CVEs published in October 2014
1,428 vulnerabilities, 75 critical, 6 exploited.
- phpHeap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c...7.5 High
- file project file, php +1 moreThe mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in...5.0 Medium
- phpUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...7.5 High
- phpThe exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x...6.8 Medium
- phpInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...7.5 High
- phpBuffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc...5.0 Medium
- php, suse linux enterprise server +1 moreThe default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in...4.6 Medium
- wp-football project wp-footballMultiple cross-site scripting (XSS) vulnerabilities in the wp-football plugin 1.1 and earlier for...4.3 Medium
- libproxy project libproxyFormat string vulnerability in the print_proxies function in bin/proxy.c in libproxy 0.3.1 might...7.5 High
- robert ancell lightdmlightdm before 1.0.9 does not properly close file descriptors before opening a child process,...4.6 Medium
- gnu eglibc, glibc +1 moreInteger signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental...6.8 Medium
- wordpressPHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote...7.5 High
- fal sftp project sftpfal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders4.0 Medium
- freebsdrouted in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service ...5.0 Medium
- freebsdStack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to...10.0 High
- freebsdnamei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service ...5.0 Medium
- egroupwareEGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edition before 1.8.007...8.5 High
- redhat cloudforms 3.0 management engineThe (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management...5.0 Medium
- cobbler project cobblerCobbler vulnerable to code injection via unsafe YAML loading6.8 Medium
- djangoproject tastypieDjango Tastypie Improper Deserialization of YAML Data7.5 High
- ghostscriptUntrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary...4.4 Medium
- exponentcms exponent cmsCross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject...4.3 Medium
- xrms crm project crmSQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute...7.5 High
- xenXen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64...4.6 Medium
- f5 big-ip analyticsF5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier...7.5 High
- deeproot linux deepofixThe SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via...5.0 Medium
- zohocorp manageengine eventlog analyzerDirectory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog...7.5 High
- ibm api managementIBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext...2.1 Low
- ibm sterling b2b integratorThe Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a...5.0 Medium
- ibm security appscan sourceThe installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port...1.8 Low
- egroupwareMultiple cross-site request forgery (CSRF) vulnerabilities in EGroupware Enterprise Line (EPL)...6.8 Medium
- quixplorerDirectory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5...7.8 High
- payment for webform project for webformThe Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does not restrict access by...4.3 Medium
- igniterealtime smack api, redhat jboss fuse +1 moreThe Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is...6.8 Medium
- blackberry os, world +1 moreThe BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on...4.3 Medium
- ibm tivoli integrated portalMultiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Integrated Portal (TIP) 2.2.x...3.5 Low
- ibm tivoli integrated portalCRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote...3.5 Low
- avamar virtual edition 7.0, 7.0.2-43, 6.0 +1 more +3 moreEMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do...5.0 Medium
- emc avamarEMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition ...4.3 Medium
- emc networker, meditech +1 moreThe EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint...2.1 Low
- cisco ios, ios xe +1 moreThe Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and...6.1 Medium
- electric cloud electriccommanderElectric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable...4.6 Medium
- cpuminer project cpuminerStack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an...6.0 Medium
- wp-ban project wp-banWP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote...4.3 Medium
- not yet commons ssl project yet commons sslImproper Validation of Certificate with Host Mismatch in Not Yet Commons SSL6.8 Medium
- vbulletinCross-site scripting (XSS) vulnerability in admincp/apilog.php in vBulletin 4.2.2 and earlier,...3.5 Low
- oracle javafx, opensuse, oracle jdk +2 more +4 moreUnspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote...9.3 High
- opensuse, oracle javafx, jdk +2 more +4 moreUnspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote...6.8 Medium
- oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers...9.3 High
- novell suse linux enterprise desktop, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...9.3 High
- Show moreLoading…