CVEs published in December 2014
653 vulnerabilities, 63 critical, 0 exploited.
- contenido contendio Multiple cross-site scripting (XSS) vulnerabilities in cms/front_content.php in Contenido before... 2.6 Low
- s9y serendipity Multiple cross-site scripting (XSS) vulnerabilities in templates/2k11/admin/overview.inc.tpl in... 4.3 Medium
- smoothwall Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3... 6.8 Medium
- smoothwall Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall... 4.3 Medium
- smoothwall Multiple cross-site scripting (XSS) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow... 4.3 Medium
- db backup project backup Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for... 5.0 Medium
- doorkeeper project doorkeeper Doorkeeper vulnerable to Cross-site Request Forgery 6.8 Medium
- smoothwall Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin... 6.8 Medium
- smoothwall Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo... 4.3 Medium
- wp limit posts automatically project limit posts automatically Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7... 6.8 Medium
- wp unique article header image project unique article header image Multiple cross-site request forgery (CSRF) vulnerabilities in the Wp Unique Article Header Image... 6.8 Medium
- tweetscribe project tweetscribe Cross-site request forgery (CSRF) vulnerability in the TweetScribe plugin 1.1 and earlier for... 6.8 Medium
- twitter liveblog project liveblog Cross-site request forgery (CSRF) vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier... 6.8 Medium
- twimp-wp project twimp-wp Cross-site request forgery (CSRF) vulnerability in the twimp-wp plugin for WordPress allows... 6.8 Medium
- simpleflickr project simpleflickr Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleFlickr plugin 3.0.3 and... 6.8 Medium
- simplelife project simplelife Multiple cross-site request forgery (CSRF) vulnerabilities in the Simplelife plugin 1.2 and... 6.8 Medium
- pwgrandom project pwgrandom Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and... 6.8 Medium
- post to twitter project to twitter Multiple cross-site request forgery (CSRF) vulnerabilities in the Post to Twitter plugin 0.7 and... 6.8 Medium
- pictobrowser project pictobrowser Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin... 6.8 Medium
- gslideshow project gslideshow Multiple cross-site request forgery (CSRF) vulnerabilities in the gSlideShow plugin 0.1 and... 6.8 Medium
- twiki Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6... 4.3 Medium
- twiki Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to... 4.3 Medium
- minibb bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which... 7.5 High
- jce-tech video niche script Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP Video Script (aka... 4.3 Medium
-
plasma-nmMageia Updated plasma-nm packages add openvpn certificate verification No score - php ** DISPUTED ** The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in... 7.5 High
- php, apple mac os x +1 more Double free vulnerability in the zend_ts_hash_graceful_destroy function in zend_ts_hash.c in the... 7.5 High
- imagemagick, canonical ubuntu linux, opensuse leap +3 more +5 more coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application... 7.5 High
- imagemagick, canonical ubuntu linux, novell leap +7 more +9 more Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service ... 5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 more ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). 7.5 High
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 more Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource... 7.5 High
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 more The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). 7.5 High
- imagemagick, canonical ubuntu linux, opensuse leap +6 more +8 more Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory... 7.5 High
- imagemagick, canonical ubuntu linux, opensuse +7 more +9 more The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. 9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 more Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote... 9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 more The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a... 5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse +7 more +9 more The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause... 5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 more The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to... 9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 more The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have... 9.8 Critical
- imagemagick ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access)... 5.5 Medium
- imagemagick magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of... 7.5 High
- imagemagick magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash). 5.5 Medium
- imagemagick coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of... 6.5 Medium
- imagemagick ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. 5.5 Medium
- imagemagick Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. 7.8 High
- imagemagick Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. 7.8 High
- imagemagick Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. 7.8 High
- imagemagick coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted... 8.8 High
- imagemagick coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted... 8.8 High
- imagemagick coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds... 6.5 Medium
- Show olderLoading…