CVEs published in October 2014
1,428 vulnerabilities, 75 critical, 6 exploited.
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in...5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreGoogle V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap...5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125...7.5 High
- google chrome, apple iphone os, itunes +6 more +8 moreUse-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom...7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows...7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in...7.5 High
- google chrome, chrome os, redhat enterprise linux desktop supplementary +3 more +5 moreGoogle Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the...10.0 High
- freepbxhtdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in...10.0 High
- golang gocrpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the...4.3 Medium
- openinfosecfoundation suricataThe SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows...5.0 Medium
- gopro hero, hero firmware +1 moregpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or...10.0 High
- gopro hero, hero firmware +1 moregpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2...10.0 High
- cyberoam osSQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with...10.0 High
- cyberoam osThe Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users...9.0 High
- cyberoam osStack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with...9.3 High
- openstack neutronThe default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014...7.6 High
- rejetto http file server, http file server (hfs) +1 moreThe findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or...9.8 Critical
- netcommwireless nb604n, nb604n firmware +1 moreCross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers...4.3 Medium
- brocade vyatta 5400 vrouter, vyatta 5400 vrouter software +1 more/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x),...7.2 High
- brocade vyatta 5400 vrouter, vyatta 5400 vrouter software +1 moreThe Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive...5.0 Medium
- brocade vyatta 5400 vrouter, vyatta 5400 vrouter software +1 moreThe management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows...9.0 High
- ibm business process managerThe Saved Search Admin component in the Process Admin Console in IBM Business Process Manager ...4.0 Medium
- cisco adaptive security appliance softwareThe SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and...5.5 Medium
- ibm tivoli service automation managerMultiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2...4.3 Medium
- python, apple mac os x +1 moreInteger overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...6.4 Medium
- mmonit m\/monitM/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which...7.5 High
- mmonit m\/monitCross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote...6.8 Medium
- phpcompta phpcompta\/noalyssbackup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary...7.5 High
- debian apt-cacherCross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote...4.3 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on...7.5 High
- restlet frameworkModerate severity vulnerability that affects org.restlet.jse:org.restlet5.0 Medium
- rexx-systems recruitmentIncomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and...4.3 Medium
- oracle solarisMultiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 have unspecified...10.0 High
- xmonad xmonad-contrabThe XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to...7.5 High
- drupal custom search moduleCross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and...3.5 Low
- drupal context form alteration moduleCross-site scripting (XSS) vulnerability in the configuration UI in the Context Form Alteration...3.5 Low
- content audit project auditSQL injection vulnerability in content-audit-schedule.php in the Content Audit plugin before 1.6...7.5 High
- redhat cloudforms 3.0.1 management engine, cloudforms 3.0.2 management engine, cloudforms 3.0.3 management engine +3 more +5 morevmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management...6.5 Medium
- redhat congaThe component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows...5.5 Medium
- embarcadero delphi xe6, c\+\+builder xe6 +1 moreHeap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap...6.8 Medium
- jolokiaCross-Site Request Forgery in Jolokia6.8 Medium
- redhat cloudforms 3.0.1 management engine, cloudforms 3.0.2 management engine, cloudforms 3.0.3 management engine +3 more +5 moreRed Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to...4.0 Medium
- apache shiroApache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled,...7.5 High
- redhat congaRed Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted...5.0 Medium
- hp systems insight managerCross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows...4.3 Medium
- tp-link firmwareMultiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with...9.3 High
- libvirtThe virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean...5.0 Medium
- openstack novaOpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service2.7 Low
- apple mac os xThe IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values,...9.3 High
- cisco webex meetings serverCisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by...4.0 Medium
- Show moreLoading…