rmonlineitforums) application 3.8.6 for Android does no...
CVE-2014-6785 The Renny McLean Ministries (aka com.subsplash.thechurchapp.s_GJQX72) application 2.8.1 for Android ...
CVE-2014-6786 The Math for Kids - Subtraction (aka it.tinytap.attsa.deepsub) application 1.2.10 for Android does n...
CVE-2014-6787 The Counter Intuition (aka com.counter.intuition) application 1.2 for Android does not verify X.509 ...
CVE-2014-6788 The Oman News (aka com.oman.news.rmtzlnbuooordciw) application 1.0 for Android does not verify X.509...
CVE-2014-6789 The Anaheim Library 2Go! (aka com.bredir.boopsie.anaheim) application 4.5.110 for Android does not v...
CVE-2014-6790 The INVEX (aka com.mobilatolye.keyinternet) application 1.0.2 for Android does not verify X.509 cert...
CVE-2014-6791 The Angel Reigns (aka com.conduit.app_dab60e7bd60d4f23a14b3fb7357f9dcd.app) application 1.2.6.185 fo...
CVE-2014-6792 The Suriname Radio (aka com.wordbox.surinameRadio) application 1.5 for Android does not verify X.509...
CVE-2014-6793 The Arch Friend (aka com.xyproto.archfriend) application 0.4.2 for Android does not verify X.509 cer...
CVE-2014-6794 The AAPLD (aka com.bredir.boopsie.aapld) application 4.5.110 for Android does not verify X.509 certi...
CVE-2014-6795 The Beekeeping Forum (aka com.tapatalk.supporttapatalkcomxxxxx) application 3.9.15 for Android does ...
CVE-2014-6796 The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates...
CVE-2014-6797 The Abu Ali Anasheeds (aka com.faapps.abuali_anasheeds) application 1.1 for Android does not verify ...
CVE-2014-6798 The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.50...
CVE-2014-6799 The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.50...
CVE-2014-6800 The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X....
CVE-2014-6801 The frank matano (aka com.frank.matano) application 1.0 for Android does not verify X.509 certificat...
CVE-2014-6802 The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Andro...
CVE-2014-6803 The Bank of Moscow EIRTS Rent (aka ru.bm.rbs.android) application 1.0.0 for Android does not verify ...
CVE-2014-6804 The Deschutes Public MobileLibrary (aka com.bredir.boopsie.deschutes) application 4.5.110 for Androi...
CVE-2014-6805 The weibo (aka magic.weibo) application 1.2 for Android does not verify X.509 certificates from SSL ...
CVE-2014-6806 The Thanodi - Setswana Translator (aka com.thanodi.thanodi) application 1.0.0 for Android does not v...
CVE-2014-6807 The OLA School (aka com.conduit.app_00f9890a4f0145f2aae9d714e20b273a.app) application 1.2.7.132 for ...
CVE-2014-6808 The Active 24 (aka com.zentity.app.active24) application 1.0.1 for Android does not verify X.509 cer...
CVE-2014-6809 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6846, CVE-2014-6847. Reaso...
R
CVE-2014-6810 The RIMS 2014 Annual Conference (aka com.coreapps.android.followme.rims2014) application 6.0.7.4 for...
CVE-2014-6811 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6812 The Aloha Guide (aka com.aloha.guide.english) application 1.5 for Android does not verify X.509 cert...
CVE-2014-6813 The klassens (aka com.mcreda.klassens.apps) application 1.0 for Android does not verify X.509 certif...
CVE-2014-6814 The Sentinels Randomizer (aka com.mikehipps.sentinelsrandomizer) application 1.1.0 for Android does ...
CVE-2014-6815 The Vouch! (aka com.voucherry.voucherry) application 2.1.6 for Android does not verify X.509 certifi...
CVE-2014-6816 The WISDOM (aka lvtu99.com.nescmxiaoniuniu) application 2.1 for Android does not verify X.509 certif...
CVE-2014-6817 The Cove (aka org.covechurch.app) application 1.0.2 for Android does not verify X.509 certificates f...
CVE-2014-6818 The OHBM 20th Annual Meeting (aka com.coreapps.android.followme.ohbm2014) application 6.0.9.2 for An...
CVE-2014-6819 The Lapp Group Catalogue (aka com.prinovis.LappKabel) application 1.4 for Android does not verify X....
CVE-2014-6820 The Amebra Ameba (aka jp.honeytrap15.amebra) application 1.0.0 for Android does not verify X.509 cer...
CVE-2014-6821 The voetbal (aka nl.jborsje.android.voetbal.az) application 4.7.2 for Android does not verify X.509 ...
CVE-2014-6822 The Nerdico (aka com.nerdico.danielepais) application 1.9 Stable for Android does not verify X.509 c...
CVE-2014-6823 The kuailecaidengmi (aka com.licai.kuailecaidengmi) application 1.7.12.15 for Android does not verif...
CVE-2014-6824 The kamkomesan (aka com.anek.kamkomesan) application 1.0 for Android does not verify X.509 certifica...
CVE-2014-6825 The Teatro Franco Parenti (aka com.mintlab.mx.teatroparenti) application 1.4.0 for Android does not ...
CVE-2014-6826 The Tic-Tac To The MAX FREE (aka com.tothemax) application 1.2 for Android does not verify X.509 cer...
CVE-2014-6827 The DK ONLINE Beta (aka com.sgmobile.dkonline) application 1.0.2 for Android does not verify X.509 c...
CVE-2014-6828 The Gulf Credit Union (aka Fi_Mobile.Gulf) application 1.1 for Android does not verify X.509 certifi...
CVE-2014-6829 The Hook (aka com.hook.android) application 0.9.3 for Android does not verify X.509 certificates fro...
CVE-2014-6830 The Covet Fashion - Shopping Game (aka com.crowdstar.covetfashion) application 2.14.40 for Android d...
CVE-2014-6831 The Hippo Studio (aka com.appgreen.hippostudio) application 1.0 for Android does not verify X.509 ce...
CVE-2014-6832 The Bersa Forum (aka com.gcspublishing.bersaforum) application 3.9.16 for Android does not verify X....
CVE-2014-6833 The AuctionTrac Dealer (aka com.adesa.dealer.phone) application 2.0.3 for Android does not verify X....
CVE-2014-6834 The Instaroid - Instagram Viewer (aka net.muik.instaroid) application 1.2.1 for Android does not ver...
CVE-2014-6835 The Herbal Guide (aka com.pocket.herbal.guide) application 1.0 for Android does not verify X.509 cer...
CVE-2014-6836 The DS photo+ (aka com.synology.dsphoto) application 3.3 for Android does not verify X.509 certifica...
CVE-2014-6837 The Hillside (aka com.hillside.hermanus) application 1.1 for Android does not verify X.509 certifica...
CVE-2014-6838 The Groupama toujours la (aka com.groupama.toujoursla) application 1.3.0 for Android does not verify...
CVE-2014-6839 The Alma Corinthiana (aka com.alma.corinthiana) application 1.0 for Android does not verify X.509 ce...
CVE-2014-6840 The My Wedding Planner (aka app.wedding) application 1.5 for Android does not verify X.509 certifica...
CVE-2014-6841 The RTI INDIA (aka com.vbulletin.build_890) application 3.8.21 for Android does not verify X.509 cer...
CVE-2014-6842 The Daily Advertiser Print (aka com.lafayettedailyadv.android.prod) application 6.7 for Android does...
CVE-2014-6843 The Sweatshop (aka com.orderingapps.sweatshop) application 2.96 for Android does not verify X.509 ce...
CVE-2014-6844 The ABC Song (aka com.tabtale.abcsingalong) application 1.0.0 for Android does not verify X.509 cert...
CVE-2014-6845 The MediaFire (aka com.mediafire.android) application 1.1.1 for Android does not verify X.509 certif...
CVE-2014-6846 The Four Seasons Beverly Hills (aka com.intelitycorp.FourSeasons.android.ice) application @7F050007 ...
CVE-2014-6847 The Horoscopes and Dreams (aka com.horoscopesanddreams) application 1.0.1 for Android does not verif...
CVE-2014-6848 The DS file (aka com.synology.DSfile) application 4.1.1 for Android does not verify X.509 certificat...
CVE-2014-6849 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w...
R
CVE-2014-6850 The SED Account (aka com.starkville.smartapps) application 1.153.0034 for Android does not verify X....
CVE-2014-6851 The New Beginnings CFC (aka com.goodbarber.nbcfc) application 1.1 for Android does not verify X.509 ...
CVE-2014-6852 The LedLine.gr Official (aka com.automon.ledline.gr) application 1.4.0.9 for Android does not verify...
CVE-2014-6853 The Foxit MobilePDF - PDF Reader (aka com.foxit.mobile.pdf.lite) application 2.2.0.0616 for Android ...
CVE-2014-6854 The EyeXam (aka com.globaleyeventures.eyexam) application 1.4 for Android does not verify X.509 cert...
CVE-2014-6855 The Long (aka com.imop.longjiang.android) application 1.0.4 for Android does not verify X.509 certif...
CVE-2014-6856 The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certifica...
CVE-2014-6857 The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.50...
CVE-2014-6858 The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X....
CVE-2014-6859 The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.50...
CVE-2014-6860 The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not veri...
CVE-2014-6861 The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android...
CVE-2014-6862 The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certif...
CVE-2014-6863 The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does ...
CVE-2014-6864 The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android do...
CVE-2014-6865 The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.2...
CVE-2014-6866 The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify...
CVE-2014-6867 The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify ...
CVE-2014-6868 The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificat...
CVE-2014-6869 The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X....
CVE-2014-6870 The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 ...
CVE-2014-6871 The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) application 1.0.0 for Android does not verify X...
CVE-2014-6872 The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for Android does not verify X.509 certificates...
CVE-2014-6873 The AMGC (aka com.amec.uae) application 6.0 for Android does not verify X.509 certificates from SSL ...
CVE-2014-6874 The ModSim Connected (aka com.concursive.modsim) application 2.0 for Android does not verify X.509 c...
CVE-2014-6875 The Woodforest Mobile Banking (aka com.woodforest) application 3.1 for Android does not verify X.509...
CVE-2014-6876 The American Express Serve (aka com.serve.mobile) application @7F0901E4 for Android does not verify ...
CVE-2014-6877 The Santander Personal Banking (aka com.sovereign.santander) application 2.1 for Android does not ve...
CVE-2014-6878 The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) application 3.1 for Android does not verify X...
CVE-2014-6879 The Equifax Mobile (aka com.equifax) application 1.5 for Android does not verify X.509 certificates ...
CVE-2014-6880 The TradeHero (aka com.tradehero.th) application 2.2.5 for Android does not verify X.509 certificate...
CVE-2014-6881 The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android ...
CVE-2014-6882 The Western Federal Credit Union (aka com.kerrata.pulse.western) application 2.1 for Android does no...
CVE-2014-6883 The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not ver...
CVE-2014-6884 The Ford Credit Account Manager (aka com.fordcredit.accountmanager) application 1.0.1 for Android do...
CVE-2014-6885 The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for And...
CVE-2014-6886 The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not ver...
CVE-2014-6887 The EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X.509 ...
CVE-2014-6888 The PennyTalk Mobile (aka net.idt.pennytalk.android) application 2.0.3.0 for Android does not verify...
CVE-2014-6889 The GunBroker.com (aka com.gunbroker.android) application 1.1.2 for Android does not verify X.509 ce...
CVE-2014-6890 The CouponCabin - Coupons & Deals (aka com.couponcabin) application 3.6 for Android does not verify ...
CVE-2014-6891 The Vodafone Avantaj Cepte (aka com.vodafone.avantajcepte.main) application 1.4 for Android does not...
CVE-2014-6892 The kalahari.com Shopping (aka com.kalahari.shop) application 1.4.2.1 for Android does not verify X....
CVE-2014-6893 The Pushpins Grocery Coupons (aka com.pushpinsapp.pushpins) application 1.56 for Android does not ve...
CVE-2014-6894 The Lucktastic (aka com.lucktastic.scratch) application 1.2.6 for Android does not verify X.509 cert...
CVE-2014-6895 The Throne Rush (aka com.progrestar.bft) application 2.3.10 for Android does not verify X.509 certif...
CVE-2014-6896 The Yik Yak (aka com.yik.yak) application 2.0.002 for Android does not verify X.509 certificates fro...
CVE-2014-6897 The Skyrim Map (aka com.neko.skyrimmap) application 2.1 for Android does not verify X.509 certificat...
CVE-2014-6898 The Boopsie MyLibrary (aka com.bredir.boopsie.mylibrary) application 4.5.110 for Android does not ve...
CVE-2014-6899 The Jazeera Airways (aka com.winit.jazeeraairways) application 2.7 for Android does not verify X.509...
CVE-2014-6900 The EAGE Amsterdam 2014 (aka com.coreapps.android.followme.eage_2014) application 6.1.1.2 for Androi...
CVE-2014-6901 The RADIOS DEL ECUADOR (aka com.nobexinc.wls_87612622.rc) application 3.2.4 for Android does not ver...
CVE-2014-6902 The Anjuke (aka com.anjuke.android.app) application 7.1.7 for Android does not verify X.509 certific...
CVE-2014-6903 The Gulf Power Mobile Bill Pay (aka com.tionetworks.gulf) application 1 for Android does not verify ...
CVE-2014-6904 The Safe Browser - The Web Filter (aka com.cloudacl) application 1.2.5 for Android does not verify X...
CVE-2014-6905 The H2O Human Harmony Organization (aka com.netpia.ha.theh2o) application 1.6.5 for Android does not...
CVE-2014-6906 The Loli Chocolate Cake (aka com.alison.kang.chocolatecake) application 1.0.0 for Android does not v...
CVE-2014-6907 The Rakuten Install (aka co.jp.rakuten.installapp) application 1.5.0 for Android does not verify X.5...
CVE-2014-6908 The Forum IC (aka com.tapatalk.forumimmigrercom) application 3.3.12 for Android does not verify X.50...
CVE-2014-6909 The Coca-Cola FM Peru (aka com.enyetech.radio.coca_cola.fm_pe) application 2.0.41716 for Android doe...
CVE-2014-6910 The MemorizeIt! (aka com.kshinenterprises.kshinent.memorizeit) application 1.7.2 for Android does no...
CVE-2014-6911 The diziturky HD 2015 (aka com.adv.diziturky) application 2014 for Android does not verify X.509 cer...
CVE-2014-6912 The IRA's 59th Annual Conference (aka com.coreapps.android.followme.ira_14) application 6.0.7.6 for ...
CVE-2014-6913 The Dive The World (aka com.paperton.wl.divetheworld) application 1.53 for Android does not verify X...
CVE-2014-6914 The Houcine El Jasmi (aka com.devkhr31.houcineeljasmi) application 1.0 for Android does not verify X...
CVE-2014-6915 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7046, CVE-2014-7047. Reaso...
R
CVE-2014-6916 The mama.cn (aka cn.ziipin.mama.ui) application 1.02 for Android does not verify X.509 certificates ...
CVE-2014-6917 The www.knote.kr Smart (aka kr.or.knote.android) application 1.0.3 for Android does not verify X.509...
CVE-2014-6918 The Bikers Underground (aka hr.ap.n66871172) application 4.5.10 for Android does not verify X.509 ce...
CVE-2014-6919 The Metalcasting Newsstand (aka air.com.yudu.ReaderAIR3017071) application 3.12.0 for Android does n...
CVE-2014-6920 The Canal 44 (aka com.canal.canal44) application 1.0 for Android does not verify X.509 certificates ...
CVE-2014-6921 The Buckhorn Grill (aka com.orderingapps.buckhorn) application 2.8 for Android does not verify X.509...
CVE-2014-6922 The KFAI Community Radio (aka com.skyblue.pra.kfai) application 2.0.4 for Android does not verify X....
CVE-2014-6923 The Dubrovnik Guided Walking Tours (aka com.mytoursapp.android.app351) application 1.3.2 for Android...
CVE-2014-6924 The Metro News (aka com.netpia.ha.metro) application 1.6.5 for Android does not verify X.509 certifi...
CVE-2014-6925 The Steyr Forum (aka com.tapatalk.steyrclubcomvb) application 3.9.12 for Android does not verify X.5...
CVE-2014-6926 The Allt om Brollop (aka com.paperton.wl.alltombrollop) application 1.53 for Android does not verify...
CVE-2014-6927 The Myanmar Housing : mmHome (aka com.mmhome3) application 1.3 for Android does not verify X.509 cer...
CVE-2014-6928 The Rastreador de Celulares (aka com.mobincube.android.sc_9KTH8) application 5.0.0 for Android does ...
CVE-2014-6929 The AIHce 2014 (aka com.coreapps.android.followme.aihce2014) application 6.1.0.0 for Android does no...
CVE-2014-6930 The Abram Radio Groove! (aka com.nobexinc.wls_79226887.rc) application 3.2.3 for Android does not ve...
CVE-2014-6931 The Treves Dance Center (aka com.myapphone.android.myapptrvesdancecenter) application 1.0 for Androi...
CVE-2014-6932 The All Navalny (aka com.all.navalny) application 1.10 for Android does not verify X.509 certificate...
CVE-2014-6933 The Toraware Takojyou (aka ltd.pte.wavea.torawaretakojyou) application 1.3 for Android does not veri...
CVE-2014-6934 The Physics Chemistry Biology Quiz (aka com.pdevsmcqs.pcbmcqseries) application 1.8 for Android does...
CVE-2014-6935 The ColorMania - Color Quiz Game (aka com.ColormaniaColoringGames) application 1.4 for Android does ...
CVE-2014-6936 The IDS 2013 (aka de.mobileeventguide.ids2013) application 1.21 for Android does not verify X.509 ce...
CVE-2014-6937 The China CITIC Bank Credit Card (aka com.citiccard.mobilebank) application 3.3.6 for Android does n...
CVE-2014-6938 The Apostilas musicais (aka com.apostilas) application 1.0 for Android does not verify X.509 certifi...
CVE-2014-6939 The Sketch W Friends FREE -Tablets (aka air.com.xlabz.SketchWFriendsFree) application 5.0.0 for Andr...
CVE-2014-6940 The Absolute Lending Solutions (aka com.soln.S008F6C05EC0B63264B429F6D76286562) application 1.0073.b...
CVE-2014-6941 The NOS Alive (aka pt.optimus.optimusalive2011) application 5.1 for Android does not verify X.509 ce...
CVE-2014-6942 The Alisha Marie (Unofficial) (aka com.automon.ay.alisha.marie) application 1.4.0.6 for Android does...
CVE-2014-6943 The Konigsleiten (aka com.knigsleiten) application 1.0 for Android does not verify X.509 certificate...
CVE-2014-6944 The mitfahrgelegenheit.at (aka com.carpooling.android.at) application 2.3.0 for Android does not ver...
CVE-2014-6945 The Neeku Naaku Dash Dash (aka com.dakshaa.nndd) application 1.0 for Android does not verify X.509 c...
CVE-2014-6946 The Re:kyu (aka com.appzone619) application 1.0 for Android does not verify X.509 certificates from ...
CVE-2014-6947 The Archie Comics (aka com.iversecomics.archie.android) application 1.07 for Android does not verify...
CVE-2014-6948 The TH3 professional Al Mohtarif (aka com.th3professional.almohtarif) application 1.0 for Android do...
CVE-2014-6949 The Akne Ernahrung (aka com.rareartifact.akneernahrung72010074) application 1.0 for Android does not...
CVE-2014-6950 The Mt. Airy News (aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148) application 1.0069.b0069 for Andr...
CVE-2014-6951 The OneFile Ignite (aka uk.co.onefile.ignite) application 1.19 for Android does not verify X.509 cer...
CVE-2014-6952 The Manga Facts (aka app.mangafacts.ar) application 1.0 for Android does not verify X.509 certificat...
CVE-2014-6953 The AFTERLIFE WITH ARCHIE (aka com.afterlifewitharchie.afterlifewitharchie) application 2.4.1 for An...
CVE-2014-6954 The Deer Hunting Calls + Guide (aka com.anawaz.deerhuntingcalls.free) application 4.0.1 for Android ...
CVE-2014-6955 The Le Grand Bleu (aka com.appzone468) application 1.0 for Android does not verify X.509 certificate...
CVE-2014-6956 The Hydrogen Water (aka com.appzone628) application 1.0 for Android does not verify X.509 certificat...
CVE-2014-6957 The scottcolibmn (aka com.bredir.boopsie.scottlib) application 4.5.110 for Android does not verify X...
CVE-2014-6958 The ISMRM-ESMRMB 2014 (aka com.coreapps.android.followme.ismrm_esmrmb14) application 6.0.8.5 for And...
CVE-2014-6959 The QinCard (aka com.haowan.qincard) application 2.0 for Android does not verify X.509 certificates ...
CVE-2014-6960 The Multitrac (aka com.multitrac) application 1.04 for Android does not verify X.509 certificates fr...
CVE-2014-6961 The SudaniNet (aka com.sudaninet.wtwqiqbegq_btwlda) application 2.0 for Android does not verify X.50...
CVE-2014-6962 The Elk Grove PublicStuff (aka com.wassabi.elkgrove) application 3.2 for Android does not verify X.5...
CVE-2014-6963 The feiron (aka es.sw.feironmobile.app) application 1.1 for Android does not verify X.509 certificat...
CVE-2014-6964 The Hanyang University Admissions (aka kr.ac.hanyang.planner) application 2.1.3 for Android does not...
CVE-2014-6965 The FAZ.NET (aka net.faz.FAZ) application 1.0.1 for Android does not verify X.509 certificates from ...
CVE-2014-6966 The West Bend School District (aka net.parentlink.westbend) application 4.0.500 for Android does not...
CVE-2014-6967 The Albion College (aka com.vivomobile.albioncollege) application 2.1.16 for Android does not verify...
CVE-2014-6968 The Grandma's Grotto (aka com.mobileappsuite.grandmasgrotto) application 1 for Android does not veri...
CVE-2014-6969 The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certifi...
CVE-2014-6970 The North American Ismaili Games (aka hr.apps.n166983741) application 5.26.2 for Android does not ve...
CVE-2014-6971 The Easy Video Downloader (aka com.simon.padillar.EasyVideo) application 4.4.1 for Android does not ...
CVE-2014-6972 The Kazakhstan Radio (aka com.wordbox.kazakhstanRadio) application 2.5 for Android does not verify X...
CVE-2014-6973 The Care4Kids (aka com.codetherapy.care4kids) application 1.03 for Android does not verify X.509 cer...
CVE-2014-6974 The MifaShow Hairstyles (aka com.mifashow) application 3.7 for Android does not verify X.509 certifi...
CVE-2014-6975 The Twin Lin (aka com.twinlin.twmo) application 5 for Android does not verify X.509 certificates fro...
CVE-2014-6976 The Aeroexpress (aka ru.lynx.aero) application 2.6.2 for Android does not verify X.509 certificates ...
CVE-2014-6977 The eLearn (aka com.desire2learn.campuslife.chattanoogastate.edu.directory) application 1.0.649.1194...
CVE-2014-6978 The Karim Rahal Essoulami (aka com.karim.rahal.essoulami.lcxogeyuizteegxvnq) application 1.0 for And...
CVE-2014-6979 The MiWay Insurance Ltd (aka com.MiWay.MD) application 1.2 for Android does not verify X.509 certifi...
CVE-2014-6980 The LINE PLAY (aka jp.naver.lineplay.android) application 2.3.1.1 for Android does not verify X.509 ...
CVE-2014-6981 The Taiwan Business Bank (aka com.mitake.TBB) application 2.04 for Android does not verify X.509 cer...
CVE-2014-6982 The Arabic Troll Football (aka com.hamoosh.ArabicTrollFootball) application 1.0.1 for Android does n...
CVE-2014-6983 The NBE (aka com.nbe.app) application 1.1 for Android does not verify X.509 certificates from SSL se...
CVE-2014-6984 The Shots (aka com.shots.android) application 1.0.8 for Android does not verify X.509 certificates f...
CVE-2014-6985 The Georgia Packing (aka com.tapatalk.georgiapackingorg) application 3.9.16 for Android does not ver...
CVE-2014-6986 The Pregnancy Tips (aka com.rareartifact.tipsforpregnant71C80129) application 1.0 for Android does n...
CVE-2014-6987 The Mass Gaming TV (aka net.massgamers) application 1.0 for Android does not verify X.509 certificat...
CVE-2014-6988 The Quotes in Images (aka pt.lumberapps.imagensfrases) application 3.7.5 for Android does not verify...
CVE-2014-6989 The Germanwings (aka com.germanwings.android) application 2.1.13 for Android does not verify X.509 c...
CVE-2014-6990 The Albasit artes y danza (aka com.adianteventures.adianteapps.albasit_artes_y_danza) application 1....
CVE-2014-6991 The LiveAuctions.tv (aka air.LiveAndroidMaxx) application 2.005 for Android does not verify X.509 ce...
CVE-2014-6992 The Timeless Black (aka com.apptive.android.apps.timeless) application 2.10.6 for Android does not v...
CVE-2014-6993 The Codeeta Coupons (aka com.codeeta.promos) application 1.0.5 for Android does not verify X.509 cer...
CVE-2014-6994 The Atecea (aka com.atecea) application 1.2 for Android does not verify X.509 certificates from SSL ...
CVE-2014-6995 The adidas eyewear (aka com.adidasep.eyewear) application 1.2 for Android does not verify X.509 cert...
CVE-2014-6996 The Martial Arts Battle Card (aka com.tapenjoy.zjh.tw) application 1.0.9 for Android does not verify...
CVE-2014-6997 The Dino Village (aka com.tappocket.dinovillage) application 1.6 for Android does not verify X.509 c...
CVE-2014-6998 The PinkFong TV (aka kr.co.smartstudy.pinkfongtv_android_googlemarket) application 4 for Android doe...
CVE-2014-6999 The Questoes OAB (aka com.pedefeijao.questoesoab) application oab_android_1.2 for Android does not v...
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.