Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

carefusion pyxis supplystationCareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded...CVE-2014-54203.5 LowOctober 19, 2014
aptana aflaxCross-site scripting (XSS) vulnerability in Aflax allows remote attackers to inject arbitrary web...CVE-2014-53314.3 MediumOctober 19, 2014
birdblogCross-site scripting (XSS) vulnerability in BirdBlog allows remote attackers to inject arbitrary...CVE-2014-53304.3 MediumOctober 19, 2014
ibm tririga application platformIBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3...CVE-2014-48407.5 HighOctober 19, 2014
ibm tririga application platformCross-site scripting (XSS) vulnerability in GanttProjectSchedulerPopup.jsp in IBM TRIRIGA...CVE-2014-48383.5 LowOctober 19, 2014
ibm tririga application platformCross-site scripting (XSS) vulnerability in NewDocument.jsp in IBM TRIRIGA Application Platform 3...CVE-2014-48373.5 LowOctober 19, 2014
ibm tririga application platformCross-site scripting (XSS) vulnerability in breakOutWithName.jsp in IBM TRIRIGA Application...CVE-2014-48363.5 LowOctober 19, 2014
ibm qradar security information and event managerIBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote authenticated users to...CVE-2014-48336.5 MediumOctober 19, 2014
ibm qradar security information and event managerIBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a...CVE-2014-48304.3 MediumOctober 19, 2014
ibm qradar security information and event managerIBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct...CVE-2014-48284.3 MediumOctober 19, 2014
ibm qradar security information and event managerCross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2...CVE-2014-48274.3 MediumOctober 19, 2014
ibm qradar security information and event managerIBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not properly implement secure...CVE-2014-48254.3 MediumOctober 19, 2014
ibm websphere mq, websphere mq explorer +1 moreIBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5...CVE-2014-48221.9 LowOctober 19, 2014
cisco prime opticalCross-site scripting (XSS) vulnerability in the web framework in Cisco Prime Optical 10 allows...CVE-2014-34086.8 MediumOctober 19, 2014
cisco intrusion prevention systemRace condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1...CVE-2014-34067.1 HighOctober 19, 2014
cisco telepresence mcu softwareThe network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to...CVE-2014-33977.8 HighOctober 19, 2014
cisco asyncosThe ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance ...CVE-2014-33815.0 MediumOctober 19, 2014
cisco expressway software, telepresence video communication server software +1 moreCisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow...CVE-2014-33707.1 HighOctober 19, 2014
cisco expressway software, telepresence video communication server software +1 moreThe SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway...CVE-2014-33697.1 HighOctober 19, 2014
cisco expressway software, telepresence video communication server software +1 moreCisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow...CVE-2014-33687.8 HighOctober 19, 2014
ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8...CVE-2014-30215.0 MediumOctober 19, 2014
hp operations agentCross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager ...CVE-2014-2647Public exploit4.3 MediumOctober 19, 2014
fox-it datadiode appliance, fox datadiode +1 moreFox-IT DataDiode Appliance CSRFCVE-2014-23584.3 October 19, 2014
apple os x serverProfile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext...CVE-2014-44471.9 LowOctober 18, 2014
apple os x serverMail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service...CVE-2014-44462.1 LowOctober 18, 2014
apple mac os xSecurityAgent in Apple OS X before 10.10 does not ensure that a Kerberos ticket is in the cache...CVE-2014-44444.4 MediumOctober 18, 2014
apple mac os xApple OS X before 10.10 allows remote attackers to cause a denial of service (NULL pointer...CVE-2014-44437.8 HighOctober 18, 2014
apple mac os xThe kernel in Apple OS X before 10.10 allows local users to cause a denial of service (panic) via...CVE-2014-44424.7 MediumOctober 18, 2014
apple mac os xNetFS Client Framework in Apple OS X before 10.10 does not ensure that the disabling of File...CVE-2014-44416.8 MediumOctober 18, 2014
apple mac os xThe MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy...CVE-2014-44402.6 LowOctober 18, 2014
apple mac os xMail in Apple OS X before 10.10 does not properly recognize the removal of a recipient address...CVE-2014-44394.3 MediumOctober 18, 2014
apple mac os xRace condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to...CVE-2014-44386.9 MediumOctober 18, 2014
apple mac os xLaunchServices in Apple OS X before 10.10 allows attackers to bypass intended sandbox...CVE-2014-44376.8 MediumOctober 18, 2014
apple mac os xIOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service (out-of-bounds...CVE-2014-44364.3 MediumOctober 18, 2014
apple mac os xThe "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate...CVE-2014-44354.4 MediumOctober 18, 2014
apple mac os xThe kernel in Apple OS X before 10.10 allows physically proximate attackers to cause a denial of...CVE-2014-44344.9 MediumOctober 18, 2014
apple mac os xHeap-based buffer overflow in the kernel in Apple OS X before 10.10 allows physically proximate...CVE-2014-44337.2 HighOctober 18, 2014
apple mac os xfdesetup in Apple OS X before 10.10 does not properly display the encryption status in between a...CVE-2014-44324.7 MediumOctober 18, 2014
apple mac os xDock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows...CVE-2014-44312.1 LowOctober 18, 2014
apple mac os xCoreStorage in Apple OS X before 10.10 retains a volume's encryption keys upon an eject action in...CVE-2014-44304.7 MediumOctober 18, 2014
apple mac os xBluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices,...CVE-2014-44285.4 MediumOctober 18, 2014
apple mac os xApp Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism...CVE-2014-44277.5 HighOctober 18, 2014
apple mac os xAFP File Server in Apple OS X before 10.10 allows remote attackers to discover the network...CVE-2014-44264.3 MediumOctober 18, 2014
apple mac os xCFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after...CVE-2014-44254.6 MediumOctober 18, 2014
apple mac os xSafari in Apple OS X before 10.10 allows remote attackers to cause a denial of service (universal...CVE-2014-44175.0 MediumOctober 18, 2014
apple mac os xThe Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource...CVE-2014-43916.8 MediumOctober 18, 2014
apple mac os xBuffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute...CVE-2014-43516.8 MediumOctober 18, 2014
redhat enterprise virtualization managerThe oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4...CVE-2014-3573Fix available6.5 MediumOctober 18, 2014
sybase adaptive server enterpriseSAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3...CVE-2014-62836.5 MediumOctober 17, 2014
seeddmsMultiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4...CVE-2014-22796.4 MediumOctober 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open