CVEs published in November 2014
542 vulnerabilities, 135 critical, 10 exploited.
- adobe acrobat, acrobat reader +1 more Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0... 6.4 Medium
- linux kernel The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group... 4.6 Medium
- linux kernel The __clear_user function in arch/arm64/lib/clear_user.S in the Linux kernel before 3.17.4 on the... 4.9 Medium
- mantisbt, debian linux +1 more Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow... 7.5 High
- check diskio project diskio The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to... 3.6 Low
- strangerstudios paid memberships pro Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin... 5.0 Medium
- dukapress Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the... 5.0 Medium
- xavoc xepan cms Cross-site request forgery (CSRF) vulnerability in Xavoc Technocrats xEpan CMS 1.0.4.1, 1.0.4, 1... 6.8 Medium
- arris vap2500 firmware The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain... 7.8 High
- arris vap2500 firmware ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers... 7.8 High
- arris vap2500 firmware Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote... 10.0 High
- freeipa Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote... 4.3 Medium
- enalean tuleap Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User... 9.3 High
- ibm qradar risk manager, qradar vulnerability manager, qradar security information and event manager +2 more IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4... 5.0 Medium
- lwip project lwip resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier,... 4.3 Medium
- ibm qradar risk manager, qradar vulnerability manager, qradar security information and event manager +2 more IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4... 4.3 Medium
- ibm qradar risk manager, qradar vulnerability manager +1 more IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4... 5.8 Medium
- ibm qradar risk manager, qradar vulnerability manager, qradar security information and event manager +2 more Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk... 6.8 Medium
- cisco adaptive security appliance software The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and... 5.0 Medium
- matrikonopc dnp3 opc server MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of... 5.0 Medium
-
perl-MojoliciousMageia Updated perl-Mojolicious packages fix a security vulnerability No score - icecast Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote... 5.0 Medium
- phpmyadmin, opensuse +1 more Directory traversal vulnerability in libraries/error_report.lib.php in the error-reporting... 4.0 Medium
- phpmyadmin Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting... 3.5 Low
- phpmyadmin, opensuse +1 more Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in... 6.5 Medium
- phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x... 4.3 Medium
- openvpn access server Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop... 6.8 Medium
- kunena Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for... 4.3 Medium
- kunena Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow... 6.5 Medium
- oxwall, skalfa skadate lite +1 more Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906)... 6.8 Medium
- whydowork adsense project adsense Cross-site scripting (XSS) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows... 4.3 Medium
- whydowork adsense project adsense Cross-site request forgery (CSRF) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress... 6.8 Medium
- apptha contus video gallery Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus... 3.5 Low
- apptha contus video gallery Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video... 7.5 High
- pligg cms Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote... 7.5 High
- raritan power iq Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers... 7.5 High
- digitalzoomstudio video gallery Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital... 4.3 Medium
- wibu codemeter runtime Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all... 7.2 High
- digium asterisk, certified asterisk +1 more Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6... 4.0 Medium
- digium asterisk The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote... 4.0 Medium
- xelerance openswan Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference... 5.0 Medium
- siemens simatic pcs 7, simatic wincc, simatic pcs7 +1 more +3 more The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before... 5.0 Medium
- siemens simatic pcs 7, simatic wincc, simatic pcs7 +1 more +3 more The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before... 10.0 High
- cisco ios xr Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence... 5.0 Medium
- justsystems ichitaro, ichitaro pro +1 more Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7,... 10.0 High
- ibm web experience factory Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0... 4.3 Medium
- ibm websphere portal Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.0.x before 7.0.0.2 CF29, 8.0.x... 3.5 Low
- libreoffice, canonical ubuntu linux, debian linux +1 more +3 more LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write... 7.5 High
- gnupg, gnupg libksba, canonical ubuntu linux +2 more +4 more Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG,... 7.5 High
- flac libflac Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to... 7.5 High
- Show olderLoading…