Skip to content
OpenAdvisories

Archive

October 2014

Vulnerabilities first published in this month (UTC), newest first.

← September 2014 2014 / October November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,413 results · Feed

  • Unscored —
    CVE-2014-6458

    Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrit…

  • Unscored —
    CVE-2014-6472

    Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, …

  • Unscored —
    CVE-2014-6454

    Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 1…

  • Unscored —
    CVE-2014-6479

    Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6,…

  • Unscored —
    CVE-2014-6457

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, a…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6473

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and …

  • Unscored —
    CVE-2014-6464

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

    mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6476

    Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vecto…

  • Unscored —
    CVE-2014-6462

    Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allo…

  • Unscored —
    CVE-2014-6483

    Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote aut…

  • Unscored —
    CVE-2014-6465

    Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications App…

  • Unscored —
    CVE-2014-6467

    Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, an…

  • Unscored —
    CVE-2014-6474

    Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availab…

    mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6485

    Unspecified vulnerability in Oracle Java SE 8u20 and JavaFX 2.2.65 allows remote attackers to affect confidentiality, i…

  • Unscored —
    CVE-2014-6482

    Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 and …

  • Unscored —
    CVE-2014-6459

    Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows rem…

  • Unscored —
    CVE-2014-6484

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6471

    Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.…

  • Unscored —
    CVE-2014-6463

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6455

    Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 1…

  • Unscored —
    CVE-2014-6478

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to…

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-6475

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, …

  • Unscored —
    CVE-2014-6452

    Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 1…

  • Unscored —
    CVE-2014-6468

    Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availabil…

  • Unscored —
    CVE-2014-6453

    Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, an…

  • Unscored —
    CVE-2014-6470

    Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availab…

  • Unscored —
    CVE-2014-2476

    Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows rem…

  • Unscored —
    CVE-2014-2478

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.…

  • Unscored —
    CVE-2014-2473

    Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows rem…

  • Unscored —
    CVE-2014-2474

    Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows rem…

  • Unscored —
    CVE-2014-2472

    Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows rem…

  • Unscored —
    CVE-2014-2475

    Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5…

  • Unscored —
    CVE-2014-7206

    The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the …

    apt apt Debian Ubuntu
  • Medium 5.3
    CVE-2014-1829

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Medium —
    CVE-2014-1830

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-6312 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before…

  • Unscored —
    CVE-2014-3593

    Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbit…

  • Medium —
    CVE-2014-3664

    Jenkins Path Traversal vulnerability

    Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium —
    CVE-2014-3681

    Jenkins Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2014-2576

    plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fiel…

    claws-mail Debian