# CVEs published 2014-09-19 35 CVEs were published on September 19, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-2588](https://cve.now/CVE-2012-2588.md): Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2012-6659](https://cve.now/CVE-2012-6659.md): Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2014-3614](https://cve.now/CVE-2014-3614.md): Unspecified vulnerability in PowerDNS Recursor (aka pdns\_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service ( (no CVSS) - [CVE-2006-1318](https://cve.now/CVE-2006-1318.md): Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record le (no CVSS) - [CVE-2014-1391](https://cve.now/CVE-2014-1391.md): QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corru (no CVSS) - [CVE-2014-4350](https://cve.now/CVE-2014-4350.md): Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS) - [CVE-2014-4376](https://cve.now/CVE-2014-4376.md): IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 allows attackers to execute arbitrary code in a privileged context or cause a denia (no CVSS) - [CVE-2014-4390](https://cve.now/CVE-2014-4390.md): Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged (no CVSS) - [CVE-2014-4393](https://cve.now/CVE-2014-4393.md): Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute (no CVSS) - [CVE-2014-4394](https://cve.now/CVE-2014-4394.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4395](https://cve.now/CVE-2014-4395.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4396](https://cve.now/CVE-2014-4396.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4397](https://cve.now/CVE-2014-4397.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4398](https://cve.now/CVE-2014-4398.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4399](https://cve.now/CVE-2014-4399.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4400](https://cve.now/CVE-2014-4400.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4401](https://cve.now/CVE-2014-4401.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4402](https://cve.now/CVE-2014-4402.md): An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attack (no CVSS) - [CVE-2014-4403](https://cve.now/CVE-2014-4403.md): The kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information and bypass the ASLR protection mechanism b (no CVSS) - [CVE-2014-4406](https://cve.now/CVE-2014-4406.md): Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to i (no CVSS) - [CVE-2014-4416](https://cve.now/CVE-2014-4416.md): An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly valid (no CVSS) - [CVE-2014-4424](https://cve.now/CVE-2014-4424.md): SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attacke (no CVSS) - [CVE-2014-5958](https://cve.now/CVE-2014-5958.md): The ChatBox - Chat Rooms (aka com.droidchatroom.messengerapp) application 2.5 for Android does not verify X.509 certificates from SSL server (no CVSS) - [CVE-2014-5959](https://cve.now/CVE-2014-5959.md): The tx Smart (aka com.wooriwm.txsmart) application 7.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS) - [CVE-2014-5960](https://cve.now/CVE-2014-5960.md): The BundesArztsuche (aka de.kbv.bas) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS) - [CVE-2014-5961](https://cve.now/CVE-2014-5961.md): The russiananime (aka com.rareartifact.russiananime68A5CCFE) application 1 for Android does not verify X.509 certificates from SSL servers, (no CVSS) - [CVE-2014-5962](https://cve.now/CVE-2014-5962.md): The Guess The Actor (aka com.gamelikeinc.actors) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS) - [CVE-2014-5963](https://cve.now/CVE-2014-5963.md): The Halieutics (aka com.corn.Halieutics) application 21.40.5 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS) - [CVE-2014-5964](https://cve.now/CVE-2014-5964.md): The MegaBank (aka com.megabank.mobilebank) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS) - [CVE-2014-5965](https://cve.now/CVE-2014-5965.md): The GrooveMusic (aka com.mobincube.android.sc\_2HKFF) application 2.0.0 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS) - [CVE-2014-5966](https://cve.now/CVE-2014-5966.md): The Dreamland Super Theme GO Gold (aka com.gau.go.launcherex.viptheme.dreamland.gold) application 1 for Android does not verify X.509 certif (no CVSS) - [CVE-2014-5967](https://cve.now/CVE-2014-5967.md): The Designs Nail Arts (aka com.decoracionesnailart.flickr) application 3.6.1 for Android does not verify X.509 certificates from SSL servers (no CVSS) - [CVE-2014-5968](https://cve.now/CVE-2014-5968.md): The iGolf - Golf GPS (aka com.igolf) application 20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS) - [CVE-2014-5969](https://cve.now/CVE-2014-5969.md): The healthylifestyle (aka com.alek.healthylifestyle) application 1.2.2 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS) - [CVE-2014-5970](https://cve.now/CVE-2014-5970.md): The BabyBus (aka com.sinyee.babybus.concert.ru) application 3.91 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-09-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.