Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

novell suse linux enterprise desktop, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality,...CVE-2015-04216.9 MediumOctober 24, 2014
canonical ubuntu linux, oracle jdk, jre +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity...CVE-2015-0413Fix available1.9 LowOctober 24, 2014
canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0412Fix available7.2 HighOctober 24, 2014
oracle jrockit, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5...CVE-2015-0410Fix available5.0 MediumOctober 24, 2014
canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0408Fix available10.0 HighOctober 24, 2014
canonical ubuntu linux, debian linux, fedoraproject fedora +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0407Fix available5.0 MediumOctober 24, 2014
novell suse linux enterprise desktop, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-04065.8 MediumOctober 24, 2014
novell suse linux enterprise desktop, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect...CVE-2015-04036.9 MediumOctober 24, 2014
canonical ubuntu linux, novell suse linux enterprise desktop, suse linux enterprise server +3 more +5 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0400Fix available5.0 MediumOctober 24, 2014
canonical ubuntu linux, debian linux, novell suse linux enterprise server +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0395Fix available9.3 HighOctober 24, 2014
oracle jrockit, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2015-0383Fix available5.4 MediumOctober 24, 2014
canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2014-6601Fix available10.0 HighOctober 24, 2014
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2014-6593Public exploitFix availableEPSS 66.4%4.0 MediumOctober 24, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25...CVE-2014-6591Fix available2.6 LowOctober 24, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect...CVE-2014-6587Fix available4.3 MediumOctober 24, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2014-6585Fix available2.6 LowOctober 24, 2014
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...CVE-2014-654910.0 HighOctober 24, 2014
samsung mobile, findmymobile +1 moreThe Remote Controls feature on Samsung mobile devices does not validate the source of lock-code...CVE-2014-83467.8 HighOctober 24, 2014
centrify suite, directcontrol +1 moreadsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4...CVE-2014-72984.9 MediumOctober 24, 2014
shim project shimThe default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows...CVE-2014-83992.1 LowOctober 24, 2014
php, canonical ubuntu linux, debian linux +2 moreThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...CVE-2014-3710Fix availableEPSS 14.0%5.0 MediumOctober 24, 2014
openmrsCross-site request forgery (CSRF) vulnerability in OpenMRS 2.1 Standalone Edition allows remote...CVE-2014-80736.8 MediumOctober 23, 2014
openmrsThe administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to...CVE-2014-80724.0 MediumOctober 23, 2014
openmrsMultiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow...CVE-2014-80714.3 MediumOctober 23, 2014
newtelligence dasblogOpen redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102...CVE-2014-72925.8 MediumOctober 23, 2014
tenda a32, a32 firmware +1 moreCross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router...CVE-2014-7281Public exploit6.8 MediumOctober 23, 2014
openxOpen redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier...CVE-2014-22305.8 MediumOctober 23, 2014
hamstersoft hamster free zip archiverUntrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to...CVE-2014-06196.9 MediumOctober 23, 2014
process-one ejabberdejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used,...CVE-2014-8760Fix available5.0 MediumOctober 23, 2014
phpmyadmin, opensuse +1 morephpMyAdmin Implementation XSS Vulnerability on Server Monitor PageCVE-2014-8326Fix available3.5 LowOctober 23, 2014
ibm classic meeting serverIBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive...CVE-2014-47665.0 MediumOctober 23, 2014
merethis centreon, centreon enterprise server +1 moredisplayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon...CVE-2014-3829Public exploitEPSS 80.2%10.0 HighOctober 23, 2014
merethis centreon, centreon enterprise server +1 moreMultiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 ...CVE-2014-3828Public exploitEPSS 72.7%10.0 HighOctober 23, 2014
pidginThe jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin...CVE-2014-3698Fix available5.0 MediumOctober 23, 2014
pidginnmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows...CVE-2014-3696Fix available5.0 MediumOctober 23, 2014
pidginmarkup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers...CVE-2014-3695Fix available5.0 MediumOctober 23, 2014
pidgin, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in...CVE-2014-3694Fix available6.4 MediumOctober 23, 2014
debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreRace condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM...CVE-2014-3611Fix available4.7 MediumOctober 23, 2014
opensslThe dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,...CVE-2014-8176Fix availableEPSS 16.6%7.5 HighOctober 22, 2014
pollinate Ubuntupollinate updateUSN-2387-1Fix availableNo scoreOctober 22, 2014
dokuwiki, mageia project mageia +1 moreDokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows...CVE-2014-8764Fix available5.0 MediumOctober 22, 2014
dokuwiki, mageia project mageia +1 moreDokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote...CVE-2014-8763Fix available5.0 MediumOctober 22, 2014
dokuwikiThe ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access...CVE-2014-8762Fix available5.0 MediumOctober 22, 2014
dokuwikiinc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace,...CVE-2014-8761Fix available5.0 MediumOctober 22, 2014
megapolis megapolis.portal managerMultiple cross-site scripting (XSS) vulnerabilities in Megapolis.Portal Manager allow remote...CVE-2014-83814.3 MediumOctober 22, 2014
calender base project baseThe Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote...CVE-2014-83257.8 HighOctober 22, 2014
zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-8088Fix available5.0 MediumOctober 22, 2014
redhat virtual desktop service managerVDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL...CVE-2014-7968Fix available5.0 MediumOctober 22, 2014
litecartMultiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and...CVE-2014-71834.3 MediumOctober 22, 2014
codecabin wp go mapsMultiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27...CVE-2014-71824.3 MediumOctober 22, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open