Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

mantisbtgpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a...CVE-2014-63875.0 MediumOctober 22, 2014
microsoft windows, windows 7, windows 8 +6 more +8 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...CVE-2014-6352In KEVPublic exploitEPSS 77.5%7.8 HighOctober 22, 2014
redhat shimUnspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted...CVE-2014-3677Fix available7.5 HighOctober 22, 2014
redhat shimHeap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a...CVE-2014-3676Fix available7.5 HighOctober 22, 2014
redhat shimShim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted...CVE-2014-3675Fix available5.0 MediumOctober 22, 2014
drupal mrbs moduleCross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote...CVE-2013-74076.8 MediumOctober 22, 2014
apple iphone osThe QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing...CVE-2014-44501.9 LowOctober 22, 2014
apple iphone osiCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers,...CVE-2014-44496.8 MediumOctober 22, 2014
apple iphone osHouse Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which...CVE-2014-44481.9 LowOctober 22, 2014
fogproject fogMultiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote...CVE-2014-31113.5 LowOctober 21, 2014
interworx web control panelSQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting...CVE-2014-2531Public exploit6.5 MediumOctober 21, 2014
splunkCross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject...CVE-2014-8380Public exploit4.3 MediumOctober 21, 2014
marketo ma project maMultiple cross-site scripting (XSS) vulnerabilities in the Marketo MA module before 7.x-1.5 for...CVE-2014-83793.5 LowOctober 21, 2014
tablefield project tablefieldCross-site scripting (XSS) vulnerability in the TableField module 7.x-2.x before 7.x-2.3 allows...CVE-2014-83783.5 LowOctober 21, 2014
webasyst shop-scriptCross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote...CVE-2014-83774.3 MediumOctober 21, 2014
site banner project bannerCross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site...CVE-2014-83763.5 LowOctober 21, 2014
tenable web uiCross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus...CVE-2014-7280Public exploit4.3 MediumOctober 21, 2014
zohocorp manageengine desktop centralDirectory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055...CVE-2014-5006Public exploitEPSS 25.1%7.5 HighOctober 21, 2014
zohocorp manageengine desktop centralDirectory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055...CVE-2014-5005Public exploitEPSS 77.8%7.5 HighOctober 21, 2014
websupporter wp amasin - the amazon affiliate shopAbsolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop...CVE-2014-45775.0 MediumOctober 21, 2014
cbi referral manager project referral managerCross-site scripting (XSS) vulnerability in getNetworkSites.php in the CBI Referral Manager...CVE-2014-45174.3 MediumOctober 21, 2014
alipay project alipayCross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the...CVE-2014-45144.3 MediumOctober 21, 2014
gb-plugins gb gallery slideshowSQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress...CVE-2014-8375Public exploit6.5 MediumOctober 21, 2014
citrix netscaler application delivery controller firmwareUnspecified vulnerability in the management interface in Citrix NetScaler Application Delivery...CVE-2014-7140Public exploitEPSS 16.2%7.5 HighOctober 21, 2014
mrbs project mrbsSQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute...CVE-2013-74067.5 HighOctober 21, 2014
dotprojectMultiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote...CVE-2012-5702Public exploit4.3 MediumOctober 21, 2014
bananadance banana dancefunctions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary...CVE-2012-5243Public exploit5.0 MediumOctober 21, 2014
bananadance banana danceDirectory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier...CVE-2012-5242Public exploit6.8 MediumOctober 21, 2014
apptreestudios gangsta auto thief iiiThe Gangsta Auto Thief III (aka com.apptreestudios.gdup3) application 1.1 for Android does not...CVE-2014-78045.4 MediumOctober 21, 2014
onesolutionapps woodward bailThe Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) application 1.1 for Android does...CVE-2014-78035.4 MediumOctober 21, 2014
appa-apps top roller coasters europe 2The Top Roller Coasters Europe 2 (aka com.appaapps.top10tallesteuropeanrollercoasters2)...CVE-2014-78025.4 MediumOctober 21, 2014
daily green project greenThe Daily Green (aka it.opentt.blog.dailygreen) application 2014.07 dlygrn for Android does not...CVE-2014-78005.4 MediumOctober 21, 2014
squishy birds project birdsThe Squishy birds (aka com.tatmob.squishybirds) application 1.0.1 for Android does not verify X...CVE-2014-77995.4 MediumOctober 21, 2014
enyetech coca-cola fm brasilThe Coca-Cola FM Brasil (aka com.enyetech.radio.coca_cola.fm_br) application 2.0.41709 for...CVE-2014-77985.4 MediumOctober 21, 2014
gotobestofprice thai foodThe Thai food (aka com.foods.thaifood) application 1.0 for Android does not verify X.509...CVE-2014-77975.4 MediumOctober 21, 2014
nobexrc house365 radioThe House365 Radio (aka com.nobexinc.wls_27853803.rc) application 3.2.3 for Android does not...CVE-2014-77965.4 MediumOctober 21, 2014
itp harpers bazaar artThe Harpers Bazaar Art (aka com.itp.harpersart) application @7F080181 for Android does not verify...CVE-2014-77955.4 MediumOctober 21, 2014
narr8 knights of the voidThe Knights of the Void (aka me.narr8.android.serial.knights_of_the_void) application 2.1.7 for...CVE-2014-77945.4 MediumOctober 21, 2014
cb - calciatori brutti project - calciatori bruttiThe CB - Calciatori Brutti (aka com.calciatori.brutti) application 1.0 for Android does not...CVE-2014-77935.4 MediumOctober 21, 2014
appsgeyser backyard wrestlingThe Backyard Wrestling (aka com.wBackyardWrestling) application 0.1 for Android does not verify X...CVE-2014-77915.4 MediumOctober 21, 2014
zillionmuslims zillion muslimsThe Zillion Muslims (aka com.zillionmuslims.src) application 1.1 for Android does not verify X...CVE-2014-77895.4 MediumOctober 21, 2014
best free giveaways project free giveawaysThe Best Free Giveaways (aka com.wIphone5GiveAways) application 0.1 for Android does not verify X...CVE-2014-77885.4 MediumOctober 21, 2014
synapse ishuttleThe iShuttle (aka com.synapse.ishuttle_user) application 1.0 for Android does not verify X.509...CVE-2014-77875.4 MediumOctober 21, 2014
magzter english football magazineThe English Football Magazine (aka com.magzter.englishfootball) application 3.0 for Android does...CVE-2014-77865.4 MediumOctober 21, 2014
onesolutionapps aaaa discount bailThe AAAA Discount Bail (aka com.onesolutionapps.aaaadiscountbailandroid) application 1.1 for...CVE-2014-77855.4 MediumOctober 21, 2014
magzter schon\! magazineThe Schon! Magazine (aka com.magzter.schonmagazine) application 3.0 for Android does not verify X...CVE-2014-77845.4 MediumOctober 21, 2014
billgbennett bill g. bennettThe Bill G. Bennett (aka com.billgbennett) application 1.0 for Android does not verify X.509...CVE-2014-77835.4 MediumOctober 21, 2014
macedonia hacienda hotel project hacienda hotelThe Macedonia Hacienda Hotel (aka appinventor.ai_orolimpio999.HotelMacedonia) application 1.0 for...CVE-2014-77825.4 MediumOctober 21, 2014
fallacystudios marijuana handbook lite - weedThe Marijuana Handbook Lite - Weed (aka com.fallacystudios.marijuanahandbooklite) application 3.2...CVE-2014-77815.4 MediumOctober 21, 2014
ienvisage pakistan cricket newsThe Pakistan Cricket News (aka com.conduit.app_cf18df8bdf454eb0a836e2d29886bc40.app) application...CVE-2014-77805.4 MediumOctober 21, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open