# CVEs published 2014-10-16

126 CVEs were published on October 16, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3661](https://cve.now/CVE-2014-3661.md): Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-3662](https://cve.now/CVE-2014-3662.md): Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts. (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-3663](https://cve.now/CVE-2014-3663.md): Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restricti (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-3666](https://cve.now/CVE-2014-3666.md): Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel. (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-3667](https://cve.now/CVE-2014-3667.md): Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with t (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-3679](https://cve.now/CVE-2014-3679.md): The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages. (no CVSS, org.jvnet.hudson.plugins:monitoring)
- [CVE-2014-3680](https://cve.now/CVE-2014-3680.md): Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for t (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-4881](https://cve.now/CVE-2014-4881.md): The PartyTrack library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof se (no CVSS)
- [CVE-2014-6953](https://cve.now/CVE-2014-6953.md): The AFTERLIFE WITH ARCHIE (aka com.afterlifewitharchie.afterlifewitharchie) application 2.4.1 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-6954](https://cve.now/CVE-2014-6954.md): The Deer Hunting Calls + Guide (aka com.anawaz.deerhuntingcalls.free) application 4.0.1 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-6955](https://cve.now/CVE-2014-6955.md): The Le Grand Bleu (aka com.appzone468) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6956](https://cve.now/CVE-2014-6956.md): The Hydrogen Water (aka com.appzone628) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-6957](https://cve.now/CVE-2014-6957.md): The scottcolibmn (aka com.bredir.boopsie.scottlib) application 4.5.110 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6958](https://cve.now/CVE-2014-6958.md): The ISMRM-ESMRMB 2014 (aka com.coreapps.android.followme.ismrm\_esmrmb14) application 6.0.8.5 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-6959](https://cve.now/CVE-2014-6959.md): The QinCard (aka com.haowan.qincard) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-6960](https://cve.now/CVE-2014-6960.md): The Multitrac (aka com.multitrac) application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the- (no CVSS)
- [CVE-2014-6961](https://cve.now/CVE-2014-6961.md): The SudaniNet (aka com.sudaninet.wtwqiqbegq\_btwlda) application 2.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6962](https://cve.now/CVE-2014-6962.md): The Elk Grove PublicStuff (aka com.wassabi.elkgrove) application 3.2 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6963](https://cve.now/CVE-2014-6963.md): The feiron (aka es.sw.feironmobile.app) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-6964](https://cve.now/CVE-2014-6964.md): The Hanyang University Admissions (aka kr.ac.hanyang.planner) application 2.1.3 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-6965](https://cve.now/CVE-2014-6965.md): The FAZ.NET (aka net.faz.FAZ) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid (no CVSS)
- [CVE-2014-6966](https://cve.now/CVE-2014-6966.md): The West Bend School District (aka net.parentlink.westbend) application 4.0.500 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-6967](https://cve.now/CVE-2014-6967.md): The Albion College (aka com.vivomobile.albioncollege) application 2.1.16 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6968](https://cve.now/CVE-2014-6968.md): The Grandma's Grotto (aka com.mobileappsuite.grandmasgrotto) application 1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6969](https://cve.now/CVE-2014-6969.md): The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6970](https://cve.now/CVE-2014-6970.md): The North American Ismaili Games (aka hr.apps.n166983741) application 5.26.2 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-6971](https://cve.now/CVE-2014-6971.md): The Easy Video Downloader (aka com.simon.padillar.EasyVideo) application 4.4.1 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-6972](https://cve.now/CVE-2014-6972.md): The Kazakhstan Radio (aka com.wordbox.kazakhstanRadio) application 2.5 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6973](https://cve.now/CVE-2014-6973.md): The Care4Kids (aka com.codetherapy.care4kids) application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6974](https://cve.now/CVE-2014-6974.md): The MifaShow Hairstyles (aka com.mifashow) application 3.7 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6975](https://cve.now/CVE-2014-6975.md): The Twin Lin (aka com.twinlin.twmo) application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-m (no CVSS)
- [CVE-2014-6976](https://cve.now/CVE-2014-6976.md): The Aeroexpress (aka ru.lynx.aero) application 2.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-6977](https://cve.now/CVE-2014-6977.md): The eLearn (aka com.desire2learn.campuslife.chattanoogastate.edu.directory) application 1.0.649.1194 for Android does not verify X.509 certi (no CVSS)
- [CVE-2014-6978](https://cve.now/CVE-2014-6978.md): The Karim Rahal Essoulami (aka com.karim.rahal.essoulami.lcxogeyuizteegxvnq) application 1.0 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-6979](https://cve.now/CVE-2014-6979.md): The MiWay Insurance Ltd (aka com.MiWay.MD) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6980](https://cve.now/CVE-2014-6980.md): The LINE PLAY (aka jp.naver.lineplay.android) application 2.3.1.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6981](https://cve.now/CVE-2014-6981.md): The Taiwan Business Bank (aka com.mitake.TBB) application 2.04 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6982](https://cve.now/CVE-2014-6982.md): The Arabic Troll Football (aka com.hamoosh.ArabicTrollFootball) application 1.0.1 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-6983](https://cve.now/CVE-2014-6983.md): The NBE (aka com.nbe.app) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle at (no CVSS)
- [CVE-2014-6984](https://cve.now/CVE-2014-6984.md): The Shots (aka com.shots.android) application 1.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-6985](https://cve.now/CVE-2014-6985.md): The Georgia Packing (aka com.tapatalk.georgiapackingorg) application 3.9.16 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6986](https://cve.now/CVE-2014-6986.md): The Pregnancy Tips (aka com.rareartifact.tipsforpregnant71C80129) application 1.0 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-6987](https://cve.now/CVE-2014-6987.md): The Mass Gaming TV (aka net.massgamers) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-6988](https://cve.now/CVE-2014-6988.md): The Quotes in Images (aka pt.lumberapps.imagensfrases) application 3.7.5 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6989](https://cve.now/CVE-2014-6989.md): The Germanwings (aka com.germanwings.android) application 2.1.13 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-6990](https://cve.now/CVE-2014-6990.md): The Albasit artes y danza (aka com.adianteventures.adianteapps.albasit\_artes\_y\_danza) application 1.2 for Android does not verify X.509 cert (no CVSS)
- [CVE-2014-6991](https://cve.now/CVE-2014-6991.md): The LiveAuctions.tv (aka air.LiveAndroidMaxx) application 2.005 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-6992](https://cve.now/CVE-2014-6992.md): The Timeless Black (aka com.apptive.android.apps.timeless) application 2.10.6 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-6993](https://cve.now/CVE-2014-6993.md): The Codeeta Coupons (aka com.codeeta.promos) application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6994](https://cve.now/CVE-2014-6994.md): The Atecea (aka com.atecea) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle (no CVSS)
- [CVE-2014-6995](https://cve.now/CVE-2014-6995.md): The adidas eyewear (aka com.adidasep.eyewear) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6996](https://cve.now/CVE-2014-6996.md): The Martial Arts Battle Card (aka com.tapenjoy.zjh.tw) application 1.0.9 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6997](https://cve.now/CVE-2014-6997.md): The Dino Village (aka com.tappocket.dinovillage) application 1.6 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-6998](https://cve.now/CVE-2014-6998.md): The PinkFong TV (aka kr.co.smartstudy.pinkfongtv\_android\_googlemarket) application 4 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-6999](https://cve.now/CVE-2014-6999.md): The Questoes OAB (aka com.pedefeijao.questoesoab) application oab\_android\_1.2 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7000](https://cve.now/CVE-2014-7000.md): The Paul Alexander Campaign (aka hr.apps.n51261427) application 4.5.8 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7001](https://cve.now/CVE-2014-7001.md): The Jian Ren (aka cn.sh.scustom.janren) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7002](https://cve.now/CVE-2014-7002.md): The Sopexa Pavillon France (aka com.goomeoevents.pavillonfrance) application 3.6.5 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7003](https://cve.now/CVE-2014-7003.md): The Goodwin (aka com.goodwin.Goodwin) application 1.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7004](https://cve.now/CVE-2014-7004.md): The PETA (aka com.peta.android) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid (no CVSS)
- [CVE-2014-7005](https://cve.now/CVE-2014-7005.md): The Foconet (aka suporte.com.foconet) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7006](https://cve.now/CVE-2014-7006.md): The HydFM (aka com.apheliontechnologies.hydfm) application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7007](https://cve.now/CVE-2014-7007.md): The Master Mix (aka com.nobexinc.wls\_24832536.rc) application 3.3.5 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7008](https://cve.now/CVE-2014-7008.md): The Forum FrAndroid beta (aka com.tapatalk.forumfrandroidcom) application 3.4.3 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7009](https://cve.now/CVE-2014-7009.md): The HKBN My Account (aka com.hkbn.myaccount) application @7F070015 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7010](https://cve.now/CVE-2014-7010.md): The UTSA Mobile (aka com.dub.app.utsa) application 1.4.21 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7011](https://cve.now/CVE-2014-7011.md): The NWTC Mobile (aka com.dub.app.nwtc) application 1.4.17 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7012](https://cve.now/CVE-2014-7012.md): The Coffee Inn (aka lt.lemonlabs.android.coffeeinn) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7013](https://cve.now/CVE-2014-7013.md): The Funny Photo Color Editor (aka com.doirdeditor.funcloreditor) application 0.0.4 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7015](https://cve.now/CVE-2014-7015.md): The JJ Texas Hold'em Poker (aka cn.jj.poker) application 1.13.23.HD for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7016](https://cve.now/CVE-2014-7016.md): The Mahasna Batik (aka com.batik.mahasna) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7017](https://cve.now/CVE-2014-7017.md): The Tim Ban Bon Phuong (aka com.entertaiment.timbanbonphuong) application 2.2 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7018](https://cve.now/CVE-2014-7018.md): The LOVE DANCE (aka com.efunfun.ddianle.lovedance) application 1.2.0626 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7019](https://cve.now/CVE-2014-7019.md): The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-7020](https://cve.now/CVE-2014-7020.md): The Diabetes Forum (aka com.tapatalk.diabetescoukdiabetesforum) application 3.9.30 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7021](https://cve.now/CVE-2014-7021.md): The Leg Surgery - Kids Games (aka com.harriskerioe.legsurgery) application 1.0.2 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7022](https://cve.now/CVE-2014-7022.md): The Modelisme.com forum/portail (aka com.tapatalk.modelismecomforum) application 3.6.9 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7023](https://cve.now/CVE-2014-7023.md): The Find Color (aka com.chudong.color) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7024](https://cve.now/CVE-2014-7024.md): The Hardest Game Collection (aka com.lotfun.abuse) application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7025](https://cve.now/CVE-2014-7025.md): The Who-is-it? Lite name caller time limited free (aka de.profiler.android.whoisit) application 1.0 for Android does not verify X.509 certif (no CVSS)
- [CVE-2014-7026](https://cve.now/CVE-2014-7026.md): The LIFE TIME FITNESS (aka com.lifetimefitness.ltfmobile) application 1.9 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7027](https://cve.now/CVE-2014-7027.md): The Esercizi per le donne (aka com.rareartifact.eserciziperledonne6D5578C6) application 1.0 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7028](https://cve.now/CVE-2014-7028.md): The Ibis pau centre (aka com.myapphone.android.myappibispaucentre) application 1.0 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7029](https://cve.now/CVE-2014-7029.md): The Bultmonster Registret (aka com.bultmonster.registret) application 1.1 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7030](https://cve.now/CVE-2014-7030.md): The Dieta Dukan passo a passo (aka com.rareartifact.dukanpasoapaso82BE0897) application 1.0 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7031](https://cve.now/CVE-2014-7031.md): The RedAtoms Three (aka com.redatoms.mojodroid.tw.gp) application 2.5 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7032](https://cve.now/CVE-2014-7032.md): The MYHABIT (aka com.amazon.myhabit) application @7F080041 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7033](https://cve.now/CVE-2014-7033.md): The Cure Viewer (aka com.livedoor.android.cureviewer) application 1.03 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7034](https://cve.now/CVE-2014-7034.md): The Senator Inn & Spa (aka com.conduit.app\_cc06e8e9659c4cf7b361ad0b7717f3a4.app) application 1.2.2.160 for Android does not verify X.509 cer (no CVSS)
- [CVE-2014-7035](https://cve.now/CVE-2014-7035.md): The Harmonizers Planet (aka uk.co.pixelkicks.fifthharmony) application 2.3.4 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7036](https://cve.now/CVE-2014-7036.md): The Quest Federal CU Mobile (aka com.metova.cuae.questfcu) application 1.0.27 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7037](https://cve.now/CVE-2014-7037.md): The Noble Sticker "FREE" (aka com.kuronecostudio.kizokustamp.free) application 1.0.7 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7038](https://cve.now/CVE-2014-7038.md): The Al Jazeera (aka com.Al.Jazeera.net) application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7039](https://cve.now/CVE-2014-7039.md): The Wild Women United (aka com.wildwomenunited) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7040](https://cve.now/CVE-2014-7040.md): The UniCredit Investors (aka eu.unicreditgroup.brand.ucinvestors) application 1.0 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7041](https://cve.now/CVE-2014-7041.md): The SimGene (aka com.japanbioinformatics.simgene) application 1.3 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7042](https://cve.now/CVE-2014-7042.md): The My nTelos (aka com.telespree.ntelospostpay) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7043](https://cve.now/CVE-2014-7043.md): The Cadpage (aka net.anei.cadpage) application 1.7.44 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7044](https://cve.now/CVE-2014-7044.md): The Street Walker (aka kt.road.StreetWalker) application 0.0.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7045](https://cve.now/CVE-2014-7045.md): The Bust Out Bail (aka com.onesolutionapps.bustoutbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-7048](https://cve.now/CVE-2014-7048.md): The Bear ID Lock (aka com.wBearIDLock) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7049](https://cve.now/CVE-2014-7049.md): The SomTodo - Task/To-do widget (aka com.somcloud.somtodo) application 2.0.3 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7050](https://cve.now/CVE-2014-7050.md): The givenu give (aka com.givenu.give) application 1.5.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7138](https://cve.now/CVE-2014-7138.md): Cross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject a (no CVSS)
- [CVE-2014-7181](https://cve.now/CVE-2014-7181.md): Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject (no CVSS)
- [CVE-2014-8240](https://cve.now/CVE-2014-8240.md): Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors (no CVSS)
- [CVE-2014-8301](https://cve.now/CVE-2014-8301.md): Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2014-8302](https://cve.now/CVE-2014-8302.md): Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 (no CVSS)
- [CVE-2014-8303](https://cve.now/CVE-2014-8303.md): Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 allows remote attacker (no CVSS)
- [CVE-2014-8304](https://cve.now/CVE-2014-8304.md): Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2014-8305](https://cve.now/CVE-2014-8305.md): Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redir (no CVSS)
- [CVE-2014-8306](https://cve.now/CVE-2014-8306.md): SQL injection vulnerability in the sql\_query function in cart.php in C97net Cart Engine before 4.0 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2014-8307](https://cve.now/CVE-2014-8307.md): Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to (no CVSS)
- [CVE-2014-8308](https://cve.now/CVE-2014-8308.md): Cross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to in (no CVSS)
- [CVE-2014-8309](https://cve.now/CVE-2014-8309.md): SAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a failed logon attempt with different time del (no CVSS)
- [CVE-2014-8310](https://cve.now/CVE-2014-8310.md): The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server shutdown) via crafted (no CVSS)
- [CVE-2014-8311](https://cve.now/CVE-2014-8311.md): SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an InfoStore query to a CORBA listener. (no CVSS)
- [CVE-2014-8312](https://cve.now/CVE-2014-8312.md): Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the (no CVSS)
- [CVE-2014-8313](https://cve.now/CVE-2014-8313.md): Eval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows remote attackers to execute arbitrary XSJX cod (no CVSS)
- [CVE-2014-8314](https://cve.now/CVE-2014-8314.md): Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2014-8315](https://cve.now/CVE-2014-8315.md): polestar\_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, wh (no CVSS)
- [CVE-2014-8316](https://cve.now/CVE-2014-8316.md): XML External Entity (XXE) vulnerability in polestar\_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows remote attackers to read (no CVSS)
- [CVE-2014-8296](https://cve.now/CVE-2014-8296.md): Cross-site scripting (XSS) vulnerability in the Modal Frame API module 6.x-1.x before 6.x-1.9 for Drupal allows remote attackers to inject a (no CVSS)
- [CVE-2014-3686](https://cve.now/CVE-2014-3686.md): wpa\_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa\_cli or hostapd\_cli with action scripts, (no CVSS)
- [CVE-2014-3704](https://cve.now/CVE-2014-3704.md): The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, (no CVSS)
- [CVE-2014-7237](https://cve.now/CVE-2014-7237.md): lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.