Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla bugzilla, fedoraproject fedora +1 moreBugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4...CVE-2014-15734.3 MediumOctober 9, 2014
mozilla bugzilla, fedoraproject fedora +1 moreThe confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x...CVE-2014-15725.0 MediumOctober 9, 2014
mozilla bugzilla, fedoraproject fedora +1 moreBugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4...CVE-2014-15714.0 MediumOctober 9, 2014
fishshell fishThe funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create...CVE-2014-3856Fix available7.0 HighOctober 9, 2014
adaptivecomputing torque resource managerThe tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka...CVE-2014-3684Fix available6.8 MediumOctober 9, 2014
fishshell fishfish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service ...CVE-2014-2914Fix available9.8 CriticalOctober 9, 2014
fishshell fishThe psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary...CVE-2014-2906Fix available7.0 HighOctober 9, 2014
drupal mayoCross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.3 for Drupal...CVE-2014-80794.0 MediumOctober 9, 2014
drupal printCross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions)...CVE-2014-80783.5 LowOctober 9, 2014
drupal newsflashCross-site scripting (XSS) vulnerability in the NewsFlash theme 6.x-1.x before 6.x-1.7 and 7.x-1...CVE-2014-80773.5 LowOctober 9, 2014
drupal professional themeCross-site scripting (XSS) vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal...CVE-2014-80763.5 LowOctober 9, 2014
drupal tribuneCross-site scripting (XSS) vulnerability in the Tribune module 6.x-1.x and 7.x-3.x for Drupal...CVE-2014-80753.5 LowOctober 9, 2014
adobe digital editionsAdobe Digital Editions (DE) 4 does not use encryption for transmission of data to adelogs.adobe...CVE-2014-80685.0 MediumOctober 9, 2014
mit kerberos 5The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT...CVE-2014-5351Fix available2.1 LowOctober 9, 2014
w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morewpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using...CVE-2014-3686Fix available6.8 MediumOctober 9, 2014
joomla joomla\!Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to authenticate and...CVE-2014-79847.5 HighOctober 8, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in com_contact in Joomla! CMS 3.1.2 through 3.2.x before...CVE-2014-79834.3 MediumOctober 8, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3...CVE-2014-79824.3 MediumOctober 8, 2014
joomla joomla\!SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers...CVE-2014-79817.5 HighOctober 8, 2014
eng spagobiThe default configuration in the accessibility engine in SpagoBI 5.0.0 does not set...CVE-2014-72966.8 MediumOctober 8, 2014
openstack cinder, nova, trove +1 more +3 moreOpenStack Oslo utility sensitive information exposure via log filesCVE-2014-7231Fix available2.1 LowOctober 8, 2014
joomla joomla\!Unspecified vulnerability in Joomla! before 2.5.4 before 2.5.26, 3.x before 3.2.6, and 3.3.x...CVE-2014-72295.0 MediumOctober 8, 2014
zeromqlibzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows...CVE-2014-7203Fix available4.3 MediumOctober 8, 2014
zeromqstream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle...CVE-2014-7202Fix available4.3 MediumOctober 8, 2014
joomla joomla\!Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to...CVE-2014-66327.5 HighOctober 8, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in com_media in Joomla! 3.2.x before 3.2.5 and 3.3.x...CVE-2014-66314.3 MediumOctober 8, 2014
adaptivecomputing moabAdaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when a pre-generated key is used, does...CVE-2014-53764.0 MediumOctober 8, 2014
adaptivecomputing moabThe server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate...CVE-2014-53754.0 MediumOctober 8, 2014
adaptivecomputing moabAdaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the...CVE-2014-5300Public exploit5.0 MediumOctober 8, 2014
drupal zenMultiple cross-site scripting (XSS) vulnerabilities in template.php in Zen theme 7.x-3.x before 7...CVE-2014-79803.5 LowOctober 8, 2014
drupal simplecorpCross-site scripting (XSS) vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for...CVE-2014-79793.5 LowOctober 8, 2014
drupal bluemastersCross-site scripting (XSS) vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for...CVE-2014-79783.5 LowOctober 8, 2014
bassmaster project bassmasterArbitrary JavaScript Execution in bassmasterCVE-2014-7205Public exploitFix availableEPSS 78.6%10.0 HighOctober 8, 2014
joyent node.js, apple xcode, fedoraproject fedora +2 moreDirectory Traversal in sendCVE-2014-6394Fix available7.5 HighOctober 8, 2014
testlinkMultiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to...CVE-2014-5308Public exploit9.0 HighOctober 8, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google...CVE-2014-3198Fix available5.0 MediumOctober 8, 2014
google chromebase/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not...CVE-2014-31967.5 HighOctober 8, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe SessionService::GetLastSession function in browser/sessions/session_service.cc in Google...CVE-2014-3193Fix available7.5 HighOctober 8, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome...CVE-2014-3189Fix available7.5 HighOctober 8, 2014
google chrome, apple iphone os +1 moreGoogle Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict...CVE-2014-31876.8 MediumOctober 8, 2014
arubanetworks arubaosUnspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2...CVE-2014-72997.5 HighOctober 8, 2014
getmailThe POP3-over-SSL implementation in getmail 4.0.0 through 4.44.0 does not verify X.509...CVE-2014-72755.8 MediumOctober 8, 2014
getmailThe IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname...CVE-2014-72745.8 MediumOctober 8, 2014
getmailThe IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509...CVE-2014-72736.8 MediumOctober 8, 2014
google chrome, v8 +1 moreMultiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome...CVE-2014-7967Fix available7.5 HighOctober 8, 2014
openstack cinder, nova, trove +2 more +4 moreThe processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before...CVE-2014-7230Fix available2.1 LowOctober 8, 2014
debian apt, advanced package tool +1 moreThe changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a...CVE-2014-7206Fix available3.6 LowOctober 8, 2014
openstack cinderOpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3641Fix available4.0 MediumOctober 8, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to...CVE-2014-3200Fix available7.5 HighOctober 8, 2014
google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as...CVE-2014-3199Fix available5.0 MediumOctober 8, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open