CVEs published in October 2014
1,428 vulnerabilities, 75 critical, 6 exploited.
- vodafone avantaj cepteThe Vodafone Avantaj Cepte (aka com.vodafone.avantajcepte.main) application 1.4 for Android does...5.4 Medium
- expressThe EXPRESS (aka com.gpshopper.express.android) application 2.5.3 for Android does not verify X...5.4 Medium
- kevin renskers dmmjobcontrolMultiple SQL injection vulnerabilities in the search function in pi1/class.tx_dmmjobcontrol_pi1...7.5 High
- kevin renskers dmmjobcontrolCross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl ...4.3 Medium
- cfdbplugin contact form dbMultiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and contact...4.3 Medium
- photo gallery plugin project gallery pluginMultiple cross-site scripting (XSS) vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30...4.3 Medium
- ewww image optimizer plugin project image optimizer pluginCross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for...4.3 Medium
- textpatternCross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers...4.3 Medium
- epicor procurementSQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to...7.5 High
- epicor enterpriseMultiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before...4.3 Medium
- jenkins-ci monitoring pluginJenkins Monitoring Plugin allows Cross-Site Scripting (XSS)4.3 Medium
- bmc track-it\!BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting...4.0 Medium
- bmc track-it\!SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote...6.5 Medium
- bmc track-it\!BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote...7.5 High
- cryoserver security applianceCryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which...6.8 Medium
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...4.0 Medium
- cisco intrusion prevention systemThe authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS...5.0 Medium
- cisco adaptive security appliance software, adaptive security virtual appliance +1 moreThe Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8...5.0 Medium
- cisco adaptive security appliance softwareThe Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51),...4.3 Medium
- cisco adaptive security appliance softwareThe Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8...8.3 High
- cisco adaptive security appliance softwareUntrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before...6.8 Medium
- cisco adaptive security appliance softwareThe Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7...6.8 Medium
- cisco asaThe VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3...9.0 High
- cisco asaThe DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9...7.8 High
- cisco asaThe SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8...7.8 High
- cisco asaThe GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8...7.8 High
- cisco asaRace condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA...7.8 High
- cisco asaThe IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0...7.8 High
- cisco asaThe IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows...7.8 High
- cisco asaThe SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8...7.8 High
- rejetto http file serverThe file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote...7.5 High
- oceanavenue ocean avenue mobile proThe Ocean Avenue Mobile Pro (aka com.oceanavenue.mobile) application 2.0 for Android does not...5.4 Medium
- george wassouf project wassoufThe George Wassouf (aka com.devkhr32.georgewassouf) application 1.0 for Android does not verify X...5.4 Medium
- elasticsearchCross-site scripting in Elasticsearch4.3 Medium
- x2engineFileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file...5.0 Medium
- x2engineThe actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8...7.5 High
- hp records managerCross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1...4.3 Medium
- cisco ios xeCisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks (aka RPL) on both...4.8 Medium
- cisco ios xeThe Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly...4.3 Medium
- cisco ios xeThe Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly...5.0 Medium
- google chromecore/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38...5.0 Medium
- splunkCross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before...3.5 Low
- hp operations manager, linux kernel +1 moreUnspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to...7.5 High
- hp operations managerUnspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers...10.0 High
- hp network automationUnspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass...7.2 High
- hp sprinterUnspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code...7.5 High
- hp sprinterUnspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code...7.5 High
- hp sprinterUnspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code...7.5 High
- hp sprinterUnspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code...7.5 High
chromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilitesNo score- Show moreLoading…