Skip to content
OpenAdvisories

Archive

22 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /22 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2013-7407

    Cross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote attackers to hijack the aut…

    Web / CMS
  • Unscored —
    CVE-2014-7183

    Multiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote atta…

  • Unscored —
    CVE-2014-7182

    Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remo…

  • Unscored —
    CVE-2014-7968

    VDSM allows remote attackers to cause a denial of service (connection blocking) by keeping an SSL connection open.

  • High 7.8
    CVE-2014-6352 Exploited Public exploit EPSS 77%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Feb 25, 2022
  • Unscored —
    CVE-2014-6387

    gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a password starting will…

  • Unscored —
    CVE-2014-3676

    Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, relate…

    shim Ubuntu
  • Unscored —
    CVE-2014-3677

    Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which trigger…

    shim Ubuntu
  • Unscored —
    CVE-2014-3675

    Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.

    shim Ubuntu
  • Unscored —
    CVE-2014-8761

    inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace, which allows remote attac…

    dokuwiki Debian
  • Medium —
    CVE-2014-8088

    Zend Access Restriction Bypass

    The (1) Zend_Ldap class in Zend before 1.12.9 and (2) Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind.

    zendframework/zendframework1 zendframework/zendframework zend-framework Ubuntu Packagist
  • Unscored —
    CVE-2014-8381

    Multiple cross-site scripting (XSS) vulnerabilities in Megapolis.Portal Manager allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2014-8762

    The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access arbitrary images via a cra…

    dokuwiki Debian
  • Unscored —
    CVE-2014-8764

    DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypas…

    dokuwiki Debian
  • Unscored —
    CVE-2014-8763

    DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass aut…

    dokuwiki Debian
  • Unscored —
    CVE-2014-8325

    The Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2014-4449

    iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the…

  • Unscored —
    CVE-2014-4450

    The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields wi…

  • Unscored —
    CVE-2014-4448

    House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physi…