Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
October

CVEs published in October 2014

1,428 vulnerabilities, 75 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting...CVE-2014-85245.0 MediumOctober 29, 2014
mcafee network data loss preventionCross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP)...CVE-2014-85236.8 MediumOctober 29, 2014
mcafee network data loss preventionThe MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a...CVE-2014-85227.5 HighOctober 29, 2014
mcafee network data loss preventionCross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3...CVE-2014-85213.5 LowOctober 29, 2014
mcafee network data loss preventionMcAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive...CVE-2014-85205.0 MediumOctober 29, 2014
mcafee network data loss preventionUnspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local...CVE-2014-85192.1 LowOctober 29, 2014
mcafee endpoint encryption for files and folders, file and removable media protection +1 moreThe (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint...CVE-2014-85182.1 LowOctober 29, 2014
mythtv Mageia, mythtv-mythweb Mageia +1 moreUpdated MythTV packages to harden against SSDP reflection attacksMGASA-2014-0435Fix availableNo scoreOctober 29, 2014
zend framework, fedoraproject fedora, redhat enterprise linux +2 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-8089Fix available9.8 CriticalOctober 29, 2014
zabbix, fedoraproject fedora +1 moreXML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1,...CVE-2014-3005Fix available9.8 CriticalOctober 29, 2014
ibm tivoli application dependency discovery managerDirectory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery...CVE-2014-61495.0 MediumOctober 29, 2014
ibm tririga application platformCross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application...CVE-2014-48396.0 MediumOctober 29, 2014
pidginAbsolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin...CVE-2014-36976.4 MediumOctober 29, 2014
ibm tivoli composite application manager for transactionsThe Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for...CVE-2014-30514.3 MediumOctober 29, 2014
quassel-irc quassel irc, canonical ubuntu linux, debian linux +1 more +3 moreThe blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to...CVE-2014-8483Fix available5.0 MediumOctober 29, 2014
ruby-lang ruby, canonical ubuntu linux, opensuse +1 more +3 moreThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...CVE-2014-8080Fix available5.0 MediumOctober 29, 2014
qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 MediumOctober 29, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote...CVE-2014-61264.3 MediumOctober 28, 2014
ibm websphere portalCross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows...CVE-2014-61256.8 MediumOctober 28, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...CVE-2014-48215.0 MediumOctober 28, 2014
ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2...CVE-2014-48143.5 LowOctober 28, 2014
ibm websphere portalUnspecified vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5...CVE-2014-48086.5 MediumOctober 28, 2014
cisco asr901, ios +1 moreCisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet...CVE-2014-32935.0 MediumOctober 28, 2014
etiko cmsMultiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary...CVE-2014-85067.5 HighOctober 28, 2014
etiko cmsMultiple cross-site scripting (XSS) vulnerabilities in Etiko CMS allow remote attackers to inject...CVE-2014-85054.3 MediumOctober 28, 2014
f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreCross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility...CVE-2014-40234.3 MediumOctober 28, 2014
gnu wgetAbsolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows...CVE-2014-4877Fix availableEPSS 39.9%9.3 HighOctober 28, 2014
qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 MediumOctober 28, 2014
php, redhat enterprise linux +1 moreThe php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before...CVE-2015-4644Fix available7.5 HighOctober 28, 2014
php, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...CVE-2015-4643Fix availableEPSS 15.4%9.8 CriticalOctober 28, 2014
php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...CVE-2015-4603Fix availableEPSS 10.6%9.8 CriticalOctober 28, 2014
php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...CVE-2015-4602Fix availableEPSS 10.3%9.8 CriticalOctober 28, 2014
php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 morePHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...CVE-2015-4601Fix available9.8 CriticalOctober 28, 2014
php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...CVE-2015-4600Fix availableEPSS 10.3%9.8 CriticalOctober 28, 2014
php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-4599Fix availableEPSS 10.3%9.8 CriticalOctober 28, 2014
php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...CVE-2015-4598Fix available6.5 MediumOctober 28, 2014
php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...CVE-2015-4148Public exploitFix availableEPSS 19.8%5.0 MediumOctober 28, 2014
php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...CVE-2015-4026Fix availableEPSS 18.8%7.5 HighOctober 28, 2014
php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 MediumOctober 28, 2014
php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 HighOctober 28, 2014
php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 MediumOctober 28, 2014
php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3412Fix available5.3 MediumOctober 28, 2014
php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3411Fix available6.5 MediumOctober 28, 2014
php, apple mac os x, oracle linux +8 more +10 moreMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...CVE-2015-3329Fix availableEPSS 38.2%7.5 HighOctober 28, 2014
php, apple mac os x, opensuse +6 more +8 moreUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-2787Fix availableEPSS 11.8%7.5 HighOctober 28, 2014
php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 MediumOctober 28, 2014
php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 HighOctober 28, 2014
phpThe exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21,...CVE-2015-0232Fix availableEPSS 15.6%6.8 MediumOctober 28, 2014
phpUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-0231Public exploitFix availableEPSS 44.4%7.5 HighOctober 28, 2014
php, canonical ubuntu linux, debian linux +2 more +4 moreThe GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5...CVE-2014-9709Fix availableEPSS 15.4%5.0 MediumOctober 28, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open