# CVEs published 2014-10-13 16 CVEs were published on October 13, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-8743](https://cve.now/CVE-2014-8743.md): Multiple cross-site scripting (XSS) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users (no CVSS) - [CVE-2014-8744](https://cve.now/CVE-2014-8744.md): Cross-site scripting (XSS) vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with (no CVSS) - [CVE-2014-8745](https://cve.now/CVE-2014-8745.md): Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15 for Drupal allows r (no CVSS) - [CVE-2014-8746](https://cve.now/CVE-2014-8746.md): Cross-site scripting (XSS) vulnerability in the Skeleton theme 7.x-1.2 through 7.x-1.3 before 7.x-1.4, for Drupal allows remote authenticate (no CVSS) - [CVE-2014-8747](https://cve.now/CVE-2014-8747.md): Cross-site scripting (XSS) vulnerability in the Drupal Commons module 7.x-3.x before 7.x-3.9 for Drupal allows remote attackers to inject ar (no CVSS) - [CVE-2014-8748](https://cve.now/CVE-2014-8748.md): Cross-site scripting (XSS) vulnerability in the Google Doubleclick for Publishers (DFP) module 7.x-1.x before 7.x-1.2 for Drupal allows remo (no CVSS) - [CVE-2014-7283](https://cve.now/CVE-2014-7283.md): The xfs\_da3\_fixhashpath function in fs/xfs/xfs\_da\_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly comp (no CVSS) - [CVE-2014-7284](https://cve.now/CVE-2014-7284.md): The net\_get\_random\_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors d (no CVSS) - [CVE-2014-7297](https://cve.now/CVE-2014-7297.md): Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors. (no CVSS) - [CVE-2014-7970](https://cve.now/CVE-2014-7970.md): The pivot\_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chro (no CVSS) - [CVE-2014-7975](https://cve.now/CVE-2014-7975.md): The do\_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP\_SYS\_ADMIN capability for do\_remount\_sb ca (no CVSS) - [CVE-2014-8086](https://cve.now/CVE-2014-8086.md): Race condition in the ext4\_file\_write\_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial (no CVSS) - [CVE-2014-1571](https://cve.now/CVE-2014-1571.md): Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 allows remote (no CVSS) - [CVE-2014-1572](https://cve.now/CVE-2014-1572.md): The confirm\_create\_account function in the account-creation feature in token.cgi in Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2. (no CVSS) - [CVE-2014-1573](https://cve.now/CVE-2014-1573.md): Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensur (no CVSS) - [CVE-2014-3091](https://cve.now/CVE-2014-3091.md): Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.1.x and 7.2.x allows remote attackers to inject arbitrary web script (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-10-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.