# CVEs published 2014-09-27

17 CVEs were published on September 27, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-6277](https://cve.now/CVE-2014-6277.md): GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att (no CVSS)
- [CVE-2014-3062](https://cve.now/CVE-2014-3062.md): Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vect (no CVSS)
- [CVE-2014-5459](https://cve.now/CVE-2014-5459.md): The PEAR\_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) re (no CVSS)
- [CVE-2014-6734](https://cve.now/CVE-2014-6734.md): The Wine Making (aka com.gcspublishing.winemakingtalk) application 3.7.15 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-6735](https://cve.now/CVE-2014-6735.md): The imagine Next bmobile (aka com.conduit.app\_51c3c19581af465092327dd25591b224.app) application 1.7.10.243 for Android does not verify X.509 (no CVSS)
- [CVE-2014-6736](https://cve.now/CVE-2014-6736.md): The EPL Hat Trick (aka com.hat.trick.goal) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6737](https://cve.now/CVE-2014-6737.md): The Ultimate Target-Armored Sniper (aka air.wood.liame.ultimatetarget) application 1.0.1 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-6738](https://cve.now/CVE-2014-6738.md): The Maccabi Tel Aviv (aka com.monkeytech.maccabi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6739](https://cve.now/CVE-2014-6739.md): The Well-Being Connect Mobile (aka com.healthways.wellbeinggo) application 2.9 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-6740](https://cve.now/CVE-2014-6740.md): The XD Forum (aka com.tapatalk.xdforumcomforum) application 3.9.17 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6741](https://cve.now/CVE-2014-6741.md): The John MacArthur (aka com.john.macarthur) application 1.0.26 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6742](https://cve.now/CVE-2014-6742.md): The All around Cyprus (aka com.cyprus.newspapers) application 2.11 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6743](https://cve.now/CVE-2014-6743.md): The Hearsay: A Social Party Game (aka air.com.lip.per) application 1.7.000 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6744](https://cve.now/CVE-2014-6744.md): The Al-Ahsa News (aka com.alahsa.news) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6745](https://cve.now/CVE-2014-6745.md): The Family Location (aka com.sosocome.family) application 3.4 2014-5-20 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6746](https://cve.now/CVE-2014-6746.md): The Infiniti Roadside Assistance (aka com.ccas.rsa.common.infiniti) application 1.1 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-6747](https://cve.now/CVE-2014-6747.md): The SeeOn (aka com.seeon) application 4.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.