# CVEs published 2014-09-24

12 CVEs were published on September 24, 2014: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2014-6271](https://cve.now/CVE-2014-6271.md): GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac (CVSS 9.8, KEV)
- [CVE-2014-6693](https://cve.now/CVE-2014-6693.md): The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows… (no CVSS)
- [CVE-2014-6694](https://cve.now/CVE-2014-6694.md): The 5SOS Family Planet (aka uk.co.pixelkicks.fivesos) application 2.3.4 for Android does not verify X.509 certificates from SSL servers… (no CVSS)
- [CVE-2014-6695](https://cve.now/CVE-2014-6695.md): The Wedding Photo Frames-Love Pics (aka com.WeddingPhotoFramesLovePics) application 1.0 for Android does not verify X.509 certificates… (no CVSS)
- [CVE-2014-6696](https://cve.now/CVE-2014-6696.md): The Candy Girl Party Makeover (aka com.bearhugmedia.android\_candygirlparty) application 1.0.0.0 for Android does not verify X.509… (no CVSS)
- [CVE-2014-6697](https://cve.now/CVE-2014-6697.md): The Morocco Weather (aka com.mobilesoft.meteomaroc) application 3.1 for Android does not verify X.509 certificates from SSL servers, which… (no CVSS)
- [CVE-2014-6698](https://cve.now/CVE-2014-6698.md): The Galaxy Online 2 (aka air.com.igg.galaxyAPhone) application 1.2.3 for Android does not verify X.509 certificates from SSL servers… (no CVSS)
- [CVE-2014-6699](https://cve.now/CVE-2014-6699.md): The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which… (no CVSS)
- [CVE-2014-6700](https://cve.now/CVE-2014-6700.md): The NBA Game Time 2013-2014 (aka com.nbadigital.gametimelite) application 4.11 for Android does not verify X.509 certificates from SSL… (no CVSS)
- [CVE-2014-6701](https://cve.now/CVE-2014-6701.md): The Vendormate Mobile (aka com.vendormate.mobile) application 3.0 for Android does not verify X.509 certificates from SSL servers, which… (no CVSS)
- [CVE-2014-3380](https://cve.now/CVE-2014-3380.md): Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2014-5323](https://cve.now/CVE-2014-5323.md): The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko\_android) application 1.0.5 and earlier for Android does not verify X.509 certificates… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.