# CVEs published 2014-10-01

8 CVEs were published on October 1, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1598](https://cve.now/CVE-2003-1598.md): SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2011-4624](https://cve.now/CVE-2011-4624.md): Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allo (no CVSS)
- [CVE-2012-0811](https://cve.now/CVE-2012-0811.md): Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrar (no CVSS)
- [CVE-2014-6851](https://cve.now/CVE-2014-6851.md): The New Beginnings CFC (aka com.goodbarber.nbcfc) application 1.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6852](https://cve.now/CVE-2014-6852.md): The LedLine.gr Official (aka com.automon.ledline.gr) application 1.4.0.9 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6853](https://cve.now/CVE-2014-6853.md): The Foxit MobilePDF - PDF Reader (aka com.foxit.mobile.pdf.lite) application 2.2.0.0616 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-6854](https://cve.now/CVE-2014-6854.md): The EyeXam (aka com.globaleyeventures.eyexam) application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6855](https://cve.now/CVE-2014-6855.md): The Long (aka com.imop.longjiang.android) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.