# CVEs published 2014-09-23

59 CVEs were published on September 23, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4752](https://cve.now/CVE-2014-4752.md): IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, (no CVSS)
- [CVE-2014-4770](https://cve.now/CVE-2014-4770.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0 (no CVSS)
- [CVE-2014-4816](https://cve.now/CVE-2014-4816.md): Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47 (no CVSS)
- [CVE-2014-3103](https://cve.now/CVE-2014-3103.md): The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure fl (no CVSS)
- [CVE-2014-3104](https://cve.now/CVE-2014-3104.md): IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2014-3105](https://cve.now/CVE-2014-3105.md): The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8. (no CVSS)
- [CVE-2014-3106](https://cve.now/CVE-2014-3106.md): IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access On (no CVSS)
- [CVE-2014-6091](https://cve.now/CVE-2014-6091.md): Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management (SPM) 6.0.4 before 6.0.4.5 iFix7 allows remote authenticated (no CVSS)
- [CVE-2014-3090](https://cve.now/CVE-2014-3090.md): IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2014-3101](https://cve.now/CVE-2014-3101.md): The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not (no CVSS)
- [CVE-2014-4973](https://cve.now/CVE-2014-4973.md): The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security (no CVSS)
- [CVE-2014-5392](https://cve.now/CVE-2014-5392.md): XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2014-6646](https://cve.now/CVE-2014-6646.md): The bellyhoodcom (aka com.tapatalk.bellyhoodcom) application 3.4.23 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6647](https://cve.now/CVE-2014-6647.md): The ElForro.com (aka com.tapatalk.elforrocom) application 2.4.3.10 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6648](https://cve.now/CVE-2014-6648.md): The iPhone4.TW (aka com.tapatalk.iPhone4TWforums) application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6649](https://cve.now/CVE-2014-6649.md): The MyBroadband Tapatalk (aka com.tapatalk.mybroadbandcozavb) application 3.9.22 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6650](https://cve.now/CVE-2014-6650.md): The NextGenUpdate (aka com.tapatalk.nextgenupdatecomforums) application 3.1.6 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-6651](https://cve.now/CVE-2014-6651.md): The Planet of the Vapes Forum (aka com.tapatalk.planetofthevapescoukforums) application 3.7.9 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-6652](https://cve.now/CVE-2014-6652.md): The Wizaz Forum (aka com.tapatalk.wizazplforum) application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6653](https://cve.now/CVE-2014-6653.md): The Afghan Radio (aka com.wordbox.afghanRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6654](https://cve.now/CVE-2014-6654.md): The wTrootrooTvIzle (aka com.wTrootrooTvIzle) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6655](https://cve.now/CVE-2014-6655.md): The Tortoise Forum (aka org.tortoiseforum.android.forumrunner) application 3.5.16 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-6656](https://cve.now/CVE-2014-6656.md): The drareym (aka com.drareym) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl (no CVSS)
- [CVE-2014-6657](https://cve.now/CVE-2014-6657.md): The Leadership Newspapers (aka com.LeadershipNewspapers) application 1.2 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6658](https://cve.now/CVE-2014-6658.md): The Apploi Job Search- Find Jobs (aka com.apploi) application 4.19 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6659](https://cve.now/CVE-2014-6659.md): The Defence.pk (aka com.tapatalk.defencepkforums) application 2.4.13.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6660](https://cve.now/CVE-2014-6660.md): The Koleksi Hadis Nabi SAW (aka com.wKoleksiHadisNabiSAW) application 0.1 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-6661](https://cve.now/CVE-2014-6661.md): The netease movie (aka com.netease.movie) application 4.7.2 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6662](https://cve.now/CVE-2014-6662.md): The Forum Krstarice (aka com.tapatalk.forumkrstaricacom) application 3.5.14 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6663](https://cve.now/CVE-2014-6663.md): The Addis Gag Funny Amharic Pic (aka com.wAmharicFunnyPicture) application 0.1 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-6664](https://cve.now/CVE-2014-6664.md): The Latin Angels Music HD (aka com.applizards.lafreetj) application 2.0 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6665](https://cve.now/CVE-2014-6665.md): The Ahmed Bukhatir Nasheeds TV (aka com.wAhmedBukhatirApp) application 1.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6666](https://cve.now/CVE-2014-6666.md): The Baglamukhi (aka com.wshribaglamukhiblog) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-6667](https://cve.now/CVE-2014-6667.md): The racemotocross (aka com.bossappsmk.racemotocross) application 1.2 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6668](https://cve.now/CVE-2014-6668.md): The African Radios Live (aka com.nana.africanradioslive) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6669](https://cve.now/CVE-2014-6669.md): The Inside Crochet (aka com.magazinecloner.insidecrochet) application @7F08017A for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-6670](https://cve.now/CVE-2014-6670.md): The SingaporeMotherhood Forum (aka com.tapatalk.singaporemotherhoodcomforum) application 3.6.6 for Android does not verify X.509 certificate (no CVSS)
- [CVE-2014-6671](https://cve.now/CVE-2014-6671.md): The World Cup 2014 Brazil - Xem TV (aka vn.letshare.football.worldcup) application 2.6 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-6672](https://cve.now/CVE-2014-6672.md): The Friendcaster (aka uk.co.senab.blueNotifyFree) application 5.4.5 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6673](https://cve.now/CVE-2014-6673.md): The ChallengerTX (aka com.zhtiantian.ChallengerTX) application 3.9.12.5 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6674](https://cve.now/CVE-2014-6674.md): The Amazighmusic (aka nl.appsandroo.Amazighmusic) application 1.0 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6675](https://cve.now/CVE-2014-6675.md): The Ruta Exacta (aka com.rutaexacta.m) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6676](https://cve.now/CVE-2014-6676.md): The Exercitii pentru abdomen (aka com.rareartifact.exercitiipentruabdomen41E29322) application 1.0 for Android does not verify X.509 certifi (no CVSS)
- [CVE-2014-6677](https://cve.now/CVE-2014-6677.md): The Ticket Round Up (aka com.xcr.android.ticketroundupapp) application 3.0.1 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-6678](https://cve.now/CVE-2014-6678.md): The Algeria Radio (aka com.wordbox.algeriaRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-6679](https://cve.now/CVE-2014-6679.md): The wEPISDParentPortal (aka com.dreamstep.wEPISDParentPortal) application 1.0 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-6680](https://cve.now/CVE-2014-6680.md): The superheroquiz (aka com.davidhey.superheroquiz) application 1.0 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6681](https://cve.now/CVE-2014-6681.md): The Mahabharata Audiocast (aka com.wordbox.mahabharataAudiocast) application 1.0 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6682](https://cve.now/CVE-2014-6682.md): The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-6683](https://cve.now/CVE-2014-6683.md): The Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6684](https://cve.now/CVE-2014-6684.md): The MOL bringaPONT (aka hu.mol.bringapont) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6685](https://cve.now/CVE-2014-6685.md): The Tsushima Travel Guide (aka com.netjapan.ntsushima) application 1.9 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6686](https://cve.now/CVE-2014-6686.md): The Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6687](https://cve.now/CVE-2014-6687.md): The wSaudichannelAlNasr (aka com.wSaudichannelAlNasr) application 0.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6688](https://cve.now/CVE-2014-6688.md): The Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6689](https://cve.now/CVE-2014-6689.md): The JW Cards (aka com.jingwei.card) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-6690](https://cve.now/CVE-2014-6690.md): The InstaMessage - Instagram Chat (aka com.futurebits.instamessage.free) application 1.6.2 for Android does not verify X.509 certificates fr (no CVSS)
- [CVE-2014-6691](https://cve.now/CVE-2014-6691.md): The UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-6692](https://cve.now/CVE-2014-6692.md): The Kingsoft Clip (Office Tool) (aka cn.wps.clip) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.