CVEs published in December 2014
653 vulnerabilities, 63 critical, 0 exploited.
- robotstatsSQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats...7.5 High
- phpmyrecipes project phpmyrecipesSQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to...7.5 High
- hierarchical select project selectMultiple cross-site scripting (XSS) vulnerabilities in the Hierarchical Select module 6.x-3.x...3.5 Low
- guruperl advertise with pleasure\!SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional (aka AWP PRO) 6...7.5 High
- globiz solutions snowfox content management systemCross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows remote...6.8 Medium
- globiz solutions snowfox content management systemOpen redirect vulnerability in modules/system/controller/selectlanguage.class.php in Snowfox CMS...5.8 Medium
- reality66 cart66 liteSQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in...6.5 Medium
- mantisbtThe current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18...7.5 High
- mantisbtThe print_test_result function in admin/upgrade_unattended.php in MantisBT 1.1.0a3 through 1.2.x...5.0 Medium
- debian hivex, opensuse, redhat enterprise linux desktop +3 more +5 morelib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain...4.6 Medium
- mantisbtCross-site scripting (XSS) vulnerability in the projax_array_serialize_for_autocomplete function...4.3 Medium
- autodesk design reviewThe AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows...6.8 Medium
- ptc isoviewHeap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute...6.8 Medium
- samsung smart viewerThe STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable,...6.8 Medium
- samsung smartviewerStack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung...6.8 Medium
- 3s pocketnet tech video management softwareMultiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S...6.8 Medium
- open-emr openemrMultiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote...6.5 Medium
- f5 big-ipCross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application...4.3 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2...4.3 Medium
- torch gmbh graylog2Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards.5.0 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before...4.3 Medium
- hikvision dvr ds-7204 firmwareBuffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and...7.5 High
- emc rsa adaptive authentication on-premiseRSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a...5.0 Medium
- vmware vcenter server applianceCross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before...4.3 Medium
- emerson dl 8000 remote terminal unit, dl 8000 remote terminal unit firmware, roc 800 remote terminal unit +3 more +5 moreEmerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2...10.0 High
- erlang erlang\/otpMultiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context...7.5 High
- plex media serverPlex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist,...7.5 High
- entrypass n5200 active network control panelEntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and...7.8 High
- alfresco community editionServer-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management...5.0 Medium
- alfrescoServer-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community...6.4 Medium
- alfrescoCross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management...6.8 Medium
- entrypass n5200 active network control panelEntryPass N5200 Active Network Control Panel does not properly restrict access, which allows...7.8 High
- mantisbtMantisBT before 1.2.18 uses the public_key parameter value as the key to the CAPTCHA answer,...5.0 Medium
- openbsd opensshThe OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a...4.0 Medium
- yokogawa fast\/toolsXML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation...3.2 Low
- ibm tivoli endpoint manager mobile device managementIBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret...9.3 High
- elipse e3, power, scada +2 moreDNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6...5.0 Medium
- emc documentum content serverEMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote...9.0 High
- ibm systems directorUnspecified vulnerability in the Security component in IBM Systems Director 6.3.0 through 6.3.5...2.1 Low
- jrss widget project widgetServer-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and...5.8 Medium
- creative minds cm download managerThe alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM...10.0 High
- square enix co ltd kaku san sei million aruthurSQUARE ENIX Co., Ltd. Kaku-San-Sei Million Arthur before 2.25 for Android stores "product...5.0 Medium
- kent-web clip boardCross-site scripting (XSS) vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running...4.3 Medium
- iij seil b1 firmware, seil plus, seil plus firmware +5 more +7 moreThe (1) PPP Access Concentrator (PPPAC) and (2) Dial-Up Networking Internet Initiative Japan Inc....7.8 High
- iij seil b1 firmware, seil x1 firmware, seil x2 firmware +1 more +3 moreInternet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50...7.5 High
- fujitsu arrows me f-11dUnspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or...4.6 Medium
- fujitsu arrows kiss f-03d, arrows tab lte f-01d, f-12c +1 more +3 moreFUJITSU F-12C, ARROWS Tab LTE F-01D, ARROWS Kiss F-03D, and REGZA Phone T-01D for Android allows...7.2 High
- disney interactive mobile, fujitsu arrows tab lte f-01d, arrows x lte f-05d +3 more +5 moreMultiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile...4.6 Medium
- lg l-03e, l-04d, l-09c +2 moreLG Electronics Mobile WiFi router L-09C, L-03E, and L-04D does not restrict access to the web...5.0 Medium
- lsyncd project lsyncd, debian linux, fedoraproject fedora +2 moredefault-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary...7.5 High
- Show moreLoading…