Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
December

CVEs published in December 2014

653 vulnerabilities, 63 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

antiword project antiwordBuffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to...CVE-2014-8123Fix available5.0 MediumDecember 5, 2014
nagioslib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a...CVE-2014-4703Public exploit2.1 LowDecember 5, 2014
nagiosThe check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive...CVE-2014-47022.1 LowDecember 5, 2014
nagiosThe check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive...CVE-2014-47012.1 LowDecember 5, 2014
apache hadoopImproper Link Resolution Before File Access in Apache HadoopCVE-2014-3627Fix available5.0 MediumDecember 5, 2014
redhat enterprise virtualizationThe rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL...CVE-2014-3561Fix available2.1 LowDecember 5, 2014
huawei p2-6011 firmwareThe hx170dec device driver in Huawei P2-6011 before V100R001C00B043 allows local users to read...CVE-2014-22737.2 HighDecember 5, 2014
phpmyadminlibraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x...CVE-2014-9218Public exploitFix availableEPSS 11.5%5.0 MediumDecember 5, 2014
pyyaml libyamlscanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl,...CVE-2014-9130Fix availableEPSS 13.2%5.0 MediumDecember 5, 2014
pbboardSQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard...CVE-2014-9215Public exploit7.5 HighDecember 5, 2014
altitude unified customer interactionMultiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified...CVE-2014-92124.3 MediumDecember 5, 2014
technicolor td5130 router firmwareTechnicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary...CVE-2014-9144Public exploit7.5 HighDecember 5, 2014
technicolor td5130 router firmwareOpen redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote...CVE-2014-9143Public exploit4.3 MediumDecember 5, 2014
technicolor td5130 router firmwareCross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV...CVE-2014-9142Public exploit4.3 MediumDecember 5, 2014
cminds cm download managerCross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin...CVE-2014-91296.8 MediumDecember 5, 2014
nextendweb nextend facebook connectCross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook...CVE-2014-8800Public exploit4.3 MediumDecember 5, 2014
zohocorp manageengine password manager pro, manageengine it360 +1 moreSQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro ...CVE-2014-3997Public exploitEPSS 13.1%7.5 HighDecember 5, 2014
manageengine desktop central, it360, password manager pro +2 moreSQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central ...CVE-2014-3996Public exploitEPSS 38.4%7.5 HighDecember 5, 2014
maas Ubuntumaas regressionUSN-2431-2Fix availableNo scoreDecember 4, 2014
zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreMultiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3...CVE-2014-7868Public exploitEPSS 73.3%7.5 HighDecember 4, 2014
zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreSQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus...CVE-2014-7867EPSS 39.9%7.5 HighDecember 4, 2014
zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreDirectory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager...CVE-2014-6036Public exploitEPSS 36.3%6.4 MediumDecember 4, 2014
zohocorp manageengine opmanagerDirectory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11...CVE-2014-6035Public exploitEPSS 28.8%7.5 HighDecember 4, 2014
zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreDirectory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe...CVE-2014-6034Public exploitEPSS 79.0%5.0 MediumDecember 4, 2014
zohocorp manageengine netflow analyzer, manageengine it360 +1 moreDirectory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow...CVE-2014-5446Public exploitEPSS 54.7%5.0 MediumDecember 4, 2014
zohocorp manageengine netflow analyzer, manageengine it360 +1 moreMultiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6...CVE-2014-5445Public exploitEPSS 98.0%5.0 MediumDecember 4, 2014
jasper project jasperMultiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn...CVE-2014-9029Fix availableEPSS 18.2%7.5 HighDecember 4, 2014
qemuHeap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2...CVE-2014-8106Fix available4.6 MediumDecember 4, 2014
websitebakerMultiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers...CVE-2014-9243Public exploit4.3 MediumDecember 3, 2014
websitebakerSQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote...CVE-2014-9242Public exploit7.5 HighDecember 3, 2014
mybbMultiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1...CVE-2014-9241Public exploit4.3 MediumDecember 3, 2014
mybbSQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows...CVE-2014-9240Public exploit7.5 HighDecember 3, 2014
invisioncommunity invision power boardSQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in...CVE-2014-92397.5 HighDecember 3, 2014
d-link dcs-2103 hd cube network camera firmwareD-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation...CVE-2014-92385.0 MediumDecember 3, 2014
proticaretSQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute...CVE-2014-9237Public exploit7.5 HighDecember 3, 2014
zophCross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes...CVE-2014-9236Public exploit4.3 MediumDecember 3, 2014
zophMultiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier...CVE-2014-9235Public exploit6.5 MediumDecember 3, 2014
d-link dcs-2103 hd cube network camera firmwareDirectory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with...CVE-2014-92345.0 MediumDecember 3, 2014
huawei honor cube wireless router ws860s, honor cube wireless router ws860s firewall +1 moreUnrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before...CVE-2014-913410.0 HighDecember 3, 2014
canto cursescanto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute...CVE-2013-74167.5 HighDecember 3, 2014
mediawikiThe wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through...CVE-2014-9277Fix available7.5 HighDecember 3, 2014
mediawikiCross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in...CVE-2014-92765.1 MediumDecember 3, 2014
sddm project sddm, fedoraproject fedora +1 moreSimple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges...CVE-2014-7272Fix available7.8 HighDecember 3, 2014
sddm project sddm, fedoraproject fedora +1 moreSimple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm"...CVE-2014-7271Fix available7.8 HighDecember 3, 2014
mozilla network security servicesThe definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services ...CVE-2014-1569Fix available7.5 HighDecember 3, 2014
modx revolutionMODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for...CVE-2014-8775Public exploit5.0 MediumDecember 3, 2014
modx revolutionCross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2...CVE-2014-8774Public exploit4.3 MediumDecember 3, 2014
modx revolutionMODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request...CVE-2014-8773Public exploit6.8 MediumDecember 3, 2014
x3cms x3 cmsCross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1...CVE-2014-87723.5 LowDecember 3, 2014
x3cms x3 cmsMultiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and...CVE-2014-87716.8 MediumDecember 3, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open