# CVEs published 2014-09-17 32 CVEs were published on September 17, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-2956](https://cve.now/CVE-2012-2956.md): SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter (no CVSS) - [CVE-2012-6658](https://cve.now/CVE-2012-6658.md): Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2012-1032](https://cve.now/CVE-2012-1032.md): Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject (no CVSS) - [CVE-2012-1417](https://cve.now/CVE-2012-1417.md): Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated (no CVSS) - [CVE-2012-1506](https://cve.now/CVE-2012-1506.md): SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated (no CVSS) - [CVE-2012-1507](https://cve.now/CVE-2012-1507.md): Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.7 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2012-2583](https://cve.now/CVE-2012-2583.md): Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary (no CVSS) - [CVE-2014-5234](https://cve.now/CVE-2014-5234.md): Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows (no CVSS) - [CVE-2014-5235](https://cve.now/CVE-2014-5235.md): Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allow (no CVSS) - [CVE-2014-0560](https://cve.now/CVE-2014-0560.md): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to (no CVSS) - [CVE-2014-0561](https://cve.now/CVE-2014-0561.md): Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to e (no CVSS) - [CVE-2014-0562](https://cve.now/CVE-2014-0562.md): Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on OS X allows remote attac (no CVSS) - [CVE-2014-0563](https://cve.now/CVE-2014-0563.md): Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to cause a denial of service (memor (no CVSS) - [CVE-2014-0565](https://cve.now/CVE-2014-0565.md): Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS) - [CVE-2014-0566](https://cve.now/CVE-2014-0566.md): Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause (no CVSS) - [CVE-2014-0567](https://cve.now/CVE-2014-0567.md): Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to e (no CVSS) - [CVE-2014-0568](https://cve.now/CVE-2014-0568.md): The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows (no CVSS) - [CVE-2014-4621](https://cve.now/CVE-2014-4621.md): EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of (no CVSS) - [CVE-2014-4622](https://cve.now/CVE-2014-4622.md): EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of (no CVSS) - [CVE-2014-5906](https://cve.now/CVE-2014-5906.md): The Lil Wayne Slots: FREE SLOTS (aka com.lilwayneslots.slots.android) application 1.138 for Android does not verify X.509 certificates from (no CVSS) - [CVE-2014-5907](https://cve.now/CVE-2014-5907.md): The Pet Salon (aka com.libiitech.petsalon) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS) - [CVE-2014-5908](https://cve.now/CVE-2014-5908.md): The Kmart (aka com.kmart.android) application @7F0C00EF for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS) - [CVE-2014-5909](https://cve.now/CVE-2014-5909.md): The watcha (aka com.frograms.watcha) application 2.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS) - [CVE-2014-5910](https://cve.now/CVE-2014-5910.md): The Dog Whistle (aka com.dogwhistle.dogtrainingandroidapp) application 1.9 for Android does not verify X.509 certificates from SSL servers, (no CVSS) - [CVE-2014-5911](https://cve.now/CVE-2014-5911.md): The Free App Icons & Icon Packs (aka com.jellytap.cooliconfinder) application 1.4 for Android does not verify X.509 certificates from SSL se (no CVSS) - [CVE-2014-5912](https://cve.now/CVE-2014-5912.md): The InNote (aka com.intsig.notes) application 1.0.3.20131119 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS) - [CVE-2014-5913](https://cve.now/CVE-2014-5913.md): The Allies in War (aka com.gamelion.aiw) application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS) - [CVE-2014-5914](https://cve.now/CVE-2014-5914.md): The Finansbank Cep Subesi (aka com.finansbank.mobile.cepsube) application 1.1.5 for Android does not verify X.509 certificates from SSL serv (no CVSS) - [CVE-2014-5915](https://cve.now/CVE-2014-5915.md): The Tigo Copa Mundial FIFA 2014 (aka com.fwc2014.millicom.and) application 3.1 for Android does not verify X.509 certificates from SSL serve (no CVSS) - [CVE-2014-5916](https://cve.now/CVE-2014-5916.md): The Minha Oi (aka br.com.mobicare.minhaoi) application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS) - [CVE-2014-5917](https://cve.now/CVE-2014-5917.md): The Slideshow 365 (aka com.Slideshow) application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS) - [CVE-2014-5918](https://cve.now/CVE-2014-5918.md): The Secret Circle - talk freely (aka com.easyxapp.secret) application 2.2.00.26 for Android does not verify X.509 certificates from SSL serv (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-09-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.