# CVEs published 2014-10-05

6 CVEs were published on October 5, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-7861](https://cve.now/CVE-2014-7861.md): The IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values, which allows remote attackers to execute arbit (no CVSS)
- [CVE-2014-2643](https://cve.now/CVE-2014-2643.md): Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown ve (no CVSS)
- [CVE-2014-2645](https://cve.now/CVE-2014-2645.md): HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors. (no CVSS)
- [CVE-2014-3396](https://cve.now/CVE-2014-3396.md): Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers (no CVSS)
- [CVE-2014-3398](https://cve.now/CVE-2014-3398.md): The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain potentially sensitive softw (no CVSS)
- [CVE-2014-3400](https://cve.now/CVE-2014-3400.md): Cisco WebEx Meetings Server allows remote authenticated users to obtain sensitive information by reading logs, aka Bug IDs CSCuq36417 and CS (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.