# CVEs published 2014-09-26

23 CVEs were published on September 26, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4958](https://cve.now/CVE-2014-4958.md): Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions (no CVSS)
- [CVE-2014-6445](https://cve.now/CVE-2014-6445.md): Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for Wor (no CVSS)
- [CVE-2014-6446](https://cve.now/CVE-2014-6446.md): The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to (no CVSS)
- [CVE-2014-7152](https://cve.now/CVE-2014-7152.md): Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to injec (no CVSS)
- [CVE-2014-5315](https://cve.now/CVE-2014-5315.md): Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote (no CVSS)
- [CVE-2014-5318](https://cve.now/CVE-2014-5318.md): The jigbrowser+ application 1.8.1 and earlier for iOS allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. (no CVSS)
- [CVE-2014-5319](https://cve.now/CVE-2014-5319.md): Directory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for Android allows remote attackers to write to (no CVSS)
- [CVE-2014-5324](https://cve.now/CVE-2014-5324.md): Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to exe (no CVSS)
- [CVE-2014-6719](https://cve.now/CVE-2014-6719.md): The Kayak Angler Magazine (aka air.com.yudu.ReaderAIR1360155) application 3.12.0 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6720](https://cve.now/CVE-2014-6720.md): The Pesca de Carpa Lite (aka com.clearfishing.pescadecarpa.lite) application 1.0 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6721](https://cve.now/CVE-2014-6721.md): The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-6722](https://cve.now/CVE-2014-6722.md): The Pescuit Crap Lite (aka ro.aventurilapescui.pescuitcrap.lite) application 1.0 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6723](https://cve.now/CVE-2014-6723.md): The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6724](https://cve.now/CVE-2014-6724.md): The Soap Making (aka com.tapatalk.soapmakingforumcom) application 3.7.13 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6725](https://cve.now/CVE-2014-6725.md): The SchoolXM (aka apprentice.schoolxm) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6726](https://cve.now/CVE-2014-6726.md): The 30A (aka com.app30a) application 5.26.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle (no CVSS)
- [CVE-2014-6727](https://cve.now/CVE-2014-6727.md): The Mikeius (Official App) (aka com.automon.mikeius) application 1.4.2.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6728](https://cve.now/CVE-2014-6728.md): The ThinkPal (aka com.mythinkpalapp) application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6729](https://cve.now/CVE-2014-6729.md): The Grilling with Rich (aka com.grilling.with.rich) application 1.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6730](https://cve.now/CVE-2014-6730.md): The Melodigram (aka com.minusdegree.melodigramandroid) application 1.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6731](https://cve.now/CVE-2014-6731.md): The Alfa-Bank (aka ru.alfabank.mobile.android) application 5.5.1.1 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6732](https://cve.now/CVE-2014-6732.md): The Westpac Mobile Banking (aka org.westpac.bank) application 5.21 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6733](https://cve.now/CVE-2014-6733.md): The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.