CVEs published in November 2014
542 vulnerabilities, 135 critical, 10 exploited.
- haxx libcurl, apple mac os x, canonical ubuntu linux +3 more +5 moreThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 Medium
- libreoffice, canonical ubuntu linux, opensuse +3 more +5 moreUse-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4...7.5 High
- asus rt series firmware, t-mobile tm-ac1900 +1 moreASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and...7.1 High
- ca cloud service managementCA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary...7.5 High
- ca cloud service managementCross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before...6.8 Medium
- ca cloud service managementCA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication...6.8 Medium
- ca cloud service managementCA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay...4.3 Medium
- hp laserjet cm3530 multifunction printer firmwareUnspecified vulnerability on the HP LaserJet CM3530 Multifunction Printer CC519A and CC520A with...9.0 High
- ibm notes travelerThe IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during...5.0 Medium
- allomani weblinksMultiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote...4.3 Medium
- eset personal firewall ndis filterThe ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall...2.1 Low
- sap netweaverUnspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote...5.0 Medium
- sap netweaverUnspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7...5.0 Medium
- sap netweaver java application serverXML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application...4.3 Medium
- sap network interface routerInteger overflow in SAP Network Interface Router (SAProuter) 40.4 allows remote attackers to...5.0 Medium
- sap hanaSQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers...7.5 High
- sap commoncryptolib, hana, netweaver +2 more +4 moreSAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP...7.5 High
- cp multi view event calendar project multi view event calendarSQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows...7.5 High
- w3eden download managerDirectory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows...5.0 Medium
- web-dorado spider video playerCross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress...4.3 Medium
- clip-share clipshare, nuevolab nuevoplayer +1 moreSQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier...7.5 High
- enalean tuleapSQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users...6.5 Medium
- ellislab expressionengineMultiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote...6.5 Medium
- axway securetransportCross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier...6.8 Medium
- epicor enterpriseEpicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database...5.0 Medium
- modwsgi mod wsgimod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle...6.9 Medium
- openstack keystoneOpenStack Identity Keystone Improper Privilege Management6.5 Medium
- joomla joomla\!Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3...7.5 High
- plone, zope +1 morePlone and Zope2 do not reseed pseudo-random number generator5.0 Medium
- ploneExposure of Sensitive Information in Plone5.0 Medium
- plonePlone contains Cross-site Request Forgery4.3 Medium
- estsoft alupdateESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate...4.6 Medium
- smartySmarty arbitrary PHP code execution7.5 High
- pro softnet corporation ibackupiBackup 10.0.0.32 and earlier uses weak permissions (Everyone: Full Control) for ib_service.exe,...7.2 High
- ffmpeglibavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x...6.8 Medium
- ffmpeg, libav +1 moreHeap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in...7.5 High
- katelloKatello allows remote attackers to cause a denial of service (memory consumption) via the (1)...5.0 Medium
- redhat satellite, spacewalk-java, satellite with embedded oracle +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red...4.3 Medium
- fortinet coyote point equalizer, coyote point equalizer firmware, fortiadc-1000e +4 more +6 moreFortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10...6.4 Medium
- f5 enterprise manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 moreMultiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM,...5.5 Medium
- linksys e4200v2, ea2700, ea3500 +17 more +19 moreLinksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2...7.5 High
- linksys e4200v2, ea2700, ea3500 +17 more +19 moreLinksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2...3.3 Low