CVEs published in November 2014
542 vulnerabilities, 135 critical, 10 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to read content from a different...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9 allows remote attackers to bypass the ASLR protection...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...9.3 High
- microsoft office compatibility pack, word, office word viewer +2 moreMicrosoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to...9.3 High
- microsoft office compatibility pack, word, office word viewer +2 moreMicrosoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to...9.3 High
- microsoft office compatibility pack, word, office word viewer +2 moreMicrosoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to...9.3 High
- microsoft windows, windows 7, windows 8 +7 more +9 moreOleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008...9.3 High
- microsoft active directory federation servicesMicrosoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to obtain sensitive clipboard...4.3 Medium
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreThe Windows Audio service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...4.3 Medium
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreSchannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2...10.0 High
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreThe audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows...4.3 Medium
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreArray index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2,...7.1 High
- microsoft .net frameworkMicrosoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreXML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...9.3 High
- microsoft sharepoint foundationCross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2 allows...4.3 Medium
- microsoft internet information servicesThe IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not...5.1 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +3 more +5 moreMicrosoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows...7.8 High
- microsoft windows server 2003Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call...7.2 High
- elipse e3Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash...5.0 Medium
- linux kernelThe instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before...4.9 Medium
- linux kernelThe instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before...4.9 Medium
- linux kernelkernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private...7.8 High
- sprockets project sprocketssprockets vulnerable to Path Traversal5.0 Medium
- rubyonrails rails, ruby on rails, opensuse +2 moreactionpack vulnerable to Path Traversal4.3 Medium
- ibm tivoli netcool\/impactCross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV...3.5 Low
- ibm db2IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX,...3.5 Low
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is...1.9 Low
- ibm db2IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote...4.0 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCitrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52...4.9 Medium
- trendmicro interscan web security virtual applianceThe AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build...4.0 Medium
- arubanetworks clearpassCross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass...4.3 Medium
- arubanetworks clearpassCross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x...4.3 Medium
- eucalyptusEucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system...2.1 Low
- eucalyptusEucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords...2.1 Low
- rewardingyourselfCross-site scripting (XSS) vulnerability in the RewardingYourself application for Android and...4.3 Medium
- gwt mobile phonegap showcase project mobile phonegap showcaseCross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for...4.3 Medium
- cisco air-ct5760, ios xe, ws-c3850 +1 more +3 moreCisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly...6.8 Medium
- cisco b200 m3, b200 m4, b22 m3 +5 more +7 moreCisco Unified Computing System on B-Series blade servers allows local users to gain shell...6.8 Medium
- cisco unity connectionThe Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote...4.0 Medium
- abb robotstudio, test signal viewer +1 moreUntrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer...6.9 Medium
- rsa web threat detectionSQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote...8.8 High
- symantec endpoint protection managerConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote...6.1 Medium
- symantec endpoint protection managerMultiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec...4.3 Medium
- symantec endpoint protection managerThe management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows...7.5 High
- cisco rv120w, rv180, rv180w +4 more +6 moreThe Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0...5.0 Medium
- cisco rv120w, rv180, rv180w +4 more +6 moreCross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco...6.8 Medium
- cisco rv120w, rv180, rv180w +4 more +6 moreThe network-diagnostics administration interface in the Cisco RV router firmware on RV220W...9.0 High
- Show moreLoading…