Skip to content
OpenAdvisories

Archive

7 November 2014

Vulnerabilities first published on this day (UTC), newest first.

← October 2014 2014 / November /7 December 2014 →
  1. 15
  2. 23
  3. 318
  4. 446
  5. 519
  6. 630
  7. 721
  8. 87
  9. 9 
  10. 1017
  11. 1150
  12. 125
  13. 139
  14. 147
  15. 1511
  16. 1622
  17. 1715
  18. 1828
  19. 1924
  20. 2028
  21. 2113
  22. 22 
  23. 239
  24. 2438
  25. 2520
  26. 2626
  27. 271
  28. 2816
  29. 29 
  30. 3013
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2014-6623

    Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.…

  • Unscored —
    CVE-2014-6620

    Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote …

  • Unscored —
    CVE-2014-3693

    Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4…

    libreoffice libreoffice Debian Ubuntu
  • Unscored —
    CVE-2014-3640

    The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-8510

    The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote auth…

  • Unscored —
    CVE-2014-8580

    Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before…

  • Unscored —
    CVE-2014-5038

    Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allo…

  • Unscored —
    CVE-2014-5037

    Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local u…

  • Unscored —
    CVE-2014-7989

    Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) …

  • Unscored —
    CVE-2014-7990

    Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system…

  • Unscored —
    CVE-2014-7988

    The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obt…

  • Unscored —
    CVE-2014-4627

    SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to exe…

  • Unscored —
    CVE-2014-3437 Public exploit

    The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read a…

  • Unscored —
    CVE-2014-3438 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manage…

  • Unscored —
    CVE-2014-3439 Public exploit

    ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbit…

  • Unscored —
    CVE-2014-2178

    Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on …

  • Unscored —
    CVE-2014-2177

    The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on R…

  • Unscored —
    CVE-2014-2179

    The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV18…

  • Unscored —
    CVE-2014-8672

    Cross-site scripting (XSS) vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remo…

  • Unscored —
    CVE-2014-8671

    Cross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote atta…

  • Unscored —
    CVE-2014-5430

    Untrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer 1.5 allows local user…