Skip to content
OpenAdvisories

Archive

October 2014

Vulnerabilities first published in this month (UTC), newest first.

← September 2014 2014 / October November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,413 results · Feed

  • Unscored —
    CVE-2014-2927 Public exploit

    The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 befor…

  • Unscored —
    CVE-2014-2022 Public exploit

    SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier …

  • Unscored —
    CVE-2014-8750

    Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remo…

  • Unscored —
    CVE-2014-8295 Public exploit

    SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2014-8294

    Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2014-8293

    Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2014-0564

    Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2014-0571

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before…

  • Unscored —
    CVE-2014-0570

    Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2…

  • Unscored —
    CVE-2014-0569 Public exploit EPSS 91%

    Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and be…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2014-0558

    Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2014-0572

    Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 befor…

  • Unscored —
    CVE-2014-1581

    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, a…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1583

    The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, …

    firefox Ubuntu
  • Unscored —
    CVE-2014-1575

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow remote attackers to cau…

    firefox Ubuntu
  • Unscored —
    CVE-2014-1586

    content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x befo…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1584

    The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified iss…

    firefox Ubuntu
  • Unscored —
    CVE-2014-1576

    Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1585

    The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1577

    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-1582

    The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-co…

    firefox Ubuntu
  • Unscored —
    CVE-2014-1578

    The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 al…

    thunderbird firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2014-1580

    Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain…

    firefox Ubuntu
  • Unscored —
    CVE-2014-1574

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2014-4127 EPSS 16%

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • High 7.8
    CVE-2014-4114 Exploited Public exploit EPSS 82%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Mar 3, 2022
  • Unscored —
    CVE-2014-4132 EPSS 17%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2014-4140 Public exploit EPSS 21%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted …

  • Unscored —
    CVE-2014-4129 EPSS 25%

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2014-4121 EPSS 19%

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resour…

  • High 8.8
    CVE-2014-4148 Exploited EPSS 60%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

    KEV May 25, 2022
  • Unscored —
    CVE-2014-4133 EPSS 17%

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2014-4141 Public exploit EPSS 31%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2014-4073 EPSS 23%

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction wit…

  • Unscored —
    CVE-2014-4134 EPSS 17%

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2014-4130 EPSS 17%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2014-4138 Public exploit EPSS 32%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2014-4126 EPSS 21%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • High 8.8
    CVE-2014-4123 Exploited EPSS 47%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

    KEV May 25, 2022
  • Unscored —
    CVE-2014-4122 EPSS 13%

    Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to …