25 November 2014

20 results · Feed

• High 8.8
  CVE-2014-8439 Exploited EPSS 20%

  Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on…

  flashplugin-nonfree Ubuntu
  Nov 25, 2014

  KEV May 25, 2022
• Unscored —
  CVE-2014-9038

  wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows rem…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9034 Public exploit EPSS 83%

  wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 al…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9031

  Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9032

  Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x …

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9035

  Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9036

  Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x bef…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9039

  wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9037

  WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to ob…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9033

  Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-8001

  Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via…

  Nov 25, 2014
• Unscored —
  CVE-2014-8002

  Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute…

  Nov 25, 2014
• Unscored —
  CVE-2014-8004

  Cisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by establishing many LISP TCP s…

  Nov 25, 2014
• Medium —
  CVE-2014-7839

  XML External Entity Reference in RESTEasy

  DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks via unspecified vectors.

  org.jboss.resteasy:resteasy-jaxrs Maven
  Nov 25, 2014
• Unscored —
  CVE-2014-1421

  mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows l…

  Nov 25, 2014
• Unscored —
  CVE-2014-8678

  The ConfigSaveServlet servlet in ManageEngine OpUtils before build 71024 allows remote attackers to "disclose" files vi…

  Nov 25, 2014
• Unscored —
  CVE-2014-8420 Public exploit EPSS 24%

  The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer befor…

  Nov 25, 2014
• Unscored —
  CVE-2014-8368

  The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gai…

  Nov 25, 2014
• Unscored —
  CVE-2014-8558

  JExperts Channel Platform 5.0.33_CCB allows remote authenticated users to bypass access restrictions via crafted action…

  Nov 25, 2014
• Unscored —
  CVE-2014-8367

  SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x befo…

  Nov 25, 2014