# CVEs published 2014-11-07

21 CVEs were published on November 7, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3640](https://cve.now/CVE-2014-3640.md): The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by send (no CVSS)
- [CVE-2014-3693](https://cve.now/CVE-2014-3693.md): Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote at (no CVSS)
- [CVE-2014-5037](https://cve.now/CVE-2014-5037.md): Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensit (no CVSS)
- [CVE-2014-5038](https://cve.now/CVE-2014-5038.md): Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obt (no CVSS)
- [CVE-2014-6620](https://cve.now/CVE-2014-6620.md): Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject a (no CVSS)
- [CVE-2014-6623](https://cve.now/CVE-2014-6623.md): Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows (no CVSS)
- [CVE-2014-8510](https://cve.now/CVE-2014-8510.md): The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to re (no CVSS)
- [CVE-2014-8580](https://cve.now/CVE-2014-8580.md): Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10. (no CVSS)
- [CVE-2014-2177](https://cve.now/CVE-2014-2177.md): The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and be (no CVSS)
- [CVE-2014-2178](https://cve.now/CVE-2014-2178.md): Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, befor (no CVSS)
- [CVE-2014-2179](https://cve.now/CVE-2014-2179.md): The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows rem (no CVSS)
- [CVE-2014-3437](https://cve.now/CVE-2014-3437.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or sen (no CVSS)
- [CVE-2014-3438](https://cve.now/CVE-2014-3438.md): Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before (no CVSS)
- [CVE-2014-3439](https://cve.now/CVE-2014-3439.md): ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspec (no CVSS)
- [CVE-2014-4627](https://cve.now/CVE-2014-4627.md): SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to execute arbitrary SQL co (no CVSS)
- [CVE-2014-5430](https://cve.now/CVE-2014-5430.md): Untrusted search path vulnerability in ABB RobotStudio 5.6x before 5.61.02 and Test Signal Viewer 1.5 allows local users to gain privileges (no CVSS)
- [CVE-2014-7988](https://cve.now/CVE-2014-7988.md): The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive informa (no CVSS)
- [CVE-2014-7989](https://cve.now/CVE-2014-7989.md): Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) tracerou (no CVSS)
- [CVE-2014-7990](https://cve.now/CVE-2014-7990.md): Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge res (no CVSS)
- [CVE-2014-8671](https://cve.now/CVE-2014-8671.md): Cross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote attackers to inject arbit (no CVSS)
- [CVE-2014-8672](https://cve.now/CVE-2014-8672.md): Cross-site scripting (XSS) vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remote attackers to injec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.