Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
September

CVEs published in September 2014

1,195 vulnerabilities, 83 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

debian linux, linux kernel, canonical ubuntu linux +2 moreThe __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel...CVE-2015-3331Fix availableEPSS 10.7%9.3 HighSeptember 24, 2014
debian linux, linux kernel, fedoraproject fedora +2 more +4 moreThe ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol...CVE-2015-2922Fix available3.3 LowSeptember 24, 2014
debian linux, linux kernel, canonical ubuntu linux +2 morearch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag...CVE-2015-2830Fix available1.9 LowSeptember 24, 2014
linux kernel, xen, ubuntu +2 moreXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to...CVE-2015-2150Fix available4.9 MediumSeptember 24, 2014
linux kernelnet/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table,...CVE-2015-2042Fix available4.6 MediumSeptember 24, 2014
debian linux, linux kernel, suse linux enterprise server +2 morenet/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl...CVE-2015-2041Fix available4.6 MediumSeptember 24, 2014
linux kernelThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses...CVE-2015-1593Fix available5.0 MediumSeptember 24, 2014
debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the...CVE-2015-1421Fix available10.0 HighSeptember 24, 2014
xendrivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for...CVE-2015-07772.1 LowSeptember 24, 2014
linux kernel, canonical ubuntu linux +1 moreOff-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the...CVE-2014-9683Fix available3.6 LowSeptember 24, 2014
debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...CVE-2014-9529Fix available6.9 MediumSeptember 24, 2014
linux kernelThe __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does...CVE-2014-9419Fix available2.1 LowSeptember 24, 2014
linux kernelStack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers...CVE-2014-8884Fix available6.1 MediumSeptember 24, 2014
debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat...CVE-2014-8159Fix available6.9 MediumSeptember 24, 2014
linux kernel, suse linux enterprise server +1 moreRace condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through...CVE-2014-8086Fix available4.7 MediumSeptember 24, 2014
linux kernel, canonical ubuntu linux, novell suse linux enterprise server +2 moreThe pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not...CVE-2014-7970Fix available5.5 MediumSeptember 24, 2014
linux kernelThe implementation of certain splice_write file operations in the Linux kernel before 3.16 does...CVE-2014-7822Public exploitFix available7.2 HighSeptember 24, 2014
linux kernelThe __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not...CVE-2014-6410Fix available4.7 MediumSeptember 24, 2014
gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 CriticalSeptember 24, 2014
libvncserver, debian linux, fedoraproject fedora +2 more +4 moreMultiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer...CVE-2014-6055Fix available6.5 MediumSeptember 24, 2014
libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6054Fix available4.3 MediumSeptember 24, 2014
libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6053Fix available5.0 MediumSeptember 24, 2014
libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreThe HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier...CVE-2014-6052Fix available7.5 HighSeptember 24, 2014
libvncserver, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and...CVE-2014-6051Fix available7.5 HighSeptember 24, 2014
yukoyuko yuko yukoThe Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko_android) application 1.0.5 and earlier for...CVE-2014-53235.4 MediumSeptember 24, 2014
cisco unified communications domain manager platformCisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote...CVE-2014-33805.0 MediumSeptember 24, 2014
google chrome, mozilla firefox, firefox esr +3 more +5 moreMozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...CVE-2014-1568Fix availableEPSS 16.7%7.5 HighSeptember 24, 2014
ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere...CVE-2014-48166.0 MediumSeptember 23, 2014
ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6...CVE-2014-47703.5 LowSeptember 23, 2014
ibm flex system interconnect fabric, server connectivity module, bladecenter 10g vfsm +37 more +39 moreIBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before...CVE-2014-475210.0 HighSeptember 23, 2014
ibm curam social program managementCross-site scripting (XSS) vulnerability in IBM Curam Social Program Management (SPM) 6.0.4...CVE-2014-60913.5 LowSeptember 23, 2014
ibm rational clearcaseIBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does...CVE-2014-31065.0 MediumSeptember 23, 2014
ibm rational clearcaseThe OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15,...CVE-2014-31055.0 MediumSeptember 23, 2014
ibm rational clearcaseIBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5...CVE-2014-31045.0 MediumSeptember 23, 2014
ibm rational clearcaseThe Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0...CVE-2014-31035.0 MediumSeptember 23, 2014
ibm rational clearcaseThe login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before...CVE-2014-31015.0 MediumSeptember 23, 2014
ibm rational clearcaseIBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5...CVE-2014-30905.0 MediumSeptember 23, 2014
sos jobschedulerXML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241...CVE-2014-53925.8 MediumSeptember 23, 2014
eset endpoint security, smart security +1 moreThe ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 ...CVE-2014-49736.9 MediumSeptember 23, 2014
wps kingsoft clip \(office tool\)The Kingsoft Clip (Office Tool) (aka cn.wps.clip) application 1.5.1 for Android does not verify X...CVE-2014-66925.4 MediumSeptember 23, 2014
ucweb uc browser hdThe UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not verify X.509...CVE-2014-66915.4 MediumSeptember 23, 2014
insta.me instamessage - instagram chatThe InstaMessage - Instagram Chat (aka com.futurebits.instamessage.free) application 1.6.2 for...CVE-2014-66905.4 MediumSeptember 23, 2014
jingwei jw cardsThe JW Cards (aka com.jingwei.card) application 3.8.0 for Android does not verify X.509...CVE-2014-66895.4 MediumSeptember 23, 2014
voices voices.comThe Voices.com (aka com.voices.voices) application 1.5 for Android does not verify X.509...CVE-2014-66885.4 MediumSeptember 23, 2014
wsaudichannelalnas project wsaudichannelalnasThe wSaudichannelAlNasr (aka com.wSaudichannelAlNasr) application 0.1 for Android does not verify...CVE-2014-66875.4 MediumSeptember 23, 2014
zoho books - accounting appThe Zoho Books - Accounting App (aka com.zoho.books) application 3.1.9 for Android does not...CVE-2014-66865.4 MediumSeptember 23, 2014
netjapan tsushima travel guideThe Tsushima Travel Guide (aka com.netjapan.ntsushima) application 1.9 for Android does not...CVE-2014-66855.4 MediumSeptember 23, 2014
mol bringapontThe MOL bringaPONT (aka hu.mol.bringapont) application 1.1 for Android does not verify X.509...CVE-2014-66845.4 MediumSeptember 23, 2014
openelectrical open electrical webserThe Open Electrical Webser (aka com.wOpenElectricalWeb) application 0.1 for Android does not...CVE-2014-66835.4 MediumSeptember 23, 2014
w88235ff7bdc2fb574f1789750ea99ed6 project w88235ff7bdc2fb574f1789750ea99ed6The w88235ff7bdc2fb574f1789750ea99ed6 (aka com.w88235ff7bdc2fb574f1789750ea99ed6) application 0.1...CVE-2014-66825.4 MediumSeptember 23, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open