Skip to content
OpenAdvisories

Archive

October 2014

Vulnerabilities first published in this month (UTC), newest first.

← September 2014 2014 / October November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.5
    CVE-2014-1927

    python-gnupg's shell_quote function does not properly quote strings

    The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a di…

    python-gnupg python-gnupg python-gnupg Debian Ubuntu PyPI
  • High 7.5
    CVE-2014-1928

    python-gnupg's shell_quote function does not properly escape characters

    The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form mu…

    python-gnupg python-gnupg Debian PyPI
  • High 7.8
    CVE-2014-6352 Exploited Public exploit EPSS 77%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Feb 25, 2022
  • High —
    CVE-2014-7191

    Denial-of-Service Memory Exhaustion in qs

    The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.

    qs node-qs node-qs Debian Ubuntu npm
  • High 7.8
    CVE-2014-4114 Exploited Public exploit EPSS 82%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Mar 3, 2022
  • High 8.8
    CVE-2014-4148 Exploited EPSS 60%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

    KEV May 25, 2022
  • High 8.8
    CVE-2014-4123 Exploited EPSS 47%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

    KEV May 25, 2022
  • High 7.8
    CVE-2014-4113 Exploited Public exploit EPSS 87%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

    KEV May 4, 2022
  • High 7.1
    CVE-2014-5410

    Rockwell Automation Micrologix 1400 Improper Input Validation

    The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service (process disruption) via malformed pack…

    Rockwell Automation Allen-Bradley MicroLogix 1400 ICS / OT
  • High —
    CVE-2014-6289

    yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions

    The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers to bypass access restrictions and execute arbitrary controller actions via un…

    dl/yag punktde/pt_extbase Packagist
  • High —
    CVE-2014-6295

    WEC Map (wec_map) extension for TYPO3 allows SQL Injection

    SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    jbartels/wec-map web-tp3/wec_map Packagist
  • High —
    CVE-2014-3947

    TYPO3 powermail extension has unrestricted file upload vulnerability

    Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.

    in2code/powermail Packagist