Skip to content
OpenAdvisories

Archive

16 November 2014

Vulnerabilities first published on this day (UTC), newest first.

← October 2014 2014 / November /16 December 2014 →
  1. 15
  2. 23
  3. 318
  4. 446
  5. 519
  6. 630
  7. 721
  8. 87
  9. 9 
  10. 1017
  11. 1150
  12. 125
  13. 139
  14. 147
  15. 1511
  16. 1622
  17. 1715
  18. 1828
  19. 1924
  20. 2028
  21. 2113
  22. 22 
  23. 239
  24. 2438
  25. 2520
  26. 2626
  27. 271
  28. 2816
  29. 29 
  30. 3013
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Low —
    CVE-2014-0228

    Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service

    Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and (2) export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI.

    org.apache.hive:hive-exec org.apache.hive:hive org.apache.hive:hive-service Maven
  • Unscored —
    CVE-2014-0250

    Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact …

    freerdp Ubuntu
  • Medium —
    CVE-2014-3248

    facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability

    Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local us…

    puppet puppet mcollective facter Debian Ubuntu RubyGems
  • Unscored —
    CVE-2014-3916

    The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial…

  • Unscored —
    CVE-2014-8951

    Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the …

  • Unscored —
    CVE-2014-8952

    Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R7…

  • Unscored —
    CVE-2014-8950

    Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Aw…

  • Unscored —
    CVE-2013-0347

    The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to h…

    webfs Debian
  • Unscored —
    CVE-2014-0233

    Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary com…

  • Unscored —
    CVE-2014-3756

    The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a de…

    mumble mumble Debian Ubuntu
  • Unscored —
    CVE-2014-3755

    The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of se…

    mumble mumble Debian Ubuntu
  • Unscored —
    CVE-2014-8949 Public exploit

    The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbit…

  • Unscored —
    CVE-2014-8948 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows r…

  • Unscored —
    CVE-2013-3737

    The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13, when using …

  • Unscored —
    CVE-2012-2301

    The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer product cl…

  • Unscored —
    CVE-2014-3209

    The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow l…

    ldns ldns Debian Ubuntu
  • Unscored —
    CVE-2014-2268 Public exploit EPSS 31%

    views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which al…

  • Unscored —
    CVE-2014-2667

    Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true an…

  • Medium —
    CVE-2014-2682

    Several Zend Products Vulnerable to XXE and XEE attacks

    Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, Zend…

    zendframework/zendframework1 zendframework/zendopenid zendframework/zendservice-windowsazure zendframework/zendservice-api Packagist
  • Medium —
    CVE-2014-2681

    Several Zend Products Vulnerable to XXE and XEE attacks

    Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, Zend…

    zendframework/zendframework1 zendframework/zendopenid zendframework/zendrest zendframework/zendservice-nirvanix Packagist
  • Medium —
    CVE-2014-2683

    Several Zend Products Vulnerable to XXE and XEE attacks

    Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, Zend…

    zendframework/zendframework1 zendframework/zendopenid zendframework/zendservice-technorati zendframework/zendservice-amazon Packagist
  • Unscored —
    CVE-2014-2684

    The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Ze…