# CVEs published 2014-10-20

146 CVEs were published on October 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3863](https://cve.now/CVE-2014-3863.md): Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2014-8365](https://cve.now/CVE-2014-8365.md): Multiple cross-site scripting (XSS) vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2014-8366](https://cve.now/CVE-2014-8366.md): SQL injection vulnerability in openSIS 4.5 through 5.3 allows remote attackers to execute arbitrary SQL commands via the Username and passwo (no CVSS)
- [CVE-2014-3564](https://cve.now/CVE-2014-3564.md): Multiple heap-based buffer overflows in the status\_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 al (no CVSS)
- [CVE-2014-5025](https://cve.now/CVE-2014-5025.md): Cross-site scripting (XSS) vulnerability in data\_sources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject (no CVSS)
- [CVE-2014-5026](https://cve.now/CVE-2014-5026.md): Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary (no CVSS)
- [CVE-2014-5169](https://cve.now/CVE-2014-5169.md): Cross-site scripting (XSS) vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission (no CVSS)
- [CVE-2014-8363](https://cve.now/CVE-2014-8363.md): SQL injection vulnerability in ss\_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remote attackers to execu (no CVSS)
- [CVE-2014-8364](https://cve.now/CVE-2014-8364.md): Cross-site scripting (XSS) vulnerability in ss\_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remote attac (no CVSS)
- [CVE-2012-5694](https://cve.now/CVE-2012-5694.md): Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute ar (no CVSS)
- [CVE-2012-5695](https://cve.now/CVE-2012-5695.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow rem (no CVSS)
- [CVE-2012-5696](https://cve.now/CVE-2012-5696.md): Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote (no CVSS)
- [CVE-2012-5697](https://cve.now/CVE-2012-5697.md): The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files (no CVSS)
- [CVE-2014-3830](https://cve.now/CVE-2014-3830.md): Cross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2014-3978](https://cve.now/CVE-2014-3978.md): SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name a (no CVSS)
- [CVE-2014-5275](https://cve.now/CVE-2014-5275.md): Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to (no CVSS)
- [CVE-2014-5276](https://cve.now/CVE-2014-5276.md): Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbit (no CVSS)
- [CVE-2014-8330](https://cve.now/CVE-2014-8330.md): Cross-site scripting (XSS) vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name fi (no CVSS)
- [CVE-2014-8331](https://cve.now/CVE-2014-8331.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V (no CVSS)
- [CVE-2012-5701](https://cve.now/CVE-2012-5701.md): Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL command (no CVSS)
- [CVE-2012-5865](https://cve.now/CVE-2012-5865.md): SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the act (no CVSS)
- [CVE-2012-5866](https://cve.now/CVE-2012-5866.md): Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2014-2081](https://cve.now/CVE-2014-2081.md): Multiple SQL injection vulnerabilities in the login in web\_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 201 (no CVSS)
- [CVE-2014-5094](https://cve.now/CVE-2014-5094.md): Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the (no CVSS)
- [CVE-2014-5098](https://cve.now/CVE-2014-5098.md): Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-5447](https://cve.now/CVE-2014-5447.md): Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions (644) for config.php, which allows local users to obtain sensitive informa (no CVSS)
- [CVE-2014-5448](https://cve.now/CVE-2014-5448.md): Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by (no CVSS)
- [CVE-2014-5449](https://cve.now/CVE-2014-5449.md): Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sen (no CVSS)
- [CVE-2014-8329](https://cve.now/CVE-2014-8329.md): Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insufficient access contr (no CVSS)
- [CVE-2012-2413](https://cve.now/CVE-2012-2413.md): Cross-site scripting (XSS) vulnerability in the ja\_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2012-5244](https://cve.now/CVE-2012-5244.md): Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2014-6280](https://cve.now/CVE-2014-6280.md): Multiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2014-6308](https://cve.now/CVE-2014-6308.md): Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2014-7484](https://cve.now/CVE-2014-7484.md): The Coca-Cola FM Guatemala (aka com.enyetech.radio.coca\_cola.fm\_gu) application 2.0.41725 for Android does not verify X.509 certificates fro (no CVSS)
- [CVE-2014-7485](https://cve.now/CVE-2014-7485.md): The Not Lost Just Somewhere Else (aka it.tinytap.attsa.notlost) application 1.6.1 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7486](https://cve.now/CVE-2014-7486.md): The Mitsubishi Road Assist (aka com.agero.mitsubishi) application 1.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7487](https://cve.now/CVE-2014-7487.md): The ADT Aesthetic Dentistry Today (aka com.magazinecloner.aestheticdentistry) application @7F080181 for Android does not verify X.509 certif (no CVSS)
- [CVE-2014-7488](https://cve.now/CVE-2014-7488.md): The Vineyard All In (aka com.wVineyardAllIn) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7490](https://cve.now/CVE-2014-7490.md): The Menaka - Marathi (aka com.magzter.menakamarathi) application 3.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7491](https://cve.now/CVE-2014-7491.md): The Short Stories (aka com.ireadercity.c48) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7492](https://cve.now/CVE-2014-7492.md): The Secretos de belleza (aka com.rareartifact.secretosdebelleza83A55CB8) application 1.0 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7493](https://cve.now/CVE-2014-7493.md): The 100 Books (aka com.ireadercity.c20) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7494](https://cve.now/CVE-2014-7494.md): The Kontan Kiosk (aka com.appsfoundry.scoopwl.id.kontankiosk) application @7F07025E for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7495](https://cve.now/CVE-2014-7495.md): The LogosQuest - Beginnings (aka com.wLogosQuest) application 1.0 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7497](https://cve.now/CVE-2014-7497.md): The Portfolium (aka com.wPortfolium) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-7498](https://cve.now/CVE-2014-7498.md): The Space Cinema (aka it.thespacecinema.android) application 2.0.6 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7499](https://cve.now/CVE-2014-7499.md): The Sword (aka com.ireadercity.c25) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7501](https://cve.now/CVE-2014-7501.md): The Translation Widget (aka com.wTranslationGadget) application 0.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7502](https://cve.now/CVE-2014-7502.md): The Escucha elDiario.es (aka es.lacabradev.escuchaeldiario) application 1.2.3 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7505](https://cve.now/CVE-2014-7505.md): The AppTalk (aka com.chatatami.apptalk) application 1.4.8 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7506](https://cve.now/CVE-2014-7506.md): The Realtime Music Rank (aka com.blogspot.imapp.immusicrank2) application 5.5 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7507](https://cve.now/CVE-2014-7507.md): The Hector Leal (aka ad.hector.leal.com) application 13/08/14 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7508](https://cve.now/CVE-2014-7508.md): The Help For Doc (aka com.childrens.physician.relations) application 1.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7509](https://cve.now/CVE-2014-7509.md): The A Very Short History of Japan (aka com.ireadercity.c51) application 3.0.2 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7510](https://cve.now/CVE-2014-7510.md): The Graffit It (aka com.presenttechnologies.graffitit) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7513](https://cve.now/CVE-2014-7513.md): The Top Hangover Cures (aka com.TopHangoverCures) application 1.2 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7515](https://cve.now/CVE-2014-7515.md): The Bail Bonds (aka com.onesolutionapps.chadlewisbailbondsandroid) application 1.1 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7516](https://cve.now/CVE-2014-7516.md): The Central East LHIN News (aka com.wCentralEastLHINNews) application 0.1 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7517](https://cve.now/CVE-2014-7517.md): The Myanmar Movies HD (aka com.wmyanmarmoviesHD) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7518](https://cve.now/CVE-2014-7518.md): The Bowl Expo 2014 (aka com.coreapps.android.followme.bowlexpo14) application 6.1.1.5 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7519](https://cve.now/CVE-2014-7519.md): The Cycling Manager Game Cff (aka com.CyclingManagerGame) application 1.0 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7520](https://cve.now/CVE-2014-7520.md): The Nova 92.1 FM (aka com.wNova921FM) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7521](https://cve.now/CVE-2014-7521.md): The Anderson Musaamil (aka com.app\_andersonmusaamil.layout) application 1.400 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7522](https://cve.now/CVE-2014-7522.md): The Maccabi Pakal (aka com.ideomobile.pakalmaccabi) application 1.2 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7523](https://cve.now/CVE-2014-7523.md): The Radio Bethlehem RB2000 (aka com.Abuhadbah.rbl2000v2) application 1.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7524](https://cve.now/CVE-2014-7524.md): The Bed and Breakfast (aka com.wbedandbreakfastapp) application 0.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7525](https://cve.now/CVE-2014-7525.md): The Domain Name Search & Web Host (aka com.wDomainNameSearchandRegistration) application 0.64.13398.55733 for Android does not verify X.509 (no CVSS)
- [CVE-2014-7526](https://cve.now/CVE-2014-7526.md): The Immunize Canada (aka ca.ohri.immunizeapp) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7527](https://cve.now/CVE-2014-7527.md): The Savage Nation Mobile Web (aka com.wSavageNation) application 0.57.13354.63350 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7528](https://cve.now/CVE-2014-7528.md): The Horsepower (aka com.apptive.android.apps.horsepower) application 2.10.11 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7529](https://cve.now/CVE-2014-7529.md): The Bodyguard for Hire (aka com.dreamstep.wBodyGuardforHire) application 0.18.13146.42280 for Android does not verify X.509 certificates fro (no CVSS)
- [CVE-2014-7530](https://cve.now/CVE-2014-7530.md): The PRIX IMPORT (aka com.myapphone.android.myapppriximport) application 1.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7532](https://cve.now/CVE-2014-7532.md): The GES Agri Connect (aka com.wAgriConnect) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7533](https://cve.now/CVE-2014-7533.md): The NotreDame Seguradora (aka br.com.notredame.mobile.NotreDame) application 1.2 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7534](https://cve.now/CVE-2014-7534.md): The Funny & Interesting Things (aka com.wFunnyandInterestingThings) application 0.1 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7535](https://cve.now/CVE-2014-7535.md): The Classic Racer (aka com.triactivemedia.classicracer) application @7F0801AA for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7536](https://cve.now/CVE-2014-7536.md): The Service Academy Forums (aka com.tapatalk.serviceacademyforumscom) application 3.6.12 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7538](https://cve.now/CVE-2014-7538.md): The Headlines news India (aka com.dreamstep.wHEADLINESNEWSINDIA) application 0.21.13219.95110 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7539](https://cve.now/CVE-2014-7539.md): The Zhang Zhijun Taiwan Visit 2014-06-25 (aka com.zizizzi) application 1.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7542](https://cve.now/CVE-2014-7542.md): The l'Informatiu (aka com.linformatiu.spm) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7543](https://cve.now/CVE-2014-7543.md): The Blood (aka com.sheridan.ash) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mi (no CVSS)
- [CVE-2014-7544](https://cve.now/CVE-2014-7544.md): The Secret City - Motion Comic (aka me.narr8.android.serial.the\_secret\_city) application 2.1.7 for Android does not verify X.509 certificate (no CVSS)
- [CVE-2014-7546](https://cve.now/CVE-2014-7546.md): The Buddhist Prayer (aka com.buddhist.prayer.mantra.sutra) application 3.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7547](https://cve.now/CVE-2014-7547.md): The Texas Poker Unlimited Hold'em (aka com.fpinternet.texaspokerunlimitedholdem) application 1.2.0 for Android does not verify X.509 certifi (no CVSS)
- [CVE-2014-7550](https://cve.now/CVE-2014-7550.md): The basketball news & videos (aka com.basketbal.news.caesar) application 1.0 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7551](https://cve.now/CVE-2014-7551.md): The Noticias Bebes Beybies (aka com.beybies) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7552](https://cve.now/CVE-2014-7552.md): The Zombie Diary (aka com.ezjoy.feelingtouch.zombiediary) application 1.2.2 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7553](https://cve.now/CVE-2014-7553.md): The GET NYCE Lightworks (aka com.wGETNYCE) application 0.84.13506.98953 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7554](https://cve.now/CVE-2014-7554.md): The Bouqs - Flowers Simplified (aka com.bouqs.activity) application 1.8.4 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7555](https://cve.now/CVE-2014-7555.md): The Apparound BLEND (aka com.apparound.mobile.catalogo) application 4.9.0 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7557](https://cve.now/CVE-2014-7557.md): The zroadster.com (aka com.tapatalk.zroadstercomforum) application 2.4.13.17 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7558](https://cve.now/CVE-2014-7558.md): The Everest Poker (aka com.wEverestPoker) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7559](https://cve.now/CVE-2014-7559.md): The InstaTalks (aka com.natrobit.instatalks) application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7560](https://cve.now/CVE-2014-7560.md): The Fabasoft Cloud (aka com.fabasoft.android.cmis.folio\_cloud) application 3.0.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7562](https://cve.now/CVE-2014-7562.md): The Health Advocate SmartHelp (aka com.healthadvocate.ui) application 3.6 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7563](https://cve.now/CVE-2014-7563.md): The Tactical Force LLC (aka com.conduit.app\_69f61a8852b046f2846054b30c4032a7.app) application 1.9.23.276 for Android does not verify X.509 c (no CVSS)
- [CVE-2014-7564](https://cve.now/CVE-2014-7564.md): The Simple Car Care Tip and Advice (aka com.a1481542198504ee106f182c8a.a40350826a) application 1.03 for Android does not verify X.509 certif (no CVSS)
- [CVE-2014-7565](https://cve.now/CVE-2014-7565.md): The Rando Noeux (aka com.gmteditions.NoeuxLesMinesDistrib) application 1.0.0 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7566](https://cve.now/CVE-2014-7566.md): The Stift Neuburg (aka de.appack.project.neuburg) application 1.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7567](https://cve.now/CVE-2014-7567.md): The iMig 2012 (aka com.webges.imig) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7568](https://cve.now/CVE-2014-7568.md): The Marcus Butler Unofficial (aka com.automon.ay.marcus.butler) application 1.4.0.6 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7569](https://cve.now/CVE-2014-7569.md): The Best Greatness Quotes (aka best.free.greatness.quotes.android.app) application 1.0 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7570](https://cve.now/CVE-2014-7570.md): The Fire Equipments Screen lock (aka com.locktheworld.screen.lock.theme.FireEquipments) application 1.1 for Android does not verify X.509 ce (no CVSS)
- [CVE-2014-7571](https://cve.now/CVE-2014-7571.md): The Grey's Anatomy Fan (aka nl.jborsje.android.tvfan.greysanatomy) application 3.7.2 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7572](https://cve.now/CVE-2014-7572.md): The Stoner's Handbook L- Bud Guide (aka fallacystudios.stonershandbooklite) application 7.2 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7573](https://cve.now/CVE-2014-7573.md): The droid Survey Offline Forms (aka com.contact.droidSURVEY) application 2.5.2 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-7575](https://cve.now/CVE-2014-7575.md): The eBiblio Andalucia (aka com.bqreaders.reader.ebiblioandalucia) application 1.6.5 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7576](https://cve.now/CVE-2014-7576.md): The Chien Binh Bakugan 2 LongTieng (aka com.htv.chien.binh.bakugan.ii.hanh.trinh.moi.long.tieng) application 2.0 for Android does not verify (no CVSS)
- [CVE-2014-7577](https://cve.now/CVE-2014-7577.md): The B&H Photo Video Pro Audio (aka com.bhphoto) application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7578](https://cve.now/CVE-2014-7578.md): The Bieber News Now (aka com.jbnews) application 12.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7580](https://cve.now/CVE-2014-7580.md): The Thailand Investor News (aka nudecreative.thaistock.set) application 1.39s for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7581](https://cve.now/CVE-2014-7581.md): The Quotes of Travis Barker (aka com.celebrity\_quotes.travisbarker) application 0.0.1 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7582](https://cve.now/CVE-2014-7582.md): The Water Lateral Sizer (aka com.wWaterLateralSizer) application 1.2 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7584](https://cve.now/CVE-2014-7584.md): The ACN2GO (aka com.dataparadigm.acnmobile) application 1.7 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7585](https://cve.now/CVE-2014-7585.md): The Biplane Forum (aka com.gcspublishing.biplaneforum) application 3.7.14 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7587](https://cve.now/CVE-2014-7587.md): The Blocked in Free (aka com.blueup.blocked) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7589](https://cve.now/CVE-2014-7589.md): The Industrial and Commercial Bank of China (ICBC) Banking (aka com.icbc.android) application 2.40 for Android does not verify X.509 certifi (no CVSS)
- [CVE-2014-7590](https://cve.now/CVE-2014-7590.md): The WebPromoExperts (aka ua.com.webpromoexperts) application 1.8 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7591](https://cve.now/CVE-2014-7591.md): The Demon (aka com.ireadercity.c24) application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-7592](https://cve.now/CVE-2014-7592.md): The FOL (aka com.desire2learn.fol.mobile.app.campuslife.directory) application 3.0.729.1459 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7593](https://cve.now/CVE-2014-7593.md): The Mr Whippet - Yorkshire Ice (aka com.appytimes.ice) application 1.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7595](https://cve.now/CVE-2014-7595.md): The devada.co.uk (aka com.wdevadacouk) application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7596](https://cve.now/CVE-2014-7596.md): The Paramore (aka uk.co.pixelkicks.paramore) application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7597](https://cve.now/CVE-2014-7597.md): The Fabulas Infantiles (aka com.mobincube.android.sc\_9I1A3) application 3.0.0 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7598](https://cve.now/CVE-2014-7598.md): The Poker Puzzle (aka com.sharpiq.pokerpuzzle) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7602](https://cve.now/CVE-2014-7602.md): The FRONT (aka com.magazinecloner.front) application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7603](https://cve.now/CVE-2014-7603.md): The Gravey Design (aka com.dreamstep.wGraveyDesign) application 0.58.13357.54919 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7604](https://cve.now/CVE-2014-7604.md): The Easy Tips For Glowing Skin (aka com.n.easytipsforglowingskin) application 1.0 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7605](https://cve.now/CVE-2014-7605.md): The Actors Key (aka com.conduit.app\_f83daeb6861b401bb103c33ea4210029.app) application 1.6.24.477 for Android does not verify X.509 certifica (no CVSS)
- [CVE-2014-7606](https://cve.now/CVE-2014-7606.md): The Concursive (aka com.concursive.app) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7607](https://cve.now/CVE-2014-7607.md): The Swamiji.tv (aka org.yidl.SwamijiTV) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7608](https://cve.now/CVE-2014-7608.md): The Carrier Enterprise HVAC Assist (aka com.es.CE) application 4.0 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7609](https://cve.now/CVE-2014-7609.md): The iStunt 2 (aka com.miniclip.istunt2) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7610](https://cve.now/CVE-2014-7610.md): The Kadinlar Kulubu KKMobileApp (aka com.tapatalk.kadinlarkulubucom) application 3.4.3 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7611](https://cve.now/CVE-2014-7611.md): The Lost Temple (aka com.crazy.game.good.mengchenglu.templeI) application 1.6 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7612](https://cve.now/CVE-2014-7612.md): The e-Kiosk (aka com.ekioskreader.android.pdfviewer) application 1.74 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7613](https://cve.now/CVE-2014-7613.md): The WASPS Official Programmes (aka com.triactivemedia.wasps) application @7F080130 for Android does not verify X.509 certificates from SSL s (no CVSS)
- [CVE-2014-7614](https://cve.now/CVE-2014-7614.md): The Warrior Beach Retreat (aka com.wWarriorBeachRetreat) application 0.1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7616](https://cve.now/CVE-2014-7616.md): The Physics Forums (aka com.tapatalk.physicsforumscom) application 3.9.22 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7617](https://cve.now/CVE-2014-7617.md): The www.roads365.com (aka ydx.android) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7618](https://cve.now/CVE-2014-7618.md): The Interior Design (aka com.interior.design.mcreda) application 1.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7620](https://cve.now/CVE-2014-7620.md): The Authors On Tour - Live! (aka com.appmakr.app122286) application 4 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7621](https://cve.now/CVE-2014-7621.md): The EIN Lookup (aka appinventor.ai\_siwanuth.EINLookup) application 1.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7622](https://cve.now/CVE-2014-7622.md): The Affinity Mobile ATM Locator (aka com.collegemobile.affinity.locator) application 1.5 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7624](https://cve.now/CVE-2014-7624.md): The Guess the Pixel Character Quiz (aka com.aiadp.pixelcQuiz) application 1.3 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7626](https://cve.now/CVE-2014-7626.md): The Atme (aka com.bedigital.atme) application 1.0.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.