# CVEs published 2014-11-14

7 CVEs were published on November 14, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3689](https://cve.now/CVE-2014-3689.md): The vmware-vga driver (hw/display/vmware\_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via u (no CVSS)
- [CVE-2014-7815](https://cve.now/CVE-2014-7815.md): The set\_pixel\_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes\_per\_pixel v (no CVSS)
- [CVE-2014-8567](https://cve.now/CVE-2014-8567.md): The mod\_auth\_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout (no CVSS)
- [CVE-2014-5424](https://cve.now/CVE-2014-5424.md): Rockwell Automation Connected Components Workbench (CCW) before 7.00.00 allows remote attackers to cause a denial of service (application cr (no CVSS)
- [CVE-2014-7246](https://cve.now/CVE-2014-7246.md): The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-ser (no CVSS)
- [CVE-2014-7878](https://cve.now/CVE-2014-7878.md): The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived from the Seed Node im (no CVSS)
- [CVE-2014-7991](https://cve.now/CVE-2014-7991.md): The Remote Mobile Access Subsystem in Cisco Unified Communications Manager (CM) 10.0(1) and earlier does not properly validate the Subject A (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.