# CVEs published 2014-09-20

41 CVEs were published on September 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0985](https://cve.now/CVE-2014-0985.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0986](https://cve.now/CVE-2014-0986.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0987](https://cve.now/CVE-2014-0987.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0988](https://cve.now/CVE-2014-0988.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0989](https://cve.now/CVE-2014-0989.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0990](https://cve.now/CVE-2014-0990.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0991](https://cve.now/CVE-2014-0991.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-0992](https://cve.now/CVE-2014-0992.md): Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via t (no CVSS)
- [CVE-2014-3367](https://cve.now/CVE-2014-3367.md): Cross-site scripting (XSS) vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers (no CVSS)
- [CVE-2014-3376](https://cve.now/CVE-2014-3376.md): Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID C (no CVSS)
- [CVE-2014-3377](https://cve.now/CVE-2014-3377.md): snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 (no CVSS)
- [CVE-2014-3378](https://cve.now/CVE-2014-3378.md): tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet (no CVSS)
- [CVE-2014-3379](https://cve.now/CVE-2014-3379.md): Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card h (no CVSS)
- [CVE-2014-5972](https://cve.now/CVE-2014-5972.md): The Loving - Couple Essential (aka com.xiaoenai.app) application 4.0.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-5973](https://cve.now/CVE-2014-5973.md): The Aquarium Advice (aka com.socialknowledge.aquariumadvice) application 3.7.6 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-5974](https://cve.now/CVE-2014-5974.md): The PSECU Mobile+ (aka com.Vertifi.Mobile.P231381116) application 2.2 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-5975](https://cve.now/CVE-2014-5975.md): The eponyms (aka com.anddeveloper.eponyms) application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-5976](https://cve.now/CVE-2014-5976.md): The alibaba (aka com.alibaba.wireless) application 4.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-5977](https://cve.now/CVE-2014-5977.md): The Mobile Face (aka com.wFacemobile) application 0.74.13432.91159 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-5978](https://cve.now/CVE-2014-5978.md): The memetan (aka memetan.android.com.activity) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-5979](https://cve.now/CVE-2014-5979.md): The TV Bengali Open Directory (aka com.TVBengali) application 1.4 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-5980](https://cve.now/CVE-2014-5980.md): The Genertel (aka com.genertel) application 2.6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-m (no CVSS)
- [CVE-2014-5981](https://cve.now/CVE-2014-5981.md): The MoWeather (aka com.moji.moweather) application 1.40.05 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-5985](https://cve.now/CVE-2014-5985.md): The Animal Kaiser Zangetsu (aka com.wAnimalKaiserZangetsu) application 0.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-5986](https://cve.now/CVE-2014-5986.md): The Educational Puzzles - Letters (aka com.EducationalPuzzlesLetters) application 2 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-5987](https://cve.now/CVE-2014-5987.md): The My3 - by 3HK (aka com.my3) application @7F0A0001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-5988](https://cve.now/CVE-2014-5988.md): The Azkend Gold (aka com.the10tons.azkend.gold) application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-5989](https://cve.now/CVE-2014-5989.md): The baby days (aka jp.co.cyberagent.babydays) application 1.5.8 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-5990](https://cve.now/CVE-2014-5990.md): The cookbible (aka net.bookjam.cookbible) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6421](https://cve.now/CVE-2014-6421.md): Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service (a (no CVSS)
- [CVE-2014-6422](https://cve.now/CVE-2014-6422.md): The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to caus (no CVSS)
- [CVE-2014-6423](https://cve.now/CVE-2014-6423.md): The tvb\_raw\_text\_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x befor (no CVSS)
- [CVE-2014-6424](https://cve.now/CVE-2014-6424.md): The dissect\_v9\_v10\_pdu\_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.1 (no CVSS)
- [CVE-2014-6425](https://cve.now/CVE-2014-6425.md): The (1) get\_quoted\_string and (2) get\_unquoted\_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x b (no CVSS)
- [CVE-2014-6426](https://cve.now/CVE-2014-6426.md): The dissect\_hip\_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle (no CVSS)
- [CVE-2014-6427](https://cve.now/CVE-2014-6427.md): Off-by-one error in the is\_rtsp\_request\_or\_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before (no CVSS)
- [CVE-2014-6428](https://cve.now/CVE-2014-6428.md): The dissect\_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 d (no CVSS)
- [CVE-2014-6429](https://cve.now/CVE-2014-6429.md): The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1. (no CVSS)
- [CVE-2014-6430](https://cve.now/CVE-2014-6430.md): The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1. (no CVSS)
- [CVE-2014-6431](https://cve.now/CVE-2014-6431.md): Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 a (no CVSS)
- [CVE-2014-6432](https://cve.now/CVE-2014-6432.md): The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.