CVEs published November 5, 2014
19 CVEs were published on November 5, 2014: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Accuenergy Acuvim II AXN-NET Ethernet module
- 2
- Meinberg Radio Clocks LANTIME M-Series
- 1
- Nordex Control 2 (NC2) SCADA
- 1
- phpmyadmin/phpmyadmin
- 1
Medium, low and unrated 19
- CVE-2014-8622Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users
- CVE-2014-2373Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side SecurityAccuenergy Acuvim II AXN-NET Ethernet module
- CVE-2014-2374Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side SecurityAccuenergy Acuvim II AXN-NET Ethernet module
- CVE-2014-3710The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note
- CVE-2014-4769IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 allows remote authenticated users to read arbitrary files or send TCP re
- CVE-2014-4810IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile serv
- CVE-2014-4834IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 does not properly detect recursion during entity expansion, which allows
- CVE-2014-5408Nordex NC2 Cross-site ScriptingNordex Control 2 (NC2) SCADA
- CVE-2014-5417Meinberg Radio Clocks LANTIME M-SeriesMeinberg Radio Clocks LANTIME M-Series
- CVE-2014-8326Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 alphpmyadmin/phpmyadmin
- CVE-2014-8541libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whet
- CVE-2014-8542libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a
- CVE-2014-8543libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows
- CVE-2014-8544libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial o
- CVE-2014-8545libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which a
- CVE-2014-8546Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access)
- CVE-2014-8547libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of servi
- CVE-2014-8548Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or p
- CVE-2014-8549libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a