# CVEs published 2014-09-15

27 CVEs were published on September 15, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0993](https://cve.now/CVE-2014-0993.md): Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.1559 (no CVSS)
- [CVE-2014-2375](https://cve.now/CVE-2014-2375.md): Ecava IntegraXor SCADA Server External Control of File Name or Path (no CVSS, Ecava IntegraXor SCADA Server)
- [CVE-2014-2376](https://cve.now/CVE-2014-2376.md): Ecava IntegraXor SCADA Server SQL Injection (no CVSS, Ecava IntegraXor SCADA Server)
- [CVE-2014-2377](https://cve.now/CVE-2014-2377.md): Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables (no CVSS, Ecava IntegraXor SCADA Server)
- [CVE-2014-3077](https://cve.now/CVE-2014-3077.md): IBM SONAS and System Storage Storwize V7000 Unified (aka V7000U) 1.3.x and 1.4.x before 1.4.3.4 store the chkauth password in the audit log, (no CVSS)
- [CVE-2014-3617](https://cve.now/CVE-2014-3617.md): The forum\_print\_latest\_discussions function in mod/forum/lib.php in Moodle through 2.4.11, 2.5.x before 2.5.8, 2.6.x before 2.6.5, and 2.7.x (no CVSS, moodle/moodle)
- [CVE-2014-3796](https://cve.now/CVE-2014-3796.md): VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate i (no CVSS)
- [CVE-2014-4763](https://cve.now/CVE-2014-4763.md): Cross-site scripting (XSS) vulnerability in Content Navigator in Content Engine in IBM FileNet Content Manager 5.2.x before 5.2.0.3-P8CPE-IF (no CVSS)
- [CVE-2014-5407](https://cve.now/CVE-2014-5407.md): Schneider Electric VAMPSET Stack-based Buffer Overflow (no CVSS, Schneider Electric VAMPSET)
- [CVE-2014-5889](https://cve.now/CVE-2014-5889.md): The Android Forums (aka com.tapatalk.androidforumscom) application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-5890](https://cve.now/CVE-2014-5890.md): The KBO sports2i 2014 (aka com.sports2i) application 5.1.00 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-5891](https://cve.now/CVE-2014-5891.md): The SnipSnap Coupon App (aka com.snipsnap.snipsnapapp) application 1.1.11 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-5892](https://cve.now/CVE-2014-5892.md): The greenbill (aka com.show.greenbill\_G) application 2.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-5893](https://cve.now/CVE-2014-5893.md): The froyo (aka com.shinsegae.mobile.froyo) application 5.1.3 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-5894](https://cve.now/CVE-2014-5894.md): The AireTalk: Text, Call, & More! (aka com.pingshow.amper) application 2.0.73 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-5895](https://cve.now/CVE-2014-5895.md): The ShopYourWay (aka com.sears.shopyourway) application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-5896](https://cve.now/CVE-2014-5896.md): The GlobalTalk- free phone calls (aka com.seawolftech.globaltalk) application 2.1.4 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-5897](https://cve.now/CVE-2014-5897.md): The Parallel Mafia MMORPG (aka com.perblue.pm.client) application @7F070000 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-5898](https://cve.now/CVE-2014-5898.md): The Heavy Duty Truck Driver Simulator 3D (aka com.oas.heavy.duty.truck.driver.simulator3d) application 1.0.5 for Android does not verify X.5 (no CVSS)
- [CVE-2014-5899](https://cve.now/CVE-2014-5899.md): The Nespresso (aka com.nespresso.activities) application 2.4.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-5900](https://cve.now/CVE-2014-5900.md): The myHomework Student Planner (aka com.myhomeowork) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-5901](https://cve.now/CVE-2014-5901.md): The Beauty Bible - App for Girls (aka com.my.beauty.bible) application 5 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-5902](https://cve.now/CVE-2014-5902.md): The UA Cinemas - Mobile ticketing (aka com.mtel.uacinemaapps) application 2.9 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-5903](https://cve.now/CVE-2014-5903.md): The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-5904](https://cve.now/CVE-2014-5904.md): The MiniInTheBox Online Shopping (aka com.miniinthebox.android) application 2.0.0 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-5905](https://cve.now/CVE-2014-5905.md): The Grocery List - Tomatoes (aka com.meucarrinho) application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6392](https://cve.now/CVE-2014-6392.md): Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inj (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.