Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60;...CVE-2014-6512Fix available4.3 MediumOctober 15, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers...CVE-2014-6511Fix available5.0 MediumOctober 15, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded...CVE-2014-6506Fix available6.8 MediumOctober 15, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60,...CVE-2014-6504Fix available5.0 MediumOctober 15, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded...CVE-2014-6502Fix available2.6 LowOctober 15, 2014
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60;...CVE-2014-6457Fix available4.0 MediumOctober 15, 2014
drupal, debian linux +1 moreThe expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does...CVE-2014-3704Public exploitFix availableEPSS 100.0%7.5 HighOctober 15, 2014
allomani weblinksMultiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute...CVE-2014-87667.5 HighOctober 14, 2014
drupal project issue file reviewMultiple cross-site scripting (XSS) vulnerabilities in the Project Issue File Review module (PIFR...CVE-2014-87654.3 MediumOctober 14, 2014
yootheme pagekitOpen redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect...CVE-2014-80706.8 MediumOctober 14, 2014
yootheme pagekitMultiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote...CVE-2014-80694.3 MediumOctober 14, 2014
juniper junosJuniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46...CVE-2014-63807.8 HighOctober 14, 2014
juniper junosJuniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46...CVE-2014-63797.5 HighOctober 14, 2014
juniper junosJuniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12...CVE-2014-63787.8 HighOctober 14, 2014
juniper junos eJuniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity...CVE-2014-63777.8 HighOctober 14, 2014
woothemes woocommerce pluginCross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress...CVE-2014-63134.3 MediumOctober 14, 2014
juniper junos, srx100, srx110 +10 more +12 moreThe Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12...CVE-2014-38256.8 MediumOctober 14, 2014
juniper junosJuniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46...CVE-2014-38187.8 HighOctober 14, 2014
mozilla firefox, thunderbird +1 morecontent/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...CVE-2014-1586Fix available5.0 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreThe WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0,...CVE-2014-1585Fix available5.0 MediumOctober 14, 2014
mozilla firefoxThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks...CVE-2014-1584Fix available4.3 MediumOctober 14, 2014
mozilla firefoxThe Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly...CVE-2014-1583Fix available5.0 MediumOctober 14, 2014
mozilla firefoxThe Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly...CVE-2014-1582Fix available4.3 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox...CVE-2014-1581Fix available7.5 HighOctober 14, 2014
mozilla firefoxMozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows...CVE-2014-1580Fix available5.0 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreThe get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and...CVE-2014-1578Fix available7.5 HighOctober 14, 2014
mozilla firefox, thunderbird +1 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1577Fix available6.4 MediumOctober 14, 2014
mozilla firefox, thunderbird +1 moreHeap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0,...CVE-2014-1576Fix available7.5 HighOctober 14, 2014
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow...CVE-2014-1575Fix available7.5 HighOctober 14, 2014
mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0,...CVE-2014-1574Fix available7.5 HighOctober 14, 2014
drupal doubleclick for publishersCross-site scripting (XSS) vulnerability in the Google Doubleclick for Publishers (DFP) module 7...CVE-2014-87483.5 LowOctober 13, 2014
drupal commonsCross-site scripting (XSS) vulnerability in the Drupal Commons module 7.x-3.x before 7.x-3.9 for...CVE-2014-87474.3 MediumOctober 13, 2014
drupal skeleton themeCross-site scripting (XSS) vulnerability in the Skeleton theme 7.x-1.2 through 7.x-1.3 before 7.x...CVE-2014-87463.5 LowOctober 13, 2014
drupal custom search moduleCross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and...CVE-2014-87453.5 LowOctober 13, 2014
drupal nivo sliderCross-site scripting (XSS) vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for...CVE-2014-87443.5 LowOctober 13, 2014
drupal maestroMultiple cross-site scripting (XSS) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4...CVE-2014-87433.5 LowOctober 13, 2014
kriesi enfoldUnspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress...CVE-2014-729710.0 HighOctober 13, 2014
ibm qradar security information and event managerCross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.1.x and 7.2.x allows...CVE-2014-30915.0 MediumOctober 13, 2014
linux kernel, canonical ubuntu linux +1 moreThe do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the...CVE-2014-7975Fix available5.5 MediumOctober 13, 2014
huawei e5332, e5332 firmware +1 moreBuffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080...CVE-2014-53286.8 MediumOctober 12, 2014
huawei e5332, e5332 firmware +1 moreBuffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080...CVE-2014-53276.8 MediumOctober 12, 2014
nos aliveThe NOS Alive (aka pt.optimus.optimusalive2011) application 5.1 for Android does not verify X.509...CVE-2014-69415.4 MediumOctober 11, 2014
mibizapps absolute lending solutionsThe Absolute Lending Solutions (aka com.soln.S008F6C05EC0B63264B429F6D76286562) application 1...CVE-2014-69405.4 MediumOctober 11, 2014
xlabz sketch w friends free -tabletsThe Sketch W Friends FREE -Tablets (aka air.com.xlabz.SketchWFriendsFree) application 5.0.0 for...CVE-2014-69395.4 MediumOctober 11, 2014
webizz apostilas musicaisThe Apostilas musicais (aka com.apostilas) application 1.0 for Android does not verify X.509...CVE-2014-69385.4 MediumOctober 11, 2014
ecitic china citic bank credit cardThe China CITIC Bank Credit Card (aka com.citiccard.mobilebank) application 3.3.6 for Android...CVE-2014-69375.4 MediumOctober 11, 2014
mobileeventguide ids 2013The IDS 2013 (aka de.mobileeventguide.ids2013) application 1.21 for Android does not verify X.509...CVE-2014-69365.4 MediumOctober 11, 2014
rgsmartapps colormania - color quiz gameThe ColorMania - Color Quiz Game (aka com.ColormaniaColoringGames) application 1.4 for Android...CVE-2014-69355.4 MediumOctober 11, 2014
physics chemistry biology quiz project chemistry biology quizThe Physics Chemistry Biology Quiz (aka com.pdevsmcqs.pcbmcqseries) application 1.8 for Android...CVE-2014-69345.4 MediumOctober 11, 2014
cloudacl safe browser - the web filterThe Safe Browser - The Web Filter (aka com.cloudacl) application 1.2.5 for Android does not...CVE-2014-69045.4 MediumOctober 11, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open