# CVEs published 2014-10-15

196 CVEs were published on October 15, 2014: 0 critical, 4 high. 4 are now in CISA KEV. Days are UTC.

- [CVE-2014-6486](https://cve.now/CVE-2014-6486.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to (no CVSS)
- [CVE-2014-6487](https://cve.now/CVE-2014-6487.md): Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 al (no CVSS)
- [CVE-2014-6488](https://cve.now/CVE-2014-6488.md): Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform (no CVSS)
- [CVE-2014-6489](https://cve.now/CVE-2014-6489.md): Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability v (no CVSS)
- [CVE-2014-6490](https://cve.now/CVE-2014-6490.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB server user com (no CVSS)
- [CVE-2014-6491](https://cve.now/CVE-2014-6491.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality (no CVSS)
- [CVE-2014-6492](https://cve.now/CVE-2014-6492.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality (no CVSS)
- [CVE-2014-6493](https://cve.now/CVE-2014-6493.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2014-6494](https://cve.now/CVE-2014-6494.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability (no CVSS)
- [CVE-2014-6495](https://cve.now/CVE-2014-6495.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability (no CVSS)
- [CVE-2014-6496](https://cve.now/CVE-2014-6496.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability (no CVSS)
- [CVE-2014-6497](https://cve.now/CVE-2014-6497.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel. (no CVSS)
- [CVE-2014-6498](https://cve.now/CVE-2014-6498.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3. (no CVSS)
- [CVE-2014-6499](https://cve.now/CVE-2014-6499.md): Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12 (no CVSS)
- [CVE-2014-6500](https://cve.now/CVE-2014-6500.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2014-6501](https://cve.now/CVE-2014-6501.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via vectors related to SSH. (no CVSS)
- [CVE-2014-6502](https://cve.now/CVE-2014-6502.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integ (no CVSS)
- [CVE-2014-6503](https://cve.now/CVE-2014-6503.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2014-6504](https://cve.now/CVE-2014-6504.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentia (no CVSS)
- [CVE-2014-6505](https://cve.now/CVE-2014-6505.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2014-6506](https://cve.now/CVE-2014-6506.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confi (no CVSS)
- [CVE-2014-6507](https://cve.now/CVE-2014-6507.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect con (no CVSS)
- [CVE-2014-6508](https://cve.now/CVE-2014-6508.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via vectors related to iSCSI Data M (no CVSS)
- [CVE-2014-6511](https://cve.now/CVE-2014-6511.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vecto (no CVSS)
- [CVE-2014-6512](https://cve.now/CVE-2014-6512.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remo (no CVSS)
- [CVE-2014-6513](https://cve.now/CVE-2014-6513.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2014-6515](https://cve.now/CVE-2014-6515.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect integrity via unknown vectors related to (no CVSS)
- [CVE-2014-6516](https://cve.now/CVE-2014-6516.md): Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 8.98 allows local users to affect co (no CVSS)
- [CVE-2014-6517](https://cve.now/CVE-2014-6517.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attac (no CVSS)
- [CVE-2014-6519](https://cve.now/CVE-2014-6519.md): Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknow (no CVSS)
- [CVE-2014-6520](https://cve.now/CVE-2014-6520.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2014-6522](https://cve.now/CVE-2014-6522.md): Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows r (no CVSS)
- [CVE-2014-6523](https://cve.now/CVE-2014-6523.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allow (no CVSS)
- [CVE-2014-6527](https://cve.now/CVE-2014-6527.md): Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deploym (no CVSS)
- [CVE-2014-6529](https://cve.now/CVE-2014-6529.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vector (no CVSS)
- [CVE-2014-6530](https://cve.now/CVE-2014-6530.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect con (no CVSS)
- [CVE-2014-6531](https://cve.now/CVE-2014-6531.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confi (no CVSS)
- [CVE-2014-6532](https://cve.now/CVE-2014-6532.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2014-6533](https://cve.now/CVE-2014-6533.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1 and 6.2 allows remote (no CVSS)
- [CVE-2014-6534](https://cve.now/CVE-2014-6534.md): Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12 (no CVSS)
- [CVE-2014-6535](https://cve.now/CVE-2014-6535.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remot (no CVSS)
- [CVE-2014-6536](https://cve.now/CVE-2014-6536.md): Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect (no CVSS)
- [CVE-2014-6537](https://cve.now/CVE-2014-6537.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6538](https://cve.now/CVE-2014-6538.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6539](https://cve.now/CVE-2014-6539.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2. (no CVSS)
- [CVE-2014-6540](https://cve.now/CVE-2014-6540.md): Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before (no CVSS)
- [CVE-2014-6542](https://cve.now/CVE-2014-6542.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-6543](https://cve.now/CVE-2014-6543.md): Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect (no CVSS)
- [CVE-2014-6544](https://cve.now/CVE-2014-6544.md): Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authentic (no CVSS)
- [CVE-2014-6545](https://cve.now/CVE-2014-6545.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6546](https://cve.now/CVE-2014-6546.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-6547](https://cve.now/CVE-2014-6547.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-6550](https://cve.now/CVE-2014-6550.md): Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers t (no CVSS)
- [CVE-2014-6551](https://cve.now/CVE-2014-6551.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via (no CVSS)
- [CVE-2014-6552](https://cve.now/CVE-2014-6552.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allo (no CVSS)
- [CVE-2014-6553](https://cve.now/CVE-2014-6553.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers t (no CVSS)
- [CVE-2014-6554](https://cve.now/CVE-2014-6554.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticat (no CVSS)
- [CVE-2014-6555](https://cve.now/CVE-2014-6555.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confi (no CVSS)
- [CVE-2014-6557](https://cve.now/CVE-2014-6557.md): Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 al (no CVSS)
- [CVE-2014-6558](https://cve.now/CVE-2014-6558.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 all (no CVSS)
- [CVE-2014-6559](https://cve.now/CVE-2014-6559.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2014-6560](https://cve.now/CVE-2014-6560.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6561](https://cve.now/CVE-2014-6561.md): Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3 (no CVSS)
- [CVE-2014-6562](https://cve.now/CVE-2014-6562.md): Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown (no CVSS)
- [CVE-2014-6563](https://cve.now/CVE-2014-6563.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6564](https://cve.now/CVE-2014-6564.md): Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2014-2472](https://cve.now/CVE-2014-2472.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affe (no CVSS)
- [CVE-2014-2473](https://cve.now/CVE-2014-2473.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affe (no CVSS)
- [CVE-2014-2474](https://cve.now/CVE-2014-2474.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affe (no CVSS)
- [CVE-2014-2475](https://cve.now/CVE-2014-2475.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote atta (no CVSS)
- [CVE-2014-2476](https://cve.now/CVE-2014-2476.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affe (no CVSS)
- [CVE-2014-2478](https://cve.now/CVE-2014-2478.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote att (no CVSS)
- [CVE-2014-4274](https://cve.now/CVE-2014-4274.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, int (no CVSS)
- [CVE-2014-4275](https://cve.now/CVE-2014-4275.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module (no CVSS)
- [CVE-2014-4276](https://cve.now/CVE-2014-4276.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vector (no CVSS)
- [CVE-2014-4277](https://cve.now/CVE-2014-4277.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automate (no CVSS)
- [CVE-2014-4278](https://cve.now/CVE-2014-4278.md): Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, a (no CVSS)
- [CVE-2014-4280](https://cve.now/CVE-2014-4280.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors rel (no CVSS)
- [CVE-2014-4281](https://cve.now/CVE-2014-4281.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allow (no CVSS)
- [CVE-2014-4282](https://cve.now/CVE-2014-4282.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors rel (no CVSS)
- [CVE-2014-4283](https://cve.now/CVE-2014-4283.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automate (no CVSS)
- [CVE-2014-4284](https://cve.now/CVE-2014-4284.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors rel (no CVSS)
- [CVE-2014-4285](https://cve.now/CVE-2014-4285.md): Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to af (no CVSS)
- [CVE-2014-4287](https://cve.now/CVE-2014-4287.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-4288](https://cve.now/CVE-2014-4288.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2014-4289](https://cve.now/CVE-2014-4289.md): Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authentic (no CVSS)
- [CVE-2014-4290](https://cve.now/CVE-2014-4290.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-4291](https://cve.now/CVE-2014-4291.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-4292](https://cve.now/CVE-2014-4292.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-4293](https://cve.now/CVE-2014-4293.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-4294](https://cve.now/CVE-2014-4294.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-4295](https://cve.now/CVE-2014-4295.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-4296](https://cve.now/CVE-2014-4296.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-4297](https://cve.now/CVE-2014-4297.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-4298](https://cve.now/CVE-2014-4298.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-4299](https://cve.now/CVE-2014-4299.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-4300](https://cve.now/CVE-2014-4300.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-4310](https://cve.now/CVE-2014-4310.md): Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2014-6452](https://cve.now/CVE-2014-6452.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-6453](https://cve.now/CVE-2014-6453.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6454](https://cve.now/CVE-2014-6454.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-6455](https://cve.now/CVE-2014-6455.md): Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote (no CVSS)
- [CVE-2014-6456](https://cve.now/CVE-2014-6456.md): Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via (no CVSS)
- [CVE-2014-6457](https://cve.now/CVE-2014-6457.md): Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows rem (no CVSS)
- [CVE-2014-6458](https://cve.now/CVE-2014-6458.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability v (no CVSS)
- [CVE-2014-6459](https://cve.now/CVE-2014-6459.md): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affe (no CVSS)
- [CVE-2014-6460](https://cve.now/CVE-2014-6460.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remot (no CVSS)
- [CVE-2014-6461](https://cve.now/CVE-2014-6461.md): Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.2 allows remote authenticated users to affe (no CVSS)
- [CVE-2014-6462](https://cve.now/CVE-2014-6462.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers t (no CVSS)
- [CVE-2014-6463](https://cve.now/CVE-2014-6463.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-6464](https://cve.now/CVE-2014-6464.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-6465](https://cve.now/CVE-2014-6465.md): Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 al (no CVSS)
- [CVE-2014-6466](https://cve.now/CVE-2014-6466.md): Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidenti (no CVSS)
- [CVE-2014-6467](https://cve.now/CVE-2014-6467.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2014-6468](https://cve.now/CVE-2014-6468.md): Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vecto (no CVSS)
- [CVE-2014-6469](https://cve.now/CVE-2014-6469.md): Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2014-6470](https://cve.now/CVE-2014-6470.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vec (no CVSS)
- [CVE-2014-6471](https://cve.now/CVE-2014-6471.md): Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 (no CVSS)
- [CVE-2014-6472](https://cve.now/CVE-2014-6472.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2. (no CVSS)
- [CVE-2014-6473](https://cve.now/CVE-2014-6473.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unkn (no CVSS)
- [CVE-2014-6474](https://cve.now/CVE-2014-6474.md): Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2014-6475](https://cve.now/CVE-2014-6475.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52, 8.53, and 8.54 allows remot (no CVSS)
- [CVE-2014-6476](https://cve.now/CVE-2014-6476.md): Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deploym (no CVSS)
- [CVE-2014-6478](https://cve.now/CVE-2014-6478.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via (no CVSS)
- [CVE-2014-6479](https://cve.now/CVE-2014-6479.md): Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows re (no CVSS)
- [CVE-2014-6482](https://cve.now/CVE-2014-6482.md): Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote au (no CVSS)
- [CVE-2014-6483](https://cve.now/CVE-2014-6483.md): Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to a (no CVSS)
- [CVE-2014-6484](https://cve.now/CVE-2014-6484.md): Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2014-6485](https://cve.now/CVE-2014-6485.md): Unspecified vulnerability in Oracle Java SE 8u20 and JavaFX 2.2.65 allows remote attackers to affect confidentiality, integrity, and availab (no CVSS)
- [CVE-2014-1829](https://cve.now/CVE-2014-1829.md): Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redire (no CVSS, requests)
- [CVE-2014-1830](https://cve.now/CVE-2014-1830.md): Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header (no CVSS, requests)
- [CVE-2014-2022](https://cve.now/CVE-2014-2022.md): SQL injection vulnerability in includes/api/4/breadcrumbs\_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier allows remote authent (no CVSS)
- [CVE-2014-2576](https://cve.now/CVE-2014-2576.md): plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT\_SSL\_VERIFYHOST check for CN or SAN host name fields, which makes it ea (no CVSS)
- [CVE-2014-2927](https://cve.now/CVE-2014-2927.md): The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before (no CVSS)
- [CVE-2014-3593](https://cve.now/CVE-2014-3593.md): Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via (no CVSS)
- [CVE-2014-3664](https://cve.now/CVE-2014-3664.md): Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ per (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-3681](https://cve.now/CVE-2014-3681.md): Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web scri (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-6312](https://cve.now/CVE-2014-6312.md): Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress (no CVSS)
- [CVE-2014-7206](https://cve.now/CVE-2014-7206.md): The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file. (no CVSS)
- [CVE-2014-8293](https://cve.now/CVE-2014-8293.md): Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2014-8294](https://cve.now/CVE-2014-8294.md): Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2014-8295](https://cve.now/CVE-2014-8295.md): SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid para (no CVSS)
- [CVE-2014-8750](https://cve.now/CVE-2014-8750.md): Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated user (no CVSS)
- [CVE-2014-0558](https://cve.now/CVE-2014-0558.md): Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0564](https://cve.now/CVE-2014-0564.md): Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR bef (no CVSS)
- [CVE-2014-0569](https://cve.now/CVE-2014-0569.md): Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on (no CVSS)
- [CVE-2014-0570](https://cve.now/CVE-2014-0570.md): Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 (no CVSS)
- [CVE-2014-0571](https://cve.now/CVE-2014-0571.md): Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before (no CVSS)
- [CVE-2014-0572](https://cve.now/CVE-2014-0572.md): Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows loc (no CVSS)
- [CVE-2014-1574](https://cve.now/CVE-2014-1574.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31. (no CVSS)
- [CVE-2014-1575](https://cve.now/CVE-2014-1575.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2014-1576](https://cve.now/CVE-2014-1576.md): Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbir (no CVSS)
- [CVE-2014-1577](https://cve.now/CVE-2014-1577.md): The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x b (no CVSS)
- [CVE-2014-1578](https://cve.now/CVE-2014-1578.md): The get\_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers (no CVSS)
- [CVE-2014-1580](https://cve.now/CVE-2014-1580.md): Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive informatio (no CVSS)
- [CVE-2014-1581](https://cve.now/CVE-2014-1581.md): Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x b (no CVSS)
- [CVE-2014-1582](https://cve.now/CVE-2014-1582.md): The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of (no CVSS)
- [CVE-2014-1583](https://cve.now/CVE-2014-1583.md): The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote a (no CVSS)
- [CVE-2014-1584](https://cve.now/CVE-2014-1584.md): The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification erro (no CVSS)
- [CVE-2014-1585](https://cve.now/CVE-2014-1585.md): The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird (no CVSS)
- [CVE-2014-1586](https://cve.now/CVE-2014-1586.md): content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not cons (no CVSS)
- [CVE-2014-4073](https://cve.now/CVE-2014-4073.md): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce insta (no CVSS)
- [CVE-2014-4075](https://cve.now/CVE-2014-4075.md): Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remot (no CVSS)
- [CVE-2014-4113](https://cve.now/CVE-2014-4113.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 (CVSS 7.8, KEV)
- [CVE-2014-4114](https://cve.now/CVE-2014-4114.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (CVSS 7.8, KEV)
- [CVE-2014-4115](https://cve.now/CVE-2014-4115.md): fastfat.sys (aka the FASTFAT driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 does no (no CVSS)
- [CVE-2014-4117](https://cve.now/CVE-2014-4117.md): Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3 (no CVSS)
- [CVE-2014-4121](https://cve.now/CVE-2014-4121.md): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which (no CVSS)
- [CVE-2014-4122](https://cve.now/CVE-2014-4122.md): Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to obtain potentially se (no CVSS)
- [CVE-2014-4123](https://cve.now/CVE-2014-4123.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (CVSS 8.8, KEV)
- [CVE-2014-4124](https://cve.now/CVE-2014-4124.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS)
- [CVE-2014-4126](https://cve.now/CVE-2014-4126.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2014-4127](https://cve.now/CVE-2014-4127.md): Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4128](https://cve.now/CVE-2014-4128.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4129](https://cve.now/CVE-2014-4129.md): Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2014-4130](https://cve.now/CVE-2014-4130.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4132](https://cve.now/CVE-2014-4132.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4133](https://cve.now/CVE-2014-4133.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2014-4134](https://cve.now/CVE-2014-4134.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2014-4137](https://cve.now/CVE-2014-4137.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2014-4138](https://cve.now/CVE-2014-4138.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2014-4140](https://cve.now/CVE-2014-4140.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Intern (no CVSS)
- [CVE-2014-4141](https://cve.now/CVE-2014-4141.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2014-4148](https://cve.now/CVE-2014-4148.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 (CVSS 8.8, KEV)
- [CVE-2014-6942](https://cve.now/CVE-2014-6942.md): The Alisha Marie (Unofficial) (aka com.automon.ay.alisha.marie) application 1.4.0.6 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-6943](https://cve.now/CVE-2014-6943.md): The Konigsleiten (aka com.knigsleiten) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in- (no CVSS)
- [CVE-2014-6944](https://cve.now/CVE-2014-6944.md): The mitfahrgelegenheit.at (aka com.carpooling.android.at) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6945](https://cve.now/CVE-2014-6945.md): The Neeku Naaku Dash Dash (aka com.dakshaa.nndd) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-6946](https://cve.now/CVE-2014-6946.md): The Re:kyu (aka com.appzone619) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid (no CVSS)
- [CVE-2014-6947](https://cve.now/CVE-2014-6947.md): The Archie Comics (aka com.iversecomics.archie.android) application 1.07 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6948](https://cve.now/CVE-2014-6948.md): The TH3 professional Al Mohtarif (aka com.th3professional.almohtarif) application 1.0 for Android does not verify X.509 certificates from SS (no CVSS)
- [CVE-2014-6949](https://cve.now/CVE-2014-6949.md): The Akne Ernahrung (aka com.rareartifact.akneernahrung72010074) application 1.0 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-6950](https://cve.now/CVE-2014-6950.md): The Mt. (no CVSS)
- [CVE-2014-6951](https://cve.now/CVE-2014-6951.md): The OneFile Ignite (aka uk.co.onefile.ignite) application 1.19 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6952](https://cve.now/CVE-2014-6952.md): The Manga Facts (aka app.mangafacts.ar) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in (no CVSS)
- [CVE-2014-3566](https://cve.now/CVE-2014-3566.md): The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man (CVSS 3.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-10-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.