Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
November

CVEs published in November 2014

542 vulnerabilities, 135 critical, 10 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe flash playerAdobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X...CVE-2014-0587Fix available10.0 HighNovember 14, 2014
adobe flash playerAdobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X...CVE-2014-0580Fix available10.0 HighNovember 14, 2014
ruby-lang rubyThe REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598,...CVE-2014-8090Fix available5.0 MediumNovember 14, 2014
cisco unified communications managerThe Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and...CVE-2014-79914.3 MediumNovember 14, 2014
hp helion cloud development platformThe Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a...CVE-2014-7878EPSS 10.3%10.0 HighNovember 14, 2014
qemu, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...CVE-2014-7840Fix available7.5 HighNovember 14, 2014
forgerock openamThe Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0...CVE-2014-72463.5 LowNovember 14, 2014
rockwellautomation connected components workbenchRockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers...CVE-2014-5424EPSS 11.0%7.5 HighNovember 14, 2014
magmi project magmiMAGMI plugin for Magento Unsafe File UploadCVE-2014-8770Public exploit9.0 HighNovember 13, 2014
gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 MediumNovember 13, 2014
jexperts channel platformMultiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow...CVE-2014-85574.3 MediumNovember 13, 2014
mantisbtSQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api...CVE-2014-85547.5 HighNovember 13, 2014
huawei ec156, ec176, ec177 +1 more +3 moreUntrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows...CVE-2014-8359Public exploit7.2 HighNovember 13, 2014
redhat openshiftRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...CVE-2014-36747.5 HighNovember 13, 2014
redhat openshiftRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...CVE-2014-36022.1 LowNovember 13, 2014
open atrium project atriumThe Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access...CVE-2014-87365.0 MediumNovember 12, 2014
bad behavior project behaviorThe Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs...CVE-2014-87354.0 MediumNovember 12, 2014
drupal organic groups menuThe Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote...CVE-2014-87343.5 LowNovember 12, 2014
progress openedgeDirectory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11...CVE-2014-8555Public exploit5.0 MediumNovember 12, 2014
belkin n750 wireless router, n750 wireless router firmware +1 moreBuffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1...CVE-2014-1635Public exploitEPSS 67.5%10.0 HighNovember 12, 2014
imagemagickThe JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service ...CVE-2014-8716Fix available6.2 MediumNovember 12, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-8442Fix available7.5 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-8441Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-8440Public exploitFix availableEPSS 81.9%10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15...CVE-2014-8438Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-8437Fix available5.0 MediumNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0590Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreHeap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0...CVE-2014-0589Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15...CVE-2014-0588Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0586Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0585Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0584Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreHeap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0...CVE-2014-0583Fix available7.5 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreHeap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0...CVE-2014-0582Fix availableEPSS 11.4%10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0581Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0577Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and...CVE-2014-0576Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreDouble free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0...CVE-2014-0574Fix available10.0 HighNovember 11, 2014
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15...CVE-2014-0573Fix available10.0 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or...CVE-2014-6353EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-6351EPSS 22.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted...CVE-2014-6350EPSS 20.6%4.3 MediumNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted...CVE-2014-6349EPSS 10.7%4.3 MediumNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...CVE-2014-6348EPSS 15.7%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2014-6347EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to read content from a different...CVE-2014-6346EPSS 13.6%4.3 MediumNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 and 10 allows remote attackers to read content from a different (1)...CVE-2014-6345EPSS 30.2%4.3 MediumNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a...CVE-2014-6344EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2014-6343EPSS 15.5%9.3 HighNovember 11, 2014
microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...CVE-2014-6342EPSS 15.5%9.3 HighNovember 11, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open