cve.nowby Sazabi

CVEs published October 2, 2014

54 CVEs were published on October 2, 2014: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 54
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 54
Now in CISA KEV: 0
Fix available: 2

Most affected products

keystone: 1
keystonemiddleware · python-keystoneclient: 1

Medium, low and unrated 54

CVE-2014-3621The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated…keystoneUnratedFix availableOct 2, 2014
CVE-2014-6242Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote…UnratedOct 2, 2014
CVE-2014-6414OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default…UnratedOct 2, 2014
CVE-2014-7144OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification…keystonemiddleware · python-keystoneclientUnratedFix availableOct 2, 2014
CVE-2014-7154Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM…UnratedOct 2, 2014
CVE-2014-7155The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode…UnratedOct 2, 2014
CVE-2014-7156The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor mode permissions…UnratedOct 2, 2014
CVE-2014-7157Cross-site scripting (XSS) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to inject arbitrary web…UnratedOct 2, 2014
CVE-2014-7158Cross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to hijack the…UnratedOct 2, 2014
CVE-2014-7188The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which…UnratedOct 2, 2014
CVE-2014-6856The AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509 certificates from SSL servers, which allows…UnratedOct 2, 2014
CVE-2014-6857The Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X.509 certificates from SSL servers, which…UnratedOct 2, 2014
CVE-2014-6858The Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify X.509 certificates from SSL servers…UnratedOct 2, 2014
CVE-2014-6859The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which…UnratedOct 2, 2014
CVE-2014-6860The Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not verify X.509 certificates from SSL…UnratedOct 2, 2014
CVE-2014-6861The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android does not verify X.509 certificates…UnratedOct 2, 2014
CVE-2014-6862The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows…UnratedOct 2, 2014
CVE-2014-6863The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorratturid) application 1.0 for Android does not verify X.509 certificates from SSL…UnratedOct 2, 2014
CVE-2014-6864The Forest River Forums (aka com.socialknowledge.forestriverforums) application 3.7.5 for Android does not verify X.509 certificates from…UnratedOct 2, 2014
CVE-2014-6865The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9056fafb33ecc8d.app) application 1.3.14.254 for Android does not verify X.509…UnratedOct 2, 2014
CVE-2014-6866The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers…UnratedOct 2, 2014
CVE-2014-6867The Sortir en Alsace (aka com.axessweb.sortirenalsace) application 0.5b for Android does not verify X.509 certificates from SSL servers…UnratedOct 2, 2014
CVE-2014-6868The DS audio (aka com.synology.DSaudio) application 3.4 for Android does not verify X.509 certificates from SSL servers, which allows…UnratedOct 2, 2014
CVE-2014-6869The barcode scanner (aka tw.com.books.android.plus) application 2.3.0 for Android does not verify X.509 certificates from SSL servers…UnratedOct 2, 2014
CVE-2014-6870The BGEnergy (aka com.bluegrass.smartapps) application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which…UnratedOct 2, 2014

Show all 54 entriesShow fewer entries