Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
November

CVEs published in November 2014

542 vulnerabilities, 135 critical, 10 exploited.

Known exploitedIn KEVPublic exploitFix available

redhat tcpdumptcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from...CVE-2014-8769Fix available6.4 MediumNovember 20, 2014
redhat tcpdump, canonical ubuntu linux, opensuse +1 more +3 moreMultiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in...CVE-2014-8768Public exploitFix availableEPSS 19.8%5.0 MediumNovember 20, 2014
redhat tcpdumpInteger underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode...CVE-2014-8767Fix available5.0 MediumNovember 20, 2014
kde kde-runtime, kio-extras, urs wolfer kwebkitpart +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier,...CVE-2014-8600Fix available4.3 MediumNovember 20, 2014
freeipaFreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers...CVE-2014-7828Fix available3.5 LowNovember 19, 2014
arubanetworks clearpassAruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute...CVE-2014-66279.0 HighNovember 19, 2014
arubanetworks clearpassAruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to...CVE-2014-662610.0 HighNovember 19, 2014
arubanetworks clearpassThe Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote...CVE-2014-66259.0 HighNovember 19, 2014
arubanetworks clearpassThe Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote...CVE-2014-66246.8 MediumNovember 19, 2014
arubanetworks clearpassAruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine...CVE-2014-66225.0 MediumNovember 19, 2014
arubanetworks clearpassAruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting...CVE-2014-66215.0 MediumNovember 19, 2014
arubanetworks clearpassAruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute...CVE-2014-534210.0 HighNovember 19, 2014
pandorafms pandora flexible monitoring systemCross-site scripting (XSS) vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1...CVE-2014-86294.3 MediumNovember 19, 2014
atlas systems aeonMultiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow...CVE-2014-72904.3 MediumNovember 19, 2014
google chromeUse-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows...CVE-2014-79067.5 HighNovember 19, 2014
google chromeGoogle Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where...CVE-2014-7905Fix available5.0 MediumNovember 19, 2014
google chromeBuffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65,...CVE-2014-7903Fix available7.5 HighNovember 19, 2014
google chromeUse-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows...CVE-2014-7902Fix available7.5 HighNovember 19, 2014
google chromeInteger overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20...CVE-2014-7901Fix available7.5 HighNovember 19, 2014
google chromeUse-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser...CVE-2014-7900Fix available7.5 HighNovember 19, 2014
google chromeGoogle Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a...CVE-2014-78995.0 MediumNovember 19, 2014
ibm javaUnspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7...CVE-2014-30656.9 MediumNovember 19, 2014
php5 Debianphp5 - regression updateDSA-3074-2Fix availableNo scoreNovember 19, 2014
google chromeMultiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to...CVE-2014-7910Public exploitFix available7.5 HighNovember 19, 2014
google chromeeffects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a...CVE-2014-7909Fix available5.0 MediumNovember 19, 2014
google chromeMultiple integer overflows in the CheckMov function in media/base/container_names.cc in Google...CVE-2014-7908Fix available7.5 HighNovember 19, 2014
google chromeMultiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController...CVE-2014-7907Fix available7.5 HighNovember 19, 2014
google chromeBuffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to...CVE-2014-7904Fix available7.5 HighNovember 19, 2014
cisco unified computing systemCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated...CVE-2014-79966.8 MediumNovember 18, 2014
rubyonrails rails, ruby on rails, opensuse +2 moreDirectory traversal vulnerability in actionpackCVE-2014-7829Fix available5.0 MediumNovember 18, 2014
microsoft kerberos key distribution center (kdc), windows 7, windows 8 +4 more +6 moreThe Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista...CVE-2014-6324In KEVPublic exploitEPSS 87.3%9.0 HighNovember 18, 2014
ibm tivoli storage managerThe server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1...CVE-2014-48172.1 LowNovember 18, 2014
mantisbtThe XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote...CVE-2014-8598Public exploitEPSS 38.5%6.4 MediumNovember 18, 2014
freebsdFreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library...CVE-2014-84754.3 MediumNovember 18, 2014
mantisbtThe XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute...CVE-2014-7146Public exploitEPSS 50.6%7.5 HighNovember 18, 2014
apple iphone osApple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection...CVE-2014-44632.1 LowNovember 18, 2014
apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to...CVE-2014-44625.8 MediumNovember 18, 2014
apple iphone os, mac os x, tvos +2 moreThe kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate...CVE-2014-44619.3 HighNovember 18, 2014
apple iphone os, mac os x +1 moreCFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing...CVE-2014-44602.1 LowNovember 18, 2014
apple iphone os, itunes, mac os x +2 more +4 moreUse-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote...CVE-2014-44596.8 MediumNovember 18, 2014
apple mac os xThe "System Profiler About This Mac" component in Apple OS X before 10.10.1 includes extraneous...CVE-2014-44585.0 MediumNovember 18, 2014
apple iphone osThe Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the...CVE-2014-44577.5 HighNovember 18, 2014
apple iphone os, tvos +1 moredyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping...CVE-2014-44552.1 LowNovember 18, 2014
apple iphone os, mac os x +1 moreApple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a...CVE-2014-44535.0 MediumNovember 18, 2014
apple iphone os, itunes, safari +1 more +3 moreWebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to...CVE-2014-44525.4 MediumNovember 18, 2014
apple iphone osApple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier...CVE-2014-44517.2 HighNovember 18, 2014
cisco iosThe DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote...CVE-2014-7992EPSS 27.2%5.0 MediumNovember 18, 2014
ibm security identity managerIBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions,...CVE-2014-61102.1 LowNovember 18, 2014
ibm security identity managerIBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive...CVE-2014-61074.3 MediumNovember 18, 2014
ibm security identity managerIBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct...CVE-2014-61054.3 MediumNovember 18, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open