# CVEs published 2014-09-22

62 CVEs were published on September 22, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5700](https://cve.now/CVE-2012-5700.md): Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2014-0484](https://cve.now/CVE-2014-0484.md): The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment." (no CVSS)
- [CVE-2014-3595](https://cve.now/CVE-2014-3595.md): Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 th (no CVSS)
- [CVE-2014-3635](https://cve.now/CVE-2014-3635.md): Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max\_message\_unix (no CVSS)
- [CVE-2014-3637](https://cve.now/CVE-2014-3637.md): D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which (no CVSS)
- [CVE-2014-3638](https://cve.now/CVE-2014-3638.md): The bus\_connections\_check\_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a deni (no CVSS)
- [CVE-2014-3639](https://cve.now/CVE-2014-3639.md): The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a d (no CVSS)
- [CVE-2014-7153](https://cve.now/CVE-2014-7153.md): SQL injection vulnerability in the editgallery function in admin/gallery\_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress al (no CVSS)
- [CVE-2014-2942](https://cve.now/CVE-2014-2942.md): Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a pr (no CVSS)
- [CVE-2014-5665](https://cve.now/CVE-2014-5665.md): The Mzone Login (aka com.mr384.MzoneLogin) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-5809](https://cve.now/CVE-2014-5809.md): The Smart Browser (aka smartbrowser.geniuscloud) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-5971](https://cve.now/CVE-2014-5971.md): The Fiksu library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers (no CVSS)
- [CVE-2014-5982](https://cve.now/CVE-2014-5982.md): The RunKeeper - GPS Track Run Walk (aka com.fitnesskeeper.runkeeper.pro) application 4.7 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-5983](https://cve.now/CVE-2014-5983.md): The Threadflip : Buy, Sell Fashion (aka com.threadflip.android) application 1.1.11 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-5984](https://cve.now/CVE-2014-5984.md): The Little Dragons (aka com.playcomo.dragongame) application 1.0.256 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-5991](https://cve.now/CVE-2014-5991.md): The Skin Conditions and Diseases (aka com.appsgeyser.wSkinConditions) application 2.1 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-5992](https://cve.now/CVE-2014-5992.md): The successsecrets (aka com.alek.successsecrets) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-5993](https://cve.now/CVE-2014-5993.md): The MLB Preplay (aka com.preplay.android.mlb) application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-5994](https://cve.now/CVE-2014-5994.md): The ding\* ezetop. (no CVSS)
- [CVE-2014-5995](https://cve.now/CVE-2014-5995.md): The eWUS mobile (aka pl.dreryk.ewustest) application 1.4.5 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-5996](https://cve.now/CVE-2014-5996.md): The DEKRA Used Car Report (aka com.dekra.maengelreport) application 3.0.0 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-5997](https://cve.now/CVE-2014-5997.md): The Auto Trader (aka za.co.autotrader.android.app) application 2 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-5998](https://cve.now/CVE-2014-5998.md): The SkyDrive Assistant (aka com.dhh.sky) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-5999](https://cve.now/CVE-2014-5999.md): The autonavi (aka com.telenav.doudouyou.android.autonavi) application 4.6.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6000](https://cve.now/CVE-2014-6000.md): The FreshDirect (aka com.freshdirect.android) application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-6001](https://cve.now/CVE-2014-6001.md): The gewara (aka com.gewara) application 5.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl (no CVSS)
- [CVE-2014-6002](https://cve.now/CVE-2014-6002.md): The DTE Energy (aka com.dteenergy.mydte) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6003](https://cve.now/CVE-2014-6003.md): The Belas Frases de Amor (aka com.goodbarber.frasesdeamor) application 1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6004](https://cve.now/CVE-2014-6004.md): The Pocket Cam Photo Editor (aka mobi.pocketcam.editor) application 3 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6005](https://cve.now/CVE-2014-6005.md): The Survey.com Mobile (aka com.survey.android) application 3.2.16 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6006](https://cve.now/CVE-2014-6006.md): The Gratta & Vinci? (aka com.dreamstep.wGrattaevinci) application 0.21.13167.93474 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-6007](https://cve.now/CVE-2014-6007.md): The LikeHero Get Instagram Likes (aka com.fraoula.likehero) application 1.0.7 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-6008](https://cve.now/CVE-2014-6008.md): The Blitz Bingo (aka com.appMobi.sbbingo.app) application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6009](https://cve.now/CVE-2014-6009.md): The Zombie Detector (aka com.jimmybolstad.zombiedetector) application 1.2 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-6010](https://cve.now/CVE-2014-6010.md): The Rasta Weed Widgets HD (aka aw.awesomewidgets.rastaweed) application 4 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-6011](https://cve.now/CVE-2014-6011.md): The cutprice (aka kr.co.wedoit.cutprice) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6012](https://cve.now/CVE-2014-6012.md): The Gravity Bounce (aka net.toddm.gb) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-6013](https://cve.now/CVE-2014-6013.md): The nuSquare (aka tw.com.nuphoto.nusquare) application 1.0.78 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6014](https://cve.now/CVE-2014-6014.md): The Conquest Of Fantasia (aka air.com.ingen.studios.cof.sg) application 1.0.1 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-6015](https://cve.now/CVE-2014-6015.md): The TuCarro (aka com.tucarro) application 2.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid (no CVSS)
- [CVE-2014-6016](https://cve.now/CVE-2014-6016.md): The Celluloid (aka com.eurisko.celluloid) application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-6017](https://cve.now/CVE-2014-6017.md): The Doodle Drop (aka net.lazyer.DoodleDrop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-6018](https://cve.now/CVE-2014-6018.md): The global beauty research (aka com.appems.topgirl) application 1.6 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6019](https://cve.now/CVE-2014-6019.md): The psychology (aka com.alek.psychology) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6020](https://cve.now/CVE-2014-6020.md): The Fuel Rewards Network (aka com.excentus.frn) application 1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6021](https://cve.now/CVE-2014-6021.md): The Harley-Davidson Visa (aka com.usbank.icsmobile.harleydavidson) application 1.18 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-6022](https://cve.now/CVE-2014-6022.md): The Versent Books (aka com.versentbooks) application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6023](https://cve.now/CVE-2014-6023.md): The s-peek credit rating report (aka com.rhomobile.speek) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6636](https://cve.now/CVE-2014-6636.md): The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6637](https://cve.now/CVE-2014-6637.md): The Facebook Facts (aka com.wFacebookFacts) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6638](https://cve.now/CVE-2014-6638.md): The wTMDesktop (aka com.wTMDesktop) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-m (no CVSS)
- [CVE-2014-6639](https://cve.now/CVE-2014-6639.md): The TIO MobilePay - Bill Payments (aka com.tionetworks.mobile.android.tioclient) application 1.1.1 for Android does not verify X.509 certifi (no CVSS)
- [CVE-2014-6640](https://cve.now/CVE-2014-6640.md): The DNB Trade (aka lt.dnb.mobiletrade) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-6641](https://cve.now/CVE-2014-6641.md): The Homesteading Today (aka com.tapatalk.homesteadingtodaycom) application 3.7.14 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-6642](https://cve.now/CVE-2014-6642.md): The Mark's Daily Apple Forum (aka com.tapatalk.marksdailyapplecomforum) application 2.4.9.3 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-6643](https://cve.now/CVE-2014-6643.md): The FIAT Forum (aka com.tapatalk.fiatforumcom) application 3.8.41 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6645](https://cve.now/CVE-2014-6645.md): The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers (no CVSS)
- [CVE-2014-5316](https://cve.now/CVE-2014-5316.md): Cross-site scripting (XSS) vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a craft (no CVSS)
- [CVE-2014-5320](https://cve.now/CVE-2014-5320.md): The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name informatio (no CVSS)
- [CVE-2014-5321](https://cve.now/CVE-2014-5321.md): FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attac (no CVSS)
- [CVE-2014-5322](https://cve.now/CVE-2014-5322.md): Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows re (no CVSS)
- [CVE-2014-6602](https://cve.now/CVE-2014-6602.md): Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.