# CVEs published 2014-10-21

181 CVEs were published on October 21, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2531](https://cve.now/CVE-2014-2531.md): SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 b (no CVSS)
- [CVE-2014-3111](https://cve.now/CVE-2014-3111.md): Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script (no CVSS)
- [CVE-2014-4514](https://cve.now/CVE-2014-4514.md): Cross-site scripting (XSS) vulnerability in includes/api\_tenpay/inc.tenpay\_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress a (no CVSS)
- [CVE-2014-4517](https://cve.now/CVE-2014-4517.md): Cross-site scripting (XSS) vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows re (no CVSS)
- [CVE-2014-4577](https://cve.now/CVE-2014-4577.md): Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress all (no CVSS)
- [CVE-2014-5005](https://cve.now/CVE-2014-5005.md): Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2014-5006](https://cve.now/CVE-2014-5006.md): Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2014-7280](https://cve.now/CVE-2014-7280.md): Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web servers to inject arb (no CVSS)
- [CVE-2014-8376](https://cve.now/CVE-2014-8376.md): Cross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4.1 for Drupal allows (no CVSS)
- [CVE-2014-8377](https://cve.now/CVE-2014-8377.md): Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2014-8378](https://cve.now/CVE-2014-8378.md): Cross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows remote authenticated users with the "adminis (no CVSS)
- [CVE-2014-8379](https://cve.now/CVE-2014-8379.md): Multiple cross-site scripting (XSS) vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users with (no CVSS)
- [CVE-2014-8380](https://cve.now/CVE-2014-8380.md): Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer (no CVSS)
- [CVE-2012-5242](https://cve.now/CVE-2012-5242.md): Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute (no CVSS)
- [CVE-2012-5243](https://cve.now/CVE-2012-5243.md): functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request (no CVSS)
- [CVE-2012-5702](https://cve.now/CVE-2012-5702.md): Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2013-7406](https://cve.now/CVE-2013-7406.md): SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2014-7140](https://cve.now/CVE-2014-7140.md): Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.x b (no CVSS)
- [CVE-2014-8375](https://cve.now/CVE-2014-8375.md): SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute ar (no CVSS)
- [CVE-2014-4884](https://cve.now/CVE-2014-4884.md): The Conrad Hotel (aka com.wConradHotel) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-4885](https://cve.now/CVE-2014-4885.md): The CPWORLD Close Protection World (aka com.tapatalk.closeprotectionworldcom) application 3.4.4 for Android does not verify X.509 certificat (no CVSS)
- [CVE-2014-4887](https://cve.now/CVE-2014-4887.md): The Joint Radio Blues (aka com.nobexinc.wls\_69685189.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-4888](https://cve.now/CVE-2014-4888.md): The BattleFriends at Sea GOLD (aka com.tequilamobile.warshipslivegold) application 1.1.0 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-4889](https://cve.now/CVE-2014-4889.md): The Diabetic Diet Guide (aka com.wDiabeticDietGuide) application 2.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-4890](https://cve.now/CVE-2014-4890.md): The Nano Digest (aka com.magzter.nanodigest) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-4891](https://cve.now/CVE-2014-4891.md): The CT iHub (aka com.concursive.ctihub) application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2014-4892](https://cve.now/CVE-2014-4892.md): The uControl Smart Home Automation (aka de.ucontrol) application 1.2 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-4894](https://cve.now/CVE-2014-4894.md): The MyMetro (aka com.myrippleapps.mymetro) application 2.4.7 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-4895](https://cve.now/CVE-2014-4895.md): The Herpin Time Radio (aka com.herpin.time.radio) application 2.0 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-4896](https://cve.now/CVE-2014-4896.md): The Parque Imperial (aka com.a792139893520606f84b2188a.a23428594a) application 1.02 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-4897](https://cve.now/CVE-2014-4897.md): The Touriosity Travelmag (aka com.magzter.touriositytravelmag) application 3.1 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-4898](https://cve.now/CVE-2014-4898.md): The Harivijay (aka com.upasanhar.marathi.harivijay) application 4.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-4899](https://cve.now/CVE-2014-4899.md): The Indian Cement Review (aka com.magzter.indiancementreview) application 3.01 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-4900](https://cve.now/CVE-2014-4900.md): The migme (aka com.projectgoth) application 4.03.002 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-4901](https://cve.now/CVE-2014-4901.md): The Bond Trading (aka com.appmakr.app613309) application 197705 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-4903](https://cve.now/CVE-2014-4903.md): The Kakao Bingo Garden (aka com.mocoga.bingogarden) application 1.0.14 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-4904](https://cve.now/CVE-2014-4904.md): The Crossmo Calendar (aka com.crossmo.calendar) application 1.7.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-4905](https://cve.now/CVE-2014-4905.md): The Clean Internet Browser (aka com.cleantab.browsesecure) application 1.36 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-4906](https://cve.now/CVE-2014-4906.md): The Brisbane & Queensland Alert (aka com.queensland.alert) application 2.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7628](https://cve.now/CVE-2014-7628.md): The Acorn Comms (aka com.acorncomms.app) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7629](https://cve.now/CVE-2014-7629.md): The Yulman Stadium (aka com.dub.app.tulanestadium) application 1.4.25 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7630](https://cve.now/CVE-2014-7630.md): The Fling Gold (aka com.mbgames.fling.gold) application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7631](https://cve.now/CVE-2014-7631.md): The Villa Antonia (aka com.appbuilder.u7p5019) application 1 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7632](https://cve.now/CVE-2014-7632.md): The news revolution - bahrain (aka com.news.revolution.BH) application 3.2 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7633](https://cve.now/CVE-2014-7633.md): The Dino Zoo (aka com.tappocket.dinozoostar) application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7634](https://cve.now/CVE-2014-7634.md): The Adopt O Pet (aka com.wFindAPet) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7636](https://cve.now/CVE-2014-7636.md): The United Hawk Nation (aka com.united12thman) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7638](https://cve.now/CVE-2014-7638.md): The Fabuestereo 88.1 FM (aka com.nobexinc.wls\_27892411.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7640](https://cve.now/CVE-2014-7640.md): The Hotel Room (aka com.wHotelRoom) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the (no CVSS)
- [CVE-2014-7642](https://cve.now/CVE-2014-7642.md): The Pegasus Airlines (aka com.wPegasusAirlines) application 0.84.13503.96707 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7643](https://cve.now/CVE-2014-7643.md): The C.R. (no CVSS)
- [CVE-2014-7644](https://cve.now/CVE-2014-7644.md): The Go MSX MLS (aka com.doapps.android.realestate.RE\_16b9c09c4d5b0e174208f35e7c49f9a0) application 2.3.4.MR3 for Android does not verify X.5 (no CVSS)
- [CVE-2014-7646](https://cve.now/CVE-2014-7646.md): The EMT-Paramedic Lite (aka com.wEMTparamedicLite) application 0.1 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7647](https://cve.now/CVE-2014-7647.md): The BOOKING DISCOUNT (aka com.wmygoodhotelscom) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7648](https://cve.now/CVE-2014-7648.md): The SMARTalk (aka jp.co.fusioncom.smartalk.android) application 1.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7649](https://cve.now/CVE-2014-7649.md): The Classic Car Buyer (aka com.magazinecloner.carbuyer) application @7F08017A for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7650](https://cve.now/CVE-2014-7650.md): The JJA- Juvenile Justice Act 1986 (aka com.felix.jja) application 1.0 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7652](https://cve.now/CVE-2014-7652.md): The Magicam Photo Magic Editor (aka mobi.magicam.editor) application 5.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7655](https://cve.now/CVE-2014-7655.md): The Dresden Transport Museum (aka de.appack.project.vmd) application 2.2 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7656](https://cve.now/CVE-2014-7656.md): The Indian Management (aka com.magzter.indianmanagement) application 3.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7659](https://cve.now/CVE-2014-7659.md): The ExpeditersOnline.com Forum (aka com.quoord.tapatalkeo.activity) application 3.7.13 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7660](https://cve.now/CVE-2014-7660.md): The Gent Magazine (aka com.magzter.thegentmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7661](https://cve.now/CVE-2014-7661.md): The Masquito Blogger (aka com.wmasquito) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7663](https://cve.now/CVE-2014-7663.md): The Right to the Nitty Gritty (aka com.wGoNittyGritty) application 0.1 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7664](https://cve.now/CVE-2014-7664.md): The Bilingual Magic Ball Relajo (aka com.wBilingualMagicBallRelajo) application 0.1 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7666](https://cve.now/CVE-2014-7666.md): The American Waterfowler (aka com.magazinecloner.americanwaterfowler) application @7F0801AA for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7667](https://cve.now/CVE-2014-7667.md): The Coca-Cola FM Honduras (aka com.enyetech.radio.coca\_cola.fm\_hn) application 2.0.41725 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7668](https://cve.now/CVE-2014-7668.md): The Ads Free. (no CVSS)
- [CVE-2014-7670](https://cve.now/CVE-2014-7670.md): The Motor Town: Machine Soul Free (aka com.alawar.motortownfree) application 1.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7671](https://cve.now/CVE-2014-7671.md): The Tekno Apsis (aka com.teknoapsis) application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th (no CVSS)
- [CVE-2014-7674](https://cve.now/CVE-2014-7674.md): The TicketOne.it (aka it.ticketone.mobile.app.Android) application 2.2 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7676](https://cve.now/CVE-2014-7676.md): The Home Made Air Freshener (aka com.wHomeMadeAirFreshener) application 1.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7677](https://cve.now/CVE-2014-7677.md): The Scudetto (aka com.scudetto) application 2.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid (no CVSS)
- [CVE-2014-7681](https://cve.now/CVE-2014-7681.md): The VMware vForums 2014 (aka com.coreapps.android.followme.vmwarevforums) application 6.0.9.4 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7682](https://cve.now/CVE-2014-7682.md): The GR8! TV (aka com.magzter.greighttv) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-7683](https://cve.now/CVE-2014-7683.md): The Free Canadian Author Previews (aka com.booksellerscanada.authorpreview) application 1.0.0 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7685](https://cve.now/CVE-2014-7685.md): The Razer Comms - Gaming Messenger (aka com.razerzone.comms) application 1.3.07 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7686](https://cve.now/CVE-2014-7686.md): The So. (no CVSS)
- [CVE-2014-7688](https://cve.now/CVE-2014-7688.md): The Home Improvement (aka com.whomeimprovementapp) application 0.1 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7689](https://cve.now/CVE-2014-7689.md): The GzoneRC - The RC Hobby Hub (aka com.wGzoneRC) application 0.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7690](https://cve.now/CVE-2014-7690.md): The myfone Shopping (aka com.twm.pt.eccart) application 2.1.01.00.040 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7691](https://cve.now/CVE-2014-7691.md): The Life Story of Sheikh Mujib (aka com.wbongobondho) application 0.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7692](https://cve.now/CVE-2014-7692.md): The Lent Experience (aka com.wLentExperience) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7693](https://cve.now/CVE-2014-7693.md): The JusApp! (aka com.tapatalk.jusappcombrforum) application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7694](https://cve.now/CVE-2014-7694.md): The Corvette Museum (aka com.app\_corvettemuseum.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7695](https://cve.now/CVE-2014-7695.md): The easaa Baoneng (aka com.easaa.baoneng) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7696](https://cve.now/CVE-2014-7696.md): The Halftime Magazine (aka com.magzter.halftimemagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7697](https://cve.now/CVE-2014-7697.md): The Eyvah! Bosandim ozgurum (aka com.wEyvahBosandimBlog) application 0.1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7698](https://cve.now/CVE-2014-7698.md): The Xinhua International (aka org.xinhua.xnews\_international) application 5.5.0 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7700](https://cve.now/CVE-2014-7700.md): The Flying Fox (aka com.chillingo.slyfoxfree.android.aja) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7701](https://cve.now/CVE-2014-7701.md): The DoNotTrackMe - Mobile Privacy (aka com.abine.dnt) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7702](https://cve.now/CVE-2014-7702.md): The ahtty (aka com.crevation.babylon.ahtty) application 1.97.16 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7703](https://cve.now/CVE-2014-7703.md): The Terrorizer Magazine (aka com.triactivemedia.terrorizer) application @7F08017A for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7705](https://cve.now/CVE-2014-7705.md): The Atkins Diet Free Shopping List (aka com.wAtkinsDietFreeShoppingList) application 1.1 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7707](https://cve.now/CVE-2014-7707.md): The Outdoor Design And Living (aka com.pocketmagsau.outdoordesignandliving) application @7F080181 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-7708](https://cve.now/CVE-2014-7708.md): The Raven - The Culture Lover (aka com.booksbyraven) application 1.60 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7710](https://cve.now/CVE-2014-7710.md): The India Today Telugu (aka com.magzter.indiatoday.telugu) application 3.02 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7712](https://cve.now/CVE-2014-7712.md): The Tiket.com Hotel & Flight (aka com.tiket.gits) application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7713](https://cve.now/CVE-2014-7713.md): The Skin&Ink Magazine (aka com.triactivemedia.skinandink) application @7F08017A for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7714](https://cve.now/CVE-2014-7714.md): The ibon (aka tw.net.pic.mobi) application 3.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mi (no CVSS)
- [CVE-2014-7715](https://cve.now/CVE-2014-7715.md): The GIGA HOBBY (aka com.innopage.store.gigahobby) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7716](https://cve.now/CVE-2014-7716.md): The Ultimate Christian Radios (aka com.ngg.ultimatechristianradios) application 1.0.1 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-7717](https://cve.now/CVE-2014-7717.md): The Mills-Hazel Property Mgmt (aka com.appexpress.millshazelpropertymanagement) application 3.0.0 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-7718](https://cve.now/CVE-2014-7718.md): The Travel+Leisure (aka com.magzter.travelleisure) application 3.0 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7719](https://cve.now/CVE-2014-7719.md): The BASEBALL MANAGER K (aka com.cjenm.yagamkgoogle) application 1.13 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7720](https://cve.now/CVE-2014-7720.md): The Better Homes and Gardens Aus (aka com.pacificmagazines.betterhomesandgardens) application @7F0801B2 for Android does not verify X.509 ce (no CVSS)
- [CVE-2014-7721](https://cve.now/CVE-2014-7721.md): The President Clicker (aka com.flexymind.pclicker) application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7722](https://cve.now/CVE-2014-7722.md): The Indian Jeweller (aka com.magzter.indianjeweller) application 3.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7723](https://cve.now/CVE-2014-7723.md): The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7724](https://cve.now/CVE-2014-7724.md): The Chemssou Blink (aka com.chemssou.blink) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7725](https://cve.now/CVE-2014-7725.md): The Rally Albania Live 2014 (aka com.wRallyAlbaniaLIVE2014) application 0.11 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7726](https://cve.now/CVE-2014-7726.md): The Golosinas Simpson1 (aka com.wGolosinasSimpson1) application 0.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7727](https://cve.now/CVE-2014-7727.md): The Dj Brad H (aka com.dreamstep.wDjBradH) application 0.90 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-7728](https://cve.now/CVE-2014-7728.md): The Logan Banner (aka com.soln.S8B5C1F53B8CBE06D5DE0A0E7E23DCDA7) application 1.0010.b0010 for Android does not verify X.509 certificates fr (no CVSS)
- [CVE-2014-7731](https://cve.now/CVE-2014-7731.md): The Radio de la Cato (aka com.radio.de.la.cato) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7733](https://cve.now/CVE-2014-7733.md): The Karaf Magazin (aka com.magzter.karafmagazin) application 3.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7734](https://cve.now/CVE-2014-7734.md): The Reds Anytime Bail (aka com.onesolutionapps.redsanytimebailandroid) application 1.1 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7735](https://cve.now/CVE-2014-7735.md): The Dr. (no CVSS)
- [CVE-2014-7737](https://cve.now/CVE-2014-7737.md): The FMAC : Federation Culinaire (aka com.fmac) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-7739](https://cve.now/CVE-2014-7739.md): The Anahi A Adopter FR (aka com.wAnahiAAdopterFR) application 0.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7740](https://cve.now/CVE-2014-7740.md): The Pony Magazine (aka com.triactivemedia.ponymagazine) application @7F080193 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7741](https://cve.now/CVE-2014-7741.md): The Healing Bookstore (aka com.wHealingBookstore) application 0.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7742](https://cve.now/CVE-2014-7742.md): The Noticias del Vaticano (aka com.wNoticiasdelVaticano) application 0.1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-7743](https://cve.now/CVE-2014-7743.md): The Humor Ironias y Realidades (aka com.wHumork) application 0.63.13371.13576 for Android does not verify X.509 certificates from SSL server (no CVSS)
- [CVE-2014-7744](https://cve.now/CVE-2014-7744.md): The Musulmanin.com (aka com.wSalyafiyailimurdjiya) application 0.1 for Android does not verify X.509 certificates from SSL servers, which al (no CVSS)
- [CVE-2014-7745](https://cve.now/CVE-2014-7745.md): The Flight Manager (aka com.flightmanager.view) application 4.0 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7746](https://cve.now/CVE-2014-7746.md): The Fusion Flowers - Weddings (aka com.triactivemedia.fusionweddings) application @7F0801AA for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7748](https://cve.now/CVE-2014-7748.md): The Garip Ve Ilginc Olaylar (aka com.wGaripveeIlgincOlay) application 0.1 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7749](https://cve.now/CVE-2014-7749.md): The CamDictionary (aka com.intsig.camdict) application 2.3.0.20131118 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7750](https://cve.now/CVE-2014-7750.md): The Taster Magazine (aka com.magazinecloner.taster) application @7F080183 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)
- [CVE-2014-7751](https://cve.now/CVE-2014-7751.md): The Recetas de Tragos (aka com.wRecetasdeTragos) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7752](https://cve.now/CVE-2014-7752.md): The NASIOC (aka net.endoftime.android.forumrunner.nasioc) application 3.8.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7753](https://cve.now/CVE-2014-7753.md): The Circa News (aka cir.ca) application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middl (no CVSS)
- [CVE-2014-7754](https://cve.now/CVE-2014-7754.md): The Condor S.E. (no CVSS)
- [CVE-2014-7755](https://cve.now/CVE-2014-7755.md): The eTopUpOnline (aka com.moremagic.etopup.client.android) application 3.4.9 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7756](https://cve.now/CVE-2014-7756.md): The Radiohead fan (aka nl.jborsje.android.bandnews.radiohead) application 4.6.2 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7757](https://cve.now/CVE-2014-7757.md): The Awful Ninja Game (aka com.absolutelyawfulapplications.awfulninjagame) application 1.0.23 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7758](https://cve.now/CVE-2014-7758.md): The AMKAMAL Science Portfolio (aka com.wAMKAMALSciencePortfolio) application 0.1 for Android does not verify X.509 certificates from SSL ser (no CVSS)
- [CVE-2014-7759](https://cve.now/CVE-2014-7759.md): The Jazz Lovers Radio (aka com.nobexinc.wls\_99273254.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7760](https://cve.now/CVE-2014-7760.md): The Health assistance service (aka net.nttcloud.ft.karada) application 2.4.1 for Android does not verify X.509 certificates from SSL servers (no CVSS)
- [CVE-2014-7761](https://cve.now/CVE-2014-7761.md): The Ink Cards (aka com.sincerely.android.ink) application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2014-7762](https://cve.now/CVE-2014-7762.md): The Bite it! (aka com.ASA1Touch.Bite\_it) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-7763](https://cve.now/CVE-2014-7763.md): The Listen up! mirucho (aka jp.ameba.kiiteyo.android) application 1.1.8 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7764](https://cve.now/CVE-2014-7764.md): The Semper Invicta Fitness (aka com.semper.invicta.fitness) application 1.1 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7765](https://cve.now/CVE-2014-7765.md): The Hundred Thousands Kid Book (aka it.tinytap.attsa.thousands) application 1.6.3 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7766](https://cve.now/CVE-2014-7766.md): The 7 Habits Personal Development (aka appinventor.ai\_ingka\_d\_jiw.TheCompleteGuideToApplyingThe7HabitsInHolisticPersonalDevelopment) applica (no CVSS)
- [CVE-2014-7767](https://cve.now/CVE-2014-7767.md): The A+ (aka cn.xrzcm) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle atta (no CVSS)
- [CVE-2014-7768](https://cve.now/CVE-2014-7768.md): The Analects of Confucius (aka com.azbc88881.lunyu) application 8.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7769](https://cve.now/CVE-2014-7769.md): The Accurate Lending (aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0) application 1.0021.b0021 for Android does not verify X.509 certificate (no CVSS)
- [CVE-2014-7770](https://cve.now/CVE-2014-7770.md): The Lagu POP Indonesia (aka com.lagu.pop.indonesia.xygwphqpuomclljvaa) application 2.0 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7771](https://cve.now/CVE-2014-7771.md): The World Tamil Bayan (aka com.wWorldTamilBayan) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7772](https://cve.now/CVE-2014-7772.md): The MB Tickets (aka com.xcr.android.mbtickets) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7773](https://cve.now/CVE-2014-7773.md): The Cleveland Football STREAM (aka com.appstronautme.clevelandfootballstream) application 2.1.0 for Android does not verify X.509 certificat (no CVSS)
- [CVE-2014-7774](https://cve.now/CVE-2014-7774.md): The Herbs & Flowers Dictionary (aka com.wHerbsNFlowersDictionary) application 0.1 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-7775](https://cve.now/CVE-2014-7775.md): The Champak - Hindi (aka com.magzter.champakhindi) application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7776](https://cve.now/CVE-2014-7776.md): The Kavita KS (aka com.snaplion.kavitaks) application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man- (no CVSS)
- [CVE-2014-7777](https://cve.now/CVE-2014-7777.md): The Slingshot Forum (aka com.tapatalk.theslingshotforumcom) application 3.9.14 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-7778](https://cve.now/CVE-2014-7778.md): The Epc World (aka com.magzter.epcworld) application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-i (no CVSS)
- [CVE-2014-7779](https://cve.now/CVE-2014-7779.md): The Kuran'in Bilimsel Mucizeleri (aka com.wKurannBilimselMucizeleri) application 0.1 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-7780](https://cve.now/CVE-2014-7780.md): The Pakistan Cricket News (aka com.conduit.app\_cf18df8bdf454eb0a836e2d29886bc40.app) application 1.21.38.6504 for Android does not verify X. (no CVSS)
- [CVE-2014-7781](https://cve.now/CVE-2014-7781.md): The Marijuana Handbook Lite - Weed (aka com.fallacystudios.marijuanahandbooklite) application 3.2 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-7782](https://cve.now/CVE-2014-7782.md): The Macedonia Hacienda Hotel (aka appinventor.ai\_orolimpio999.HotelMacedonia) application 1.0 for Android does not verify X.509 certificates (no CVSS)
- [CVE-2014-7783](https://cve.now/CVE-2014-7783.md): The Bill G. (no CVSS)
- [CVE-2014-7784](https://cve.now/CVE-2014-7784.md): The Schon! Magazine (aka com.magzter.schonmagazine) application 3.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7785](https://cve.now/CVE-2014-7785.md): The AAAA Discount Bail (aka com.onesolutionapps.aaaadiscountbailandroid) application 1.1 for Android does not verify X.509 certificates from (no CVSS)
- [CVE-2014-7786](https://cve.now/CVE-2014-7786.md): The English Football Magazine (aka com.magzter.englishfootball) application 3.0 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7787](https://cve.now/CVE-2014-7787.md): The iShuttle (aka com.synapse.ishuttle\_user) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows m (no CVSS)
- [CVE-2014-7788](https://cve.now/CVE-2014-7788.md): The Best Free Giveaways (aka com.wIphone5GiveAways) application 0.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7789](https://cve.now/CVE-2014-7789.md): The Zillion Muslims (aka com.zillionmuslims.src) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-7791](https://cve.now/CVE-2014-7791.md): The Backyard Wrestling (aka com.wBackyardWrestling) application 0.1 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-7793](https://cve.now/CVE-2014-7793.md): The CB - Calciatori Brutti (aka com.calciatori.brutti) application 1.0 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-7794](https://cve.now/CVE-2014-7794.md): The Knights of the Void (aka me.narr8.android.serial.knights\_of\_the\_void) application 2.1.7 for Android does not verify X.509 certificates f (no CVSS)
- [CVE-2014-7795](https://cve.now/CVE-2014-7795.md): The Harpers Bazaar Art (aka com.itp.harpersart) application @7F080181 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-7796](https://cve.now/CVE-2014-7796.md): The House365 Radio (aka com.nobexinc.wls\_27853803.rc) application 3.2.3 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-7797](https://cve.now/CVE-2014-7797.md): The Thai food (aka com.foods.thaifood) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-7798](https://cve.now/CVE-2014-7798.md): The Coca-Cola FM Brasil (aka com.enyetech.radio.coca\_cola.fm\_br) application 2.0.41709 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-7799](https://cve.now/CVE-2014-7799.md): The Squishy birds (aka com.tatmob.squishybirds) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-7800](https://cve.now/CVE-2014-7800.md): The Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-7802](https://cve.now/CVE-2014-7802.md): The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2) application @7F050001 for Android does not verify X. (no CVSS)
- [CVE-2014-7803](https://cve.now/CVE-2014-7803.md): The Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-7804](https://cve.now/CVE-2014-7804.md): The Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not verify X.509 certificates from SSL servers, w (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.