CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

• openstack horizon Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon)... CVE-2014-8578 Fix available 3.5 LowOctober 31, 2014
• croogo Multiple cross-site scripting (XSS) vulnerabilities in Croogo before 2.1.0 allow remote attackers... CVE-2014-8577 Public exploit 4.3 MediumOctober 31, 2014
• bittorrent bootstrap-dht The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to... CVE-2014-8509 7.5 HighOctober 31, 2014
• citrix xenmobile Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not... CVE-2014-8495 5.0 MediumOctober 31, 2014
• wp-dbmanager project wp-dbmanager The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote... CVE-2014-8334 6.5 MediumOctober 31, 2014
• openstack nova, redhat openstack +1 more OpenStack Nova VMware instance leak potentially leading to compute DoS CVE-2014-8333 Fix available 4.0 MediumOctober 31, 2014
• testlink lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain... CVE-2014-8082 5.0 MediumOctober 31, 2014
• testlink lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote attackers to conduct PHP... CVE-2014-8081 7.5 HighOctober 31, 2014
• espocrm Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to... CVE-2014-7987 4.3 MediumOctober 31, 2014
• espocrm install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application... CVE-2014-7986 5.0 MediumOctober 31, 2014
• espocrm Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and... CVE-2014-7985 10.0 HighOctober 31, 2014
• enalean tuleap XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated... CVE-2014-7177 Public exploit 4.0 MediumOctober 31, 2014
• openstack nova, redhat openstack +1 more OpenStack Compute (Nova) Denial of Service vulnerability CVE-2014-3708 Fix available 4.0 MediumOctober 31, 2014
• fortinet fortimanager, fortianalyzer firmware +1 more Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet... CVE-2014-2336 4.3 MediumOctober 31, 2014
• fortinet fortianalyzer firmware Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet... CVE-2014-2335 4.3 MediumOctober 31, 2014
• fortinet fortianalyzer firmware Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet... CVE-2014-2334 4.3 MediumOctober 31, 2014
• bundler, fedoraproject fedora, opensuse +2 more Bundler may install gems from a different source than expected CVE-2013-0334 Fix available 5.0 MediumOctober 31, 2014
• ibm tivoli application dependency discovery manager Cross-site scripting (XSS) vulnerability in IBM Tivoli Application Dependency Discovery Manager ... CVE-2014-6150 3.5 LowOctober 31, 2014
• ibm tivoli application dependency discovery manager IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0... CVE-2014-6148 3.5 LowOctober 31, 2014
• ibm business process manager Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process... CVE-2014-6101 4.3 MediumOctober 31, 2014
• cisco unified communications manager Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in... CVE-2014-3375 4.3 MediumOctober 31, 2014
• cisco unified communications manager Multiple cross-site scripting (XSS) vulnerabilities in the CCM admin interface in the Server in... CVE-2014-3374 4.3 MediumOctober 31, 2014
• cisco unified communications manager Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface... CVE-2014-3373 4.3 MediumOctober 31, 2014
• cisco unified communications manager Multiple cross-site scripting (XSS) vulnerabilities in the CCM reports interface in the Server in... CVE-2014-3372 4.3 MediumOctober 31, 2014
• cisco unified communications manager SQL injection vulnerability in the administrative web interface in Cisco Unified Communications... CVE-2014-3366 6.5 MediumOctober 31, 2014
• imagemagick DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service ... CVE-2014-8562 Fix available 5.5 MediumOctober 31, 2014
• imagemagick PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of... CVE-2014-8355 Fix available 5.5 MediumOctober 31, 2014
• imagemagick The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers... CVE-2014-8354 Fix available 6.5 MediumOctober 31, 2014
• linux kernel A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does... CVE-2014-7207 4.9 MediumOctober 31, 2014
• linux kernel arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit... CVE-2014-3645 Fix available 2.1 LowOctober 31, 2014
• allplayer Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of... CVE-2013-7409 Public exploit EPSS 67.9% 7.5 HighOctober 30, 2014
• apache cxf, wss4j +1 more Improper Authentication in Apache WSS4J CVE-2014-3623 Fix available 5.0 MediumOctober 30, 2014
• apache cxf Loop with Unreachable Exit Condition in Apache CXF CVE-2014-3584 Fix available 5.0 MediumOctober 30, 2014
• bss continuity cms SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2... CVE-2014-3446 7.5 HighOctober 30, 2014
• dell equallogic ps4000 firmware Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote... CVE-2013-3304 Public exploit 5.0 MediumOctober 30, 2014
• hp hp-ux Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial... CVE-2014-7877 4.9 MediumOctober 30, 2014
• hijabmodern hijab modern The Hijab Modern (aka com.Aisyaidea.HijabModern) application 1.0 for Android does not verify X... CVE-2014-8538 5.4 MediumOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive... CVE-2014-8537 2.1 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive... CVE-2014-8536 2.1 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended... CVE-2014-8535 4.6 MediumOctober 29, 2014
• mcafee network data loss prevention Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before... CVE-2014-8534 2.1 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute... CVE-2014-8533 7.5 HighOctober 29, 2014
• mcafee network data loss prevention Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows... CVE-2014-8532 3.6 LowOctober 29, 2014
• mcafee network data loss prevention The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher... CVE-2014-8531 6.5 MediumOctober 29, 2014
• mcafee network data loss prevention Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote... CVE-2014-8530 7.5 HighOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which... CVE-2014-8529 2.1 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users... CVE-2014-8528 2.1 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive... CVE-2014-8527 3.6 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive... CVE-2014-8526 2.1 LowOctober 29, 2014
• mcafee network data loss prevention McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set... CVE-2014-8525 5.0 MediumOctober 29, 2014
• Show olderLoading…