CVEs published in October 2014
1,428 vulnerabilities, 75 critical, 6 exploited.
- terrarienbilder terrarienbilder.com forumThe Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for...5.4 Medium
- trialtracker trial trackerThe Trial Tracker (aka com.etcweb.android.trial_tracker) application 1.1.9 for Android does not...5.4 Medium
- daum maps - subwayThe Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X...5.4 Medium
- mostafa shemeas project shemeasThe Mostafa Shemeas (aka com.mostafa.shemeas.website) application 1.0 for Android does not verify...5.4 Medium
- arabia2000 car wallpapers hdThe Car Wallpapers HD (aka com.arab4x4.gallery.app) application 1.3 for Android does not verify X...5.4 Medium
- myvet2pet ahrahThe AHRAH (aka com.vet2pet.aid219426) application 219426 for Android does not verify X.509...5.4 Medium
- debian exuberant ctags, canonical ubuntu linux, debian linux +1 more +3 morejscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite...5.0 Medium
- openstack keystonemiddleware, python-keystoneclient +1 moreOpenStack keystonemiddleware does not verify certificate4.3 Medium
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to...4.0 Medium
- ibm websphere mqIBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client...6.5 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +9 more +11 moreIBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management...5.0 Medium
- rsyslog, sysklogd project sysklogd +1 moreInteger overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows...5.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreOpenStack Identity Keystone Exposure of Sensitive Information4.0 Medium
- ibm tivoli federated identity managerOpen redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0...4.3 Medium
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreUnspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote...10.0 High
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreUnspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10...10.0 High
- hp system management homepageHP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking...4.3 Medium
- hp system management homepageCross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4...6.0 Medium
- hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows...4.3 Medium
- postfixMultiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow...6.5 Medium
- codeasily grand flagalleryCross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash...4.3 Medium
- wordpressSQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote...7.5 High
- imop longThe Long (aka com.imop.longjiang.android) application 1.0.4 for Android does not verify X.509...5.4 Medium
- eyexamThe EyeXam (aka com.globaleyeventures.eyexam) application 1.4 for Android does not verify X.509...5.4 Medium
- foxitsoftware foxit mobilepdf - pdf readerThe Foxit MobilePDF - PDF Reader (aka com.foxit.mobile.pdf.lite) application 2.2.0.0616 for...5.4 Medium
- automon ledline.gr officialThe LedLine.gr Official (aka com.automon.ledline.gr) application 1.4.0.9 for Android does not...5.4 Medium
- nbcfc new beginnings cfcThe New Beginnings CFC (aka com.goodbarber.nbcfc) application 1.1 for Android does not verify X...5.4 Medium
- xenThe hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an...8.3 High