# CVEs published 2014-09-10

79 CVEs were published on September 10, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0351](https://cve.now/CVE-2014-0351.md): The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on FortiGate devices does not prevent use of anonym (no CVSS)
- [CVE-2014-4865](https://cve.now/CVE-2014-4865.md): Cross-site request forgery (CSRF) vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the auth (no CVSS)
- [CVE-2014-0554](https://cve.now/CVE-2014-0554.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0909](https://cve.now/CVE-2014-0909.md): The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 does not set the secure flag for the (no CVSS)
- [CVE-2014-3037](https://cve.now/CVE-2014-3037.md): Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle (no CVSS)
- [CVE-2014-3079](https://cve.now/CVE-2014-3079.md): The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to (no CVSS)
- [CVE-2014-3178](https://cve.now/CVE-2014-3178.md): Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause (no CVSS)
- [CVE-2014-3179](https://cve.now/CVE-2014-3179.md): Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service or possibly have oth (no CVSS)
- [CVE-2014-3343](https://cve.now/CVE-2014-3343.md): Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packet, aka Bug ID CSCuo5 (no CVSS)
- [CVE-2014-3348](https://cve.now/CVE-2014-3348.md): The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows (no CVSS)
- [CVE-2014-4756](https://cve.now/CVE-2014-4756.md): The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to (no CVSS)
- [CVE-2014-4783](https://cve.now/CVE-2014-4783.md): Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 befor (no CVSS)
- [CVE-2014-4784](https://cve.now/CVE-2014-4784.md): IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not (no CVSS)
- [CVE-2014-4785](https://cve.now/CVE-2014-4785.md): Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 befor (no CVSS)
- [CVE-2014-4786](https://cve.now/CVE-2014-4786.md): IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not (no CVSS)
- [CVE-2014-4787](https://cve.now/CVE-2014-4787.md): Cross-site scripting (XSS) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0. (no CVSS)
- [CVE-2014-4788](https://cve.now/CVE-2014-4788.md): IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not (no CVSS)
- [CVE-2014-4789](https://cve.now/CVE-2014-4789.md): Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, an (no CVSS)
- [CVE-2014-4864](https://cve.now/CVE-2014-4864.md): The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote a (no CVSS)
- [CVE-2014-5313](https://cve.now/CVE-2014-5313.md): Cross-site scripting (XSS) vulnerability in the management page in Six Apart Movable Type before 5.2 allows remote authenticated users to in (no CVSS)
- [CVE-2014-5857](https://cve.now/CVE-2014-5857.md): The White & Yellow Pages (aka com.avantar.wny) application 5.1.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-5858](https://cve.now/CVE-2014-5858.md): The Candy Blast (aka com.appgame7.candyblast) application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-5859](https://cve.now/CVE-2014-5859.md): The Star Girl: Colors of Spring (aka com.animoca.google.starGirlSpring) application 3.4.1 for Android does not verify X.509 certificates fro (no CVSS)
- [CVE-2014-5860](https://cve.now/CVE-2014-5860.md): The Slide Show Creator (aka com.amem) application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-5861](https://cve.now/CVE-2014-5861.md): The BoyAhoy - Gay Chat (aka com.boyahoy.android) application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-5862](https://cve.now/CVE-2014-5862.md): The ecalendar2 (aka cn.etouch.ecalendar2) application 4.5.3 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6074](https://cve.now/CVE-2014-6074.md): IBM UrbanCode Deploy 6.1.0.2 before IF1 allows remote authenticated users to read keystore secret keys via a direct request to a UI page. (no CVSS)
- [CVE-2014-0547](https://cve.now/CVE-2014-0547.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0548](https://cve.now/CVE-2014-0548.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0549](https://cve.now/CVE-2014-0549.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0550](https://cve.now/CVE-2014-0550.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0551](https://cve.now/CVE-2014-0551.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0552](https://cve.now/CVE-2014-0552.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0553](https://cve.now/CVE-2014-0553.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2 (no CVSS)
- [CVE-2014-0555](https://cve.now/CVE-2014-0555.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0556](https://cve.now/CVE-2014-0556.md): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.2 (no CVSS)
- [CVE-2014-0557](https://cve.now/CVE-2014-0557.md): Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0559](https://cve.now/CVE-2014-0559.md): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.2 (no CVSS)
- [CVE-2014-2799](https://cve.now/CVE-2014-2799.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4059](https://cve.now/CVE-2014-4059.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4065](https://cve.now/CVE-2014-4065.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4068](https://cve.now/CVE-2014-4068.md): The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle excepti (no CVSS)
- [CVE-2014-4070](https://cve.now/CVE-2014-4070.md): Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2014-4071](https://cve.now/CVE-2014-4071.md): The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via (no CVSS)
- [CVE-2014-4072](https://cve.now/CVE-2014-4072.md): Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request data (no CVSS)
- [CVE-2014-4074](https://cve.now/CVE-2014-4074.md): The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to g (no CVSS)
- [CVE-2014-4079](https://cve.now/CVE-2014-4079.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4080](https://cve.now/CVE-2014-4080.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-4081](https://cve.now/CVE-2014-4081.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4082](https://cve.now/CVE-2014-4082.md): Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4083](https://cve.now/CVE-2014-4083.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4084](https://cve.now/CVE-2014-4084.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4085](https://cve.now/CVE-2014-4085.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4086](https://cve.now/CVE-2014-4086.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2014-4087](https://cve.now/CVE-2014-4087.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4088](https://cve.now/CVE-2014-4088.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4089](https://cve.now/CVE-2014-4089.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-4090](https://cve.now/CVE-2014-4090.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4091](https://cve.now/CVE-2014-4091.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-4092](https://cve.now/CVE-2014-4092.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4093](https://cve.now/CVE-2014-4093.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4094](https://cve.now/CVE-2014-4094.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4095](https://cve.now/CVE-2014-4095.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4096](https://cve.now/CVE-2014-4096.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4097](https://cve.now/CVE-2014-4097.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4098](https://cve.now/CVE-2014-4098.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4099](https://cve.now/CVE-2014-4099.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4100](https://cve.now/CVE-2014-4100.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4101](https://cve.now/CVE-2014-4101.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4102](https://cve.now/CVE-2014-4102.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-4103](https://cve.now/CVE-2014-4103.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4104](https://cve.now/CVE-2014-4104.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4105](https://cve.now/CVE-2014-4105.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4106](https://cve.now/CVE-2014-4106.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4107](https://cve.now/CVE-2014-4107.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4108](https://cve.now/CVE-2014-4108.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4109](https://cve.now/CVE-2014-4109.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4110](https://cve.now/CVE-2014-4110.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4111](https://cve.now/CVE-2014-4111.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.