Archive
November 2014
Vulnerabilities first published in this month (UTC), newest first.
501 results · Feed
-
Unscored —CVE-2014-6345 EPSS 30%
Microsoft Internet Explorer 9 and 10 allows remote attackers to read content from a different (1) domain or (2) zone vi…
-
Unscored —CVE-2014-6343 EPSS 16%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2014-6353 EPSS 16%
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2014-6322 EPSS 13%
The Windows Audio service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…
-
Unscored —CVE-2014-6342 EPSS 16%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2014-6340 EPSS 29%
Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zon…
-
Unscored —CVE-2014-6333 EPSS 18%
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary cod…
-
Unscored —CVE-2014-6349 EPSS 11%
Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet …
-
Unscored —CVE-2014-6346 EPSS 14%
Microsoft Internet Explorer 8 through 11 allows remote attackers to read content from a different (1) domain or (2) zon…
-
Unscored —CVE-2014-6323 EPSS 14%
Microsoft Internet Explorer 7 through 11 allows remote attackers to obtain sensitive clipboard information via a crafte…
-
Unscored —CVE-2014-6317 EPSS 18%
Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Win…
-
Unscored —CVE-2014-6344 EPSS 16%
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Unscored —CVE-2014-6348 EPSS 16%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2014-6335 EPSS 16%
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary cod…
-
Unscored —CVE-2014-6321 EPSS 96%
Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi…
-
Unscored —
A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate a…
-
Unscored —
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers durin…
-
Unscored —
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers durin…
-
Unscored —
The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the…
-
Unscored —
Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel…
-
Unscored —
The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system…
-
Unscored —
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the …
-
Unscored —
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPI…
-
Unscored —
arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, w…
-
Unscored —
The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel throug…
-
Unscored —
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT in…
-
Unscored —
The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pag…
-
Unscored —CVE-2014-8652 Public exploit
Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via…
-
Unscored —
The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 does not pro…
-
Unscored —
The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renam…
-
Unscored —
The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a cer…
-
Unscored —
The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 lacks intend…
-
Medium —
sprockets vulnerable to Path Traversal
Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10…
-
Medium —
actionpack vulnerable to Path Traversal
Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when serve_static_assets is enabled, allows remo…
-
Unscored —
IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a de…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool/Impact 6.1.1 before 6.1.1.1-TIV-NCI-IF0001 allows remote…
-
Unscored —
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properl…
-
Unscored —
IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when imme…
-
Medium —
phpMyAdmin micro history Implementation XSS Vulnerability
Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.…