CVEs published November 13, 2014
9 CVEs were published on November 13, 2014: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- dweeves/magmi
- 1
Medium, low and unrated 9
- CVE-2014-3602Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /p
- CVE-2014-3674Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network reso
- CVE-2014-7823The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MI
- CVE-2014-8359Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and
- CVE-2014-8476The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users
- CVE-2014-8554SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remot
- CVE-2014-8557Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to inject arbitrary web s
- CVE-2014-8564The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows r
- CVE-2014-8770Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magentdweeves/magmi