Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

jenkins, redhat openshift +1 moreJenkins Path Traversal vulnerabilityCVE-2014-3664Fix available4.0 MediumOctober 15, 2014
scientificlinux luciEval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain...CVE-2014-3593Fix available6.0 MediumOctober 15, 2014
f5 enterprise manager, arx, big-ip access policy manager +16 more +18 moreThe rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1...CVE-2014-2927Public exploit9.3 HighOctober 15, 2014
claws-mail, opensuse +1 moreplugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN...CVE-2014-2576Fix available6.8 MediumOctober 15, 2014
vbulletinSQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4...CVE-2014-2022Public exploit7.1 HighOctober 15, 2014
manga facts project factsThe Manga Facts (aka app.mangafacts.ar) application 1.0 for Android does not verify X.509...CVE-2014-69525.4 MediumOctober 15, 2014
onefile igniteThe OneFile Ignite (aka uk.co.onefile.ignite) application 1.19 for Android does not verify X.509...CVE-2014-69515.4 MediumOctober 15, 2014
civitasmedia mt. airy newsThe Mt. Airy News (aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148) application 1.0069.b0069 for...CVE-2014-69505.4 MediumOctober 15, 2014
fotoschilenas akne ernahrungThe Akne Ernahrung (aka com.rareartifact.akneernahrung72010074) application 1.0 for Android does...CVE-2014-69495.4 MediumOctober 15, 2014
th3professional th3 professional al mohtarifThe TH3 professional Al Mohtarif (aka com.th3professional.almohtarif) application 1.0 for Android...CVE-2014-69485.4 MediumOctober 15, 2014
iversemedia archie comicsThe Archie Comics (aka com.iversecomics.archie.android) application 1.07 for Android does not...CVE-2014-69475.4 MediumOctober 15, 2014
misterpark re\The Re:kyu (aka com.appzone619) application 1.0 for Android does not verify X.509 certificates...CVE-2014-69465.4 MediumOctober 15, 2014
dakshaa neeku naaku dash dashThe Neeku Naaku Dash Dash (aka com.dakshaa.nndd) application 1.0 for Android does not verify X...CVE-2014-69455.4 MediumOctober 15, 2014
mitfahrgelegenheit mitfahrgelegenheit.atThe mitfahrgelegenheit.at (aka com.carpooling.android.at) application 2.3.0 for Android does not...CVE-2014-69445.4 MediumOctober 15, 2014
koenigsleiten77 konigsleitenThe Konigsleiten (aka com.knigsleiten) application 1.0 for Android does not verify X.509...CVE-2014-69435.4 MediumOctober 15, 2014
automon alisha marieThe Alisha Marie (Unofficial) (aka com.automon.ay.alisha.marie) application 1.4.0.6 for Android...CVE-2014-69425.4 MediumOctober 15, 2014
microsoft windows, windows 7, windows 8 +7 more +9 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...CVE-2014-4148In KEVEPSS 59.9%8.8 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4141Public exploitEPSS 30.5%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection...CVE-2014-4140Public exploitEPSS 20.8%4.3 MediumOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-4138Public exploitEPSS 32.2%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a...CVE-2014-4137EPSS 22.7%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or...CVE-2014-4134EPSS 17.2%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a...CVE-2014-4133EPSS 16.7%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-4132EPSS 16.6%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-4130EPSS 17.2%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial...CVE-2014-4129EPSS 24.5%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-4128EPSS 17.2%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or...CVE-2014-4127EPSS 16.4%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2014-4126EPSS 21.4%9.3 HighOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted...CVE-2014-4124EPSS 11.6%6.8 MediumOctober 15, 2014
microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted...CVE-2014-4123In KEVEPSS 47.1%8.8 HighOctober 15, 2014
microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which...CVE-2014-4122EPSS 13.1%4.3 MediumOctober 15, 2014
microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse...CVE-2014-4121EPSS 19.2%10.0 HighOctober 15, 2014
microsoft office, office compatibility pack, sharepoint server +2 more +4 moreMicrosoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office...CVE-2014-4117EPSS 17.5%9.3 HighOctober 15, 2014
microsoft windows server 2003, windows server 2008, windows vista +2 morefastfat.sys (aka the FASTFAT driver) in the kernel-mode drivers in Microsoft Windows Server 2003...CVE-2014-41157.2 HighOctober 15, 2014
microsoft windows, windows 7, windows 8 +6 more +8 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...CVE-2014-4114In KEVPublic exploitEPSS 81.6%9.3 HighOctober 15, 2014
microsoft win32k, windows 7, windows 8 +7 more +9 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...CVE-2014-4113In KEVPublic exploitEPSS 86.6%7.2 HighOctober 15, 2014
microsoft asp.net model view controllerCross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View...CVE-2014-4075EPSS 20.2%4.3 MediumOctober 15, 2014
microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data...CVE-2014-4073EPSS 23.4%10.0 HighOctober 15, 2014
adobe coldfusionAdobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before...CVE-2014-05724.6 MediumOctober 15, 2014
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before...CVE-2014-05714.3 MediumOctober 15, 2014
adobe coldfusionCross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1...CVE-2014-05706.8 MediumOctober 15, 2014
adobe air sdk, flash player, air desktop runtime +4 more +6 moreInteger overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on...CVE-2014-0569Public exploitFix availableEPSS 91.3%9.3 HighOctober 15, 2014
adobe air sdk, flash player, air desktop runtime +4 more +6 moreAdobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and...CVE-2014-0564Fix available10.0 HighOctober 15, 2014
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and...CVE-2014-0558Fix available10.0 HighOctober 15, 2014
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60;...CVE-2014-6558Fix available2.6 LowOctober 15, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded...CVE-2014-6531Fix available4.3 MediumOctober 15, 2014
oracle jreUnspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect...CVE-2014-6527Fix available2.6 LowOctober 15, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows...CVE-2014-6519Fix available5.0 MediumOctober 15, 2014
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and...CVE-2014-6517Fix available5.0 MediumOctober 15, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open