CVEs published in October 2014
1,428 vulnerabilities, 75 critical, 6 exploited.
- seeddmsUnrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS (formerly LetoDMS and...5.1 Medium
- twitget project twitgetMultiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3...3.5 Low
- twitget project twitgetMultiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin...6.8 Medium
- panasonic network camera recorder firmwareThe NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder before 4.04R03 allows remote...6.8 Medium
- panasonic network camera viewPanasonic Network Camera View 3 and 4 allows remote attackers to execute arbitrary code via a...6.8 Medium
- foxitsoftware foxit pdf sdk activexBuffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2...6.8 Medium
- jenkinsJenkins allows attackers to obtain sensitive information3.5 Low
- jenkinsJenkins session fixation vulnerability6.8 Medium
- jenkinsJenkins cross-site scripting (XSS) vulnerability4.3 Medium
- jenkinsJenkins allows attackers to determine whether a user exists5.0 Medium
- jenkinsJenkins Vulnerable to Clickjacking7.5 High
- jenkinsJenkins does not invalidate the API token when a user is deleted6.5 Medium
- jenkinsJenkin allows attackers to obtain passwords by reading the HTML source code5.0 Medium
- jenkinsJenkins allows Remote Attackers to Hijack Sessions5.0 Medium
- jenkinsJenkins allows attackers to execute arbitrary jobs6.5 Medium
- jenkinsJenkins allows attackers to configure restricted projects4.0 Medium
- custom search project searchCross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and...3.5 Low
- easy social project socialCross-site scripting (XSS) vulnerability in the easy_social_admin_summary function in the Easy...3.5 Low
- webform project webformCross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20, 7.x-3.x...3.5 Low
- webform validation project validationCross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.6...3.5 Low
- openstack swiftOpenStack Swift metadata constraints are not correctly enforced4.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu...7.2 High
- gnu coreutils, canonical ubuntu linux +1 moreThe parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service...7.5 High
- sap businessobjects explorerXML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0...5.0 Medium
- sap businessobjects explorerpolestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing...5.0 Medium
- sap hanaMultiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70...4.3 Medium
- sap hanaEval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows...6.0 Medium
- sap netweaver abapBusiness Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain...3.5 Low
- sap businessobjectsSAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an...3.5 Low
- sap businessobjectsThe CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a...7.1 High
- sap businessobjects, businessobjects xi +1 moreSAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a...5.0 Medium
- sap businessobjectsCross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP...4.3 Medium
- c97 cart engineMultiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart...4.3 Medium
- c97 cart engineSQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4...7.5 High
- c97 cart engineOpen redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine...6.4 Medium
- in-portalCross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote...4.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4...4.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6...3.5 Low
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10...4.3 Medium
- tigervncInteger overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and...7.5 High
- maxfoundry maxbuttonsCross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for...4.3 Medium
- google calendar events project calendar eventsCross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for...4.3 Medium
- givenu giveThe givenu give (aka com.givenu.give) application 1.5.3 for Android does not verify X.509...5.4 Medium
- somcloud somtodo - task\/to-do widgetThe SomTodo - Task/To-do widget (aka com.somcloud.somtodo) application 2.0.3 for Android does not...5.4 Medium
- bearidlock bear id lockThe Bear ID Lock (aka com.wBearIDLock) application 0.1 for Android does not verify X.509...5.4 Medium
- onesolutionapps bust out bailThe Bust Out Bail (aka com.onesolutionapps.bustoutbailandroid) application 1.1 for Android does...5.4 Medium
- street walker project walkerThe Street Walker (aka kt.road.StreetWalker) application 0.0.1 for Android does not verify X.509...5.4 Medium
- cadpageThe Cadpage (aka net.anei.cadpage) application 1.7.44 for Android does not verify X.509...5.4 Medium
- nteloswireless my ntelos** DISPUTED ** The My nTelos (aka com.telespree.ntelospostpay) application 1.1.2 for Android does...5.4 Medium
- simbiotnetwork simgeneThe SimGene (aka com.japanbioinformatics.simgene) application 1.3 for Android does not verify X...5.4 Medium
- Show moreLoading…