# CVEs published 2014-09-29

53 CVEs were published on September 29, 2014: 0 critical, 1 high. Days are UTC.

- [CVE-2012-5619](https://cve.now/CVE-2012-5619.md): The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . (no CVSS)
- [CVE-2012-5621](https://cve.now/CVE-2012-5621.md): lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL conn (no CVSS)
- [CVE-2012-6107](https://cve.now/CVE-2012-6107.md): Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of t (no CVSS)
- [CVE-2012-6110](https://cve.now/CVE-2012-6110.md): bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local (no CVSS)
- [CVE-2013-1874](https://cve.now/CVE-2013-1874.md): Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in (no CVSS)
- [CVE-2013-2100](https://cve.now/CVE-2013-2100.md): The urlopen function in pym/portage/util/\_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL (no CVSS, portage)
- [CVE-2013-2586](https://cve.now/CVE-2013-2586.md): XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-si (no CVSS)
- [CVE-2013-3064](https://cve.now/CVE-2013-3064.md): Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect u (no CVSS)
- [CVE-2013-3065](https://cve.now/CVE-2013-3065.md): Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authen (no CVSS)
- [CVE-2013-3066](https://cve.now/CVE-2013-3066.md): Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (no CVSS)
- [CVE-2013-3068](https://cve.now/CVE-2013-3068.md): Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authenticati (no CVSS)
- [CVE-2013-3083](https://cve.now/CVE-2013-3083.md): Cross-site request forgery (CSRF) vulnerability in cgi-bin/system\_setting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the a (no CVSS)
- [CVE-2013-3086](https://cve.now/CVE-2013-3086.md): Cross-site request forgery (CSRF) vulnerability in util\_system.html in Belkin N900 router allows remote attackers to hijack the authenticati (no CVSS)
- [CVE-2013-3089](https://cve.now/CVE-2013-3089.md): Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authent (no CVSS)
- [CVE-2013-3092](https://cve.now/CVE-2013-3092.md): The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect val (no CVSS)
- [CVE-2013-3632](https://cve.now/CVE-2013-3632.md): The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrar (CVSS 8.8)
- [CVE-2014-3811](https://cve.now/CVE-2014-3811.md): Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privilege (no CVSS)
- [CVE-2014-3820](https://cve.now/CVE-2014-3820.md): Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices wi (no CVSS)
- [CVE-2014-3823](https://cve.now/CVE-2014-3823.md): The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows (no CVSS)
- [CVE-2014-3824](https://cve.now/CVE-2014-3824.md): Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8. (no CVSS)
- [CVE-2014-6772](https://cve.now/CVE-2014-6772.md): The United Educational CU (aka com.metova.cuae.uecu) application 1.0.27 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6773](https://cve.now/CVE-2014-6773.md): The CIH Quiz game (aka com.bowenehs.cihquizgameapp) application 1.3 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6774](https://cve.now/CVE-2014-6774.md): The USEK (aka com.university.usek) application 1.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-6775](https://cve.now/CVE-2014-6775.md): The Light for Pets (aka com.helenwoodward.light4pets) application 1.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6776](https://cve.now/CVE-2014-6776.md): The United Advantage NW Federal Cr (aka com.myappengine.uanwfcu) application 1.7 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6777](https://cve.now/CVE-2014-6777.md): The blueeleph (aka eg.film.blueeleph) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-6778](https://cve.now/CVE-2014-6778.md): The Goat Forum (aka com.gcspublishing.goatspot) application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6779](https://cve.now/CVE-2014-6779.md): The Cart App (aka com.virtecha.mobilewallet) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-6780](https://cve.now/CVE-2014-6780.md): The MeiTalk (aka com.playjia.meitalk) application @7F060012 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6781](https://cve.now/CVE-2014-6781.md): The Aloha Stadium - Hawaii (aka com.stadium.aloha) application 1.2 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6782](https://cve.now/CVE-2014-6782.md): The Abraham Tours (aka com.mytoursapp.android.app432) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6783](https://cve.now/CVE-2014-6783.md): The Campus Link - Campus TV HKUSU (aka com.campus.tv.hkusu) application 2.2 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6784](https://cve.now/CVE-2014-6784.md): The Fermononrespiri Mobile (aka com.tapatalk.rmonlineitforums) application 3.8.6 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-6785](https://cve.now/CVE-2014-6785.md): The Renny McLean Ministries (aka com.subsplash.thechurchapp.s\_GJQX72) application 2.8.1 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-6786](https://cve.now/CVE-2014-6786.md): The Math for Kids - Subtraction (aka it.tinytap.attsa.deepsub) application 1.2.10 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-6787](https://cve.now/CVE-2014-6787.md): The Counter Intuition (aka com.counter.intuition) application 1.2 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6788](https://cve.now/CVE-2014-6788.md): The Oman News (aka com.oman.news.rmtzlnbuooordciw) application 1.0 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6789](https://cve.now/CVE-2014-6789.md): The Anaheim Library 2Go! (aka com.bredir.boopsie.anaheim) application 4.5.110 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-6790](https://cve.now/CVE-2014-6790.md): The INVEX (aka com.mobilatolye.keyinternet) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6791](https://cve.now/CVE-2014-6791.md): The Angel Reigns (aka com.conduit.app\_dab60e7bd60d4f23a14b3fb7357f9dcd.app) application 1.2.6.185 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-6792](https://cve.now/CVE-2014-6792.md): The Suriname Radio (aka com.wordbox.surinameRadio) application 1.5 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-6793](https://cve.now/CVE-2014-6793.md): The Arch Friend (aka com.xyproto.archfriend) application 0.4.2 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6794](https://cve.now/CVE-2014-6794.md): The AAPLD (aka com.bredir.boopsie.aapld) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-6795](https://cve.now/CVE-2014-6795.md): The Beekeeping Forum (aka com.tapatalk.supporttapatalkcomxxxxx) application 3.9.15 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-6796](https://cve.now/CVE-2014-6796.md): The LocalSense (aka com.LocalSense) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-6797](https://cve.now/CVE-2014-6797.md): The Abu Ali Anasheeds (aka com.faapps.abuali\_anasheeds) application 1.1 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6798](https://cve.now/CVE-2014-6798.md): The McMaster Marauders (aka com.weever.marauders) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6799](https://cve.now/CVE-2014-6799.md): The Investigation Tool (aka gov.ca.post.lp.itool) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6800](https://cve.now/CVE-2014-6800.md): The Bloom Township 206 (aka net.parentlink.bloom) application 4.0.500 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6801](https://cve.now/CVE-2014-6801.md): The frank matano (aka com.frank.matano) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-6802](https://cve.now/CVE-2014-6802.md): The First Assembly NLR (aka com.subsplash.thechurchapp.firstassemblynlr) application 2.8.0 for Android does not verify X.509 certificates fr (no CVSS)
- [CVE-2014-6803](https://cve.now/CVE-2014-6803.md): The Bank of Moscow EIRTS Rent (aka ru.bm.rbs.android) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6804](https://cve.now/CVE-2014-6804.md): The Deschutes Public MobileLibrary (aka com.bredir.boopsie.deschutes) application 4.5.110 for Android does not verify X.509 certificates fro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.