# CVEs published 2014-09-24

12 CVEs were published on September 24, 2014: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2014-6271](https://cve.now/CVE-2014-6271.md): GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac (CVSS 9.8, KEV)
- [CVE-2014-6693](https://cve.now/CVE-2014-6693.md): The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mi (no CVSS)
- [CVE-2014-6694](https://cve.now/CVE-2014-6694.md): The 5SOS Family Planet (aka uk.co.pixelkicks.fivesos) application 2.3.4 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6695](https://cve.now/CVE-2014-6695.md): The Wedding Photo Frames-Love Pics (aka com.WeddingPhotoFramesLovePics) application 1.0 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-6696](https://cve.now/CVE-2014-6696.md): The Candy Girl Party Makeover (aka com.bearhugmedia.android\_candygirlparty) application 1.0.0.0 for Android does not verify X.509 certificat (no CVSS)
- [CVE-2014-6697](https://cve.now/CVE-2014-6697.md): The Morocco Weather (aka com.mobilesoft.meteomaroc) application 3.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6698](https://cve.now/CVE-2014-6698.md): The Galaxy Online 2 (aka air.com.igg.galaxyAPhone) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6699](https://cve.now/CVE-2014-6699.md): The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-6700](https://cve.now/CVE-2014-6700.md): The NBA Game Time 2013-2014 (aka com.nbadigital.gametimelite) application 4.11 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-6701](https://cve.now/CVE-2014-6701.md): The Vendormate Mobile (aka com.vendormate.mobile) application 3.0 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-3380](https://cve.now/CVE-2014-3380.md): Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote attackers to cause a denial of service (CPU (no CVSS)
- [CVE-2014-5323](https://cve.now/CVE-2014-5323.md): The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko\_android) application 1.0.5 and earlier for Android does not verify X.509 certificates fro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.