Skip to content
OpenAdvisories

Archive

October 2014

Vulnerabilities first published in this month (UTC), newest first.

← September 2014 2014 / October November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,413 results · Feed

  • Medium —
    CVE-2014-3680

    Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3666

    Jenkins allows for Code Execution via Crafted Packet to the CLI

    Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2014-8308

    Cross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows r…

  • Unscored —
    CVE-2014-8240

    Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitr…

    tigervnc Debian
  • Unscored —
    CVE-2014-8311

    SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an InfoStore query to a CORBA …

  • Unscored —
    CVE-2014-8304

    Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2014-8309

    SAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a failed logon attempt wi…

  • Unscored —
    CVE-2014-8301

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers…

  • Unscored —
    CVE-2014-8314

    Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to…

  • Unscored —
    CVE-2014-8316

    XML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 allows rem…

  • Unscored —
    CVE-2014-8313

    Eval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows remote attackers to execu…

  • Unscored —
    CVE-2014-8306 Public exploit

    SQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attack…

  • Unscored —
    CVE-2014-8315

    polestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a conne…

  • Unscored —
    CVE-2014-8307 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow…

  • Unscored —
    CVE-2014-8312

    Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information…

  • Unscored —
    CVE-2014-8302

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and…

  • Unscored —
    CVE-2014-8310

    The CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a denial of service (server …

  • Unscored —
    CVE-2014-8303

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 a…

  • Unscored —
    CVE-2014-8305 Public exploit

    Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remo…

  • Unscored —
    CVE-2014-8296

    Cross-site scripting (XSS) vulnerability in the Modal Frame API module 6.x-1.x before 6.x-1.9 for Drupal allows remote …

  • Unscored —
    CVE-2014-7237 EPSS 20%

    lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended ac…

  • Unscored —
    CVE-2014-3686

    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli…

    wpa wpa Debian Ubuntu
  • Unscored —
    CVE-2014-3704 Public exploit Scanner template EPSS 100%

    The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct…

    drupal7 Ubuntu
  • Unscored —
    CVE-2014-6540

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, befo…

    virtualbox virtualbox-guest-additions-iso Debian Ubuntu
  • Unscored —
    CVE-2014-6512

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6522

    Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, …

  • Unscored —
    CVE-2014-6504

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6550

    Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business Suite 11.5.10.2 allo…

  • Unscored —
    CVE-2014-6500

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to…

    mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6555

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

    mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6560

    Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, an…

  • Unscored —
    CVE-2014-6497

    Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors relate…

  • Unscored —
    CVE-2014-6530

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6533

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1 a…

  • Unscored —
    CVE-2014-6559

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to…

    mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6531

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6561

    Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 1…

  • Unscored —
    CVE-2014-6535

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, …

  • Unscored —
    CVE-2014-6499

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.…

  • Unscored —
    CVE-2014-6490

    Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related t…