Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
November

CVEs published in November 2014

542 vulnerabilities, 135 critical, 10 exploited.

Known exploitedIn KEVPublic exploitFix available

kde kde-workspace, plasma-desktop +1 moreThe KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1...CVE-2014-8651Fix available7.2 HighNovember 7, 2014
freebsdThe setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to...CVE-2014-84762.1 LowNovember 7, 2014
classapps selectsurvey.netMultiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1)...CVE-2014-6030Public exploit6.5 MediumNovember 6, 2014
modx revolutionCross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX...CVE-2014-54514.3 MediumNovember 6, 2014
webedition cmsDirectory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta...CVE-2014-5258Public exploitEPSS 20.3%4.0 MediumNovember 6, 2014
vbulletinOpen redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect...CVE-2014-86705.8 MediumNovember 6, 2014
sap customer relationship managementThe SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to...CVE-2014-866910.0 HighNovember 6, 2014
sap contract accountingSQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute...CVE-2014-86687.5 HighNovember 6, 2014
sap hana web-based development workbenchCross-site scripting (XSS) vulnerability in SAP HANA Web-based Development Workbench allows...CVE-2014-86674.3 MediumNovember 6, 2014
sap business intelligence development workbenchThe User & Server configuration, InfoView refresh, user rights (BI-BIP-ADM) component in SAP...CVE-2014-86665.0 MediumNovember 6, 2014
sap business intelligence development workbenchThe SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive...CVE-2014-86655.0 MediumNovember 6, 2014
sap environment health and safetySQL injection vulnerability in Product Safety (EHS-SAF) component in SAP Environment, Health, and...CVE-2014-86647.5 HighNovember 6, 2014
sap netweaver business warehouseSQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows...CVE-2014-86637.5 HighNovember 6, 2014
sap payroll processUnspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of...CVE-2014-86627.8 HighNovember 6, 2014
sap customer relationship management internet salesThe SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via...CVE-2014-866110.0 HighNovember 6, 2014
sap document management servicesSAP Document Management Services allows local users to execute arbitrary commands via unspecified...CVE-2014-86607.2 HighNovember 6, 2014
sap environment health and safetyDirectory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers...CVE-2014-86595.0 MediumNovember 6, 2014
refinedwiki original themeCross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x...CVE-2014-86584.0 MediumNovember 6, 2014
compal broadband networks cg6640e wireless gateway, firmware, ch664oe wireless gateway +2 moreThe Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640...CVE-2014-8657Public exploit5.0 MediumNovember 6, 2014
compal broadband networks cg6640e wireless gateway, firmware, ch664oe wireless gateway +2 moreThe Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640...CVE-2014-8656Public exploitEPSS 10.9%10.0 HighNovember 6, 2014
compal broadband networks cg6640e wireless gateway, firmware, ch664oe wireless gateway +2 moreThe Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640...CVE-2014-8655Public exploit5.0 MediumNovember 6, 2014
compal broadband networks cg6640e wireless gateway, firmware, ch664oe wireless gateway +2 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN)...CVE-2014-8654Public exploit6.8 MediumNovember 6, 2014
compal broadband networks cg6640e wireless gateway, firmware, ch664oe wireless gateway +2 moreCross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E...CVE-2014-8653Public exploit4.3 MediumNovember 6, 2014
denon avr-3313ciCross-site scripting (XSS) vulnerability in s_network.asp in the Denon AVR-3313CI audio/video...CVE-2014-85084.3 MediumNovember 6, 2014
french national commission on informatics and liberty cookievizCross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics...CVE-2014-83524.3 MediumNovember 6, 2014
french national commission on informatics and liberty cookievizSQL injection vulnerability in info.php in French National Commission on Informatics and Liberty ...CVE-2014-83517.5 HighNovember 6, 2014
ait-pro bulletproof securitySQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin...CVE-2014-79596.5 MediumNovember 6, 2014
ait-pro bulletproof securityCross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof...CVE-2014-79584.3 MediumNovember 6, 2014
formalmsMultiple cross-site scripting (XSS) vulnerabilities in Forma Lms before 1.2.1 p01 allow remote...CVE-2014-52574.3 MediumNovember 6, 2014
wordfence security project securityCross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.4 for...CVE-2014-46644.3 MediumNovember 6, 2014
sap netweaverThe Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to...CVE-2014-0995Public exploitEPSS 10.5%5.0 MediumNovember 6, 2014
ffmpeg Debianffmpeg - updateDLA-83-1Fix availableNo scoreNovember 6, 2014
compfight project compfightCross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for...CVE-2014-86223.5 LowNovember 5, 2014
ffmpeglibavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2...CVE-2014-8549Fix available7.5 HighNovember 5, 2014
ffmpegInteger underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause...CVE-2014-8546Fix available7.5 HighNovember 5, 2014
ffmpeglibavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying...CVE-2014-8545Fix available7.5 HighNovember 5, 2014
meinberg ntp server firmware, meinberg radio clocks lantime m-series, meinberg lantime m100 +6 more +8 moreMeinberg Radio Clocks LANTIME M-SeriesCVE-2014-54177.5 November 5, 2014
nordex control 2 (nc2) scada, control 2 scada +1 moreNordex NC2 Cross-site ScriptingCVE-2014-54087.5 November 5, 2014
ibm websphere commerceIBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 does not properly detect...CVE-2014-48344.3 MediumNovember 5, 2014
ibm cognos mobileIBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1...CVE-2014-48104.3 MediumNovember 5, 2014
ibm websphere commerceIBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 allows remote authenticated...CVE-2014-47694.0 MediumNovember 5, 2014
accuenergy acuvim ii, acuvim ii axn-net ethernet module, axm-net +2 moreAccuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side SecurityCVE-2014-23747.5 November 5, 2014
accuenergy acuvim ii, acuvim ii axn-net ethernet module, axm-net +2 moreAccuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side SecurityCVE-2014-23737.5 November 5, 2014
ffmpeg, canonical ubuntu linux +1 moreOff-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a...CVE-2014-8548Fix available7.5 HighNovember 5, 2014
ffmpeg, canonical ubuntu linux +1 morelibavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows...CVE-2014-8547Fix available7.5 HighNovember 5, 2014
ffmpeg, canonical ubuntu linux +1 morelibavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which...CVE-2014-8544Fix available7.5 HighNovember 5, 2014
ffmpeg, canonical ubuntu linux +1 morelibavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks...CVE-2014-8543Fix available7.5 HighNovember 5, 2014
ffmpeg, canonical ubuntu linux, debian linux +2 morelibavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of...CVE-2014-8542Fix available7.5 HighNovember 5, 2014
ffmpeg, canonical ubuntu linux +1 morelibavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits...CVE-2014-8541Fix available7.5 HighNovember 5, 2014
redhat libvirtThe virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the...CVE-2014-7823Fix available5.0 MediumNovember 5, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open