# CVEs published 2014-10-14

11 CVEs were published on October 14, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3818](https://cve.now/CVE-2014-3818.md): Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15 (no CVSS)
- [CVE-2014-3825](https://cve.now/CVE-2014-3825.md): The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12. (no CVSS)
- [CVE-2014-6313](https://cve.now/CVE-2014-6313.md): Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2014-6377](https://cve.now/CVE-2014-6377.md): Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows rem (no CVSS)
- [CVE-2014-6378](https://cve.now/CVE-2014-6378.md): Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 be (no CVSS)
- [CVE-2014-6379](https://cve.now/CVE-2014-6379.md): Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before (no CVSS)
- [CVE-2014-6380](https://cve.now/CVE-2014-6380.md): Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R (no CVSS)
- [CVE-2014-8069](https://cve.now/CVE-2014-8069.md): Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2014-8070](https://cve.now/CVE-2014-8070.md): Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phish (no CVSS)
- [CVE-2014-8765](https://cve.now/CVE-2014-8765.md): Multiple cross-site scripting (XSS) vulnerabilities in the Project Issue File Review module (PIFR) module 6.x-2.x before 6.x-2.17 for Drupal (no CVSS)
- [CVE-2014-8766](https://cve.now/CVE-2014-8766.md): Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat par (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.