CVEs published in November 2014
542 vulnerabilities, 135 critical, 10 exploited.
- ibm security identity managerIBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover...5.0 Medium
- ibm security identity managerCross-site scripting (XSS) vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14...4.3 Medium
- ibm security identity managerDirectory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows...5.0 Medium
- redhat jboss enterprise application platformJBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2...2.1 Low
- phpmoneybooksDirectory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to...4.3 Medium
- phpmoneybooksDirectory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote...4.3 Medium
- megnicholas clean and simple contact formCross-site scripting (XSS) vulnerability in the Contact Form Clean and Simple (clean-and-simple...4.3 Medium
- codecanyon phpsoundMultiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to...4.3 Medium
- phpscriptlerim php scriptlerim who\'s whoMultiple cross-site request forgery (CSRF) vulnerabilities in Php Scriptlerim Who's Who script...6.8 Medium
- phpmemcachedadmin project phpmemcachedadminCross-site scripting (XSS) vulnerability in phpMemcachedAdmin 1.2.2 and earlier allows remote...4.3 Medium
- f5 big-ip local traffic managerMultiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with...6.2 Medium
- php-fusionMultiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to...7.5 High
- netbsd, apple mac os x +1 moreThe fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2...7.5 High
- manageengine password manager proMultiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password...6.5 Medium
- zohocorp manageengine password manager proSQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP)...6.5 Medium
- docker, docker docker-py +1 moreMan-in-the-Middle (MitM)5.0 Medium
- apache qpidXML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...4.3 Medium
- sap governance risk and complianceMultiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote...9.0 High
- checkpoint security gatewayMultiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46,...7.1 High
- checkpoint security gatewayUnspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when...7.1 High
- checkpoint security gatewayUnspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL...7.1 High
- rubyonrails railsThe str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent...5.0 Medium
- apache hiveLow severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service3.5 Low
- imember360The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated...6.0 Medium
- imember360Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001...6.8 Medium
- redhat openshiftRed Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to...6.5 Medium
- webfsThe Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which...7.2 High
- bestpractical request trackerThe MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0...5.0 Medium
- ubercartThe Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the ...6.0 Medium
- vtiger crmviews/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly...5.0 Medium
- oracle linux, uninett mod auth mellon +1 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information...6.4 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary...4.3 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and...4.3 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to change the start page via a...6.4 Medium
- canonical ubuntu linux, debian linux, freedesktop dbus +1 more +3 moreD-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local...2.1 Low
- cisco iosCisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows...7.1 High
- cisco iosThe DHCP implementation in Cisco IOS on Aironet access points does not properly handle error...6.1 Medium
- ipa ilogscannerCross-site scripting (XSS) vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject...4.3 Medium
- redhat enterprise linux desktop, enterprise linux server, enterprise linux server aus +4 more +6 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service ...9.4 High
- wireshark, oracle solaris +1 moreThe (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet...5.0 Medium
- wireshark, oracle linux, solaris +2 moreMultiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the...7.8 High
- wireshark, oracle linux, solaris +2 moreepan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x...5.0 Medium
- wireshark, debian linux, mageia +1 more +3 moreInteger overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF...5.0 Medium
- wireshark, debian linux, mageia +2 more +4 moreOff-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in...5.0 Medium
- wireshark, debian linux, mageia +2 more +4 moreepan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x...5.0 Medium
- wireshark, debian linux, opensuse +1 more +3 moreBuffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in...5.0 Medium
- wireshark, opensuse +1 moreepan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x...5.0 Medium
- wiresharkMultiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA...5.0 Medium
- wireshark, opensuse, oracle solaris +2 moreasn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3...5.0 Medium
- wireshark, opensuse +1 moreThe dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP...5.0 Medium
- Show moreLoading…