# CVEs published 2014-11-30

13 CVEs were published on November 30, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8958](https://cve.now/CVE-2014-8958.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allo (no CVSS)
- [CVE-2014-8959](https://cve.now/CVE-2014-8959.md): Directory traversal vulnerability in libraries/gis/GIS\_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before (no CVSS)
- [CVE-2014-8960](https://cve.now/CVE-2014-8960.md): Cross-site scripting (XSS) vulnerability in libraries/error\_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14. (no CVSS)
- [CVE-2014-8961](https://cve.now/CVE-2014-8961.md): Directory traversal vulnerability in libraries/error\_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4 (no CVSS)
- [CVE-2014-9150](https://cve.now/CVE-2014-9150.md): Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a s (no CVSS)
- [CVE-2010-5313](https://cve.now/CVE-2010-5313.md): Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS cr (no CVSS)
- [CVE-2014-3688](https://cve.now/CVE-2014-3688.md): The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by trigg (no CVSS)
- [CVE-2014-7841](https://cve.now/CVE-2014-7841.md): The sctp\_process\_param function in net/sctp/sm\_make\_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is use (no CVSS)
- [CVE-2014-7842](https://cve.now/CVE-2014-7842.md): Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) v (no CVSS)
- [CVE-2014-7843](https://cve.now/CVE-2014-7843.md): The \_\_clear\_user function in arch/arm64/lib/clear\_user.S in the Linux kernel before 3.17.4 on the ARM64 platform allows local users to cause (no CVSS)
- [CVE-2014-8884](https://cve.now/CVE-2014-8884.md): Stack-based buffer overflow in the ttusbdecfe\_dvbs\_diseqc\_send\_master\_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux (no CVSS)
- [CVE-2014-8989](https://cve.now/CVE-2014-8989.md): The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which (no CVSS)
- [CVE-2014-9090](https://cve.now/CVE-2014-9090.md): The do\_double\_fault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.