# CVEs published 2014-11-15

11 CVEs were published on November 15, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3158](https://cve.now/CVE-2014-3158.md): Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privilege (no CVSS)
- [CVE-2014-3500](https://cve.now/CVE-2014-3500.md): Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL. (no CVSS)
- [CVE-2014-3501](https://cve.now/CVE-2014-3501.md): Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScrip (no CVSS)
- [CVE-2014-3502](https://cve.now/CVE-2014-3502.md): Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL with a crafted URI sch (no CVSS)
- [CVE-2014-5388](https://cve.now/CVE-2014-5388.md): Off-by-one error in the pci\_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sen (no CVSS)
- [CVE-2014-8566](https://cve.now/CVE-2014-8566.md): The mod\_auth\_mellon module before 0.8.1 allows remote attackers to obtain sensitive information or cause a denial of service (segmentation f (no CVSS)
- [CVE-2014-3707](https://cve.now/CVE-2014-3707.md): The curl\_easy\_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT\_COPYPOSTFIELDS option, does not properly co (no CVSS)
- [CVE-2014-4975](https://cve.now/CVE-2014-4975.md): Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specif (no CVSS)
- [CVE-2014-7248](https://cve.now/CVE-2014-7248.md): Cross-site scripting (XSS) vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering (no CVSS)
- [CVE-2014-7997](https://cve.now/CVE-2014-7997.md): The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful l (no CVSS)
- [CVE-2014-7998](https://cve.now/CVE-2014-7998.md): Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cause a denial of servic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.