CVEs published in December 2014
653 vulnerabilities, 63 critical, 0 exploited.
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows...7.5 High
- apple safari, iphone os, tvos +2 moreWebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1 allows remote...5.0 Medium
- hpe smart update managerUnspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x...7.2 High
firebirdMageiaUpdated firebird packages fix a remote denial of service vulnerabilityNo score- logintoboggan project logintobogganCross-site scripting (XSS) vulnerability in the Unified Login form in the LoginToboggan module 7...4.3 Medium
- meta tags quick project tags quickOpen redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module...5.5 Medium
- meta tags quick project tags quickCross-site scripting (XSS) vulnerability in the path-based meta tag editing form in the Meta tags...3.5 Low
- logintoboggan project logintobogganThe LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized...4.3 Medium
- zohocorp manageengine opmanager, manageengine it360, manageengine social it plus +2 moreMultiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx)...7.5 High
- scalix web accessXML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows...6.4 Medium
- intelliants subrionSubrion CMS Cross-site scripting in search4.3 Medium
- icecastIcecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is...4.6 Medium
- powerdns recursor, debian linux +1 morePowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers...5.0 Medium
- apache strutsCross-Site Request Forgery in Apache Struts6.8 Medium
- apache cloudstackApache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass...5.0 Medium
xorg-serverUbuntuxorg-server, xorg-server-lts-trusty vulnerabilitiesNo score- yourls, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote...4.3 Medium
- f5 big-iq cloud, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0...4.3 Medium
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 moreiterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows...4.3 Medium
- digicom dg-5514t adsl router firmwareDigicom DG-5514T ADSL router with firmware 3.2 generates predictable session IDs, which allows...10.0 High
- nvidia gpu driverThe NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340...7.5 High
- scalix web accessCross-site scripting (XSS) vulnerability in the mail administration login panel in Scalix Web...4.3 Medium
- teeworldsengine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory...6.4 Medium
- ffmpegThe ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg before 2.1.6, 2.2.x through...5.0 Medium
- ffmpegThe raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2...7.5 High
- ffmpegThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x...7.5 High
- ffmpegThe mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3...7.5 High
- mantisbtCross-site scripting (XSS) vulnerability in admin/copy_field.php in MantisBT before 1.2.18 allows...4.3 Medium
- unrtf project unrtfUnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash...7.5 High
- unrtf project unrtf, debian linux, fedoraproject fedora +1 more +3 moreUnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary...7.5 High
- xen, opensuse +1 moreXen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and...4.7 Medium
- xen, opensuse +1 morecommon/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which...4.4 Medium
php-pear-HTML_AJAXMageiaUpdated php-pear-HTML_AJAX package fixes security vulnerabilityNo score- mozilla firefox, seamonkey +1 moreThe structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does...4.3 Medium
- mozilla firefox, seamonkey +1 moreThe Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey...4.3 Medium
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreMultiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users...3.6 Low
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and...7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and...7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreHeap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24...7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows...7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote...7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote...5.0 Medium
- x.org x serverX.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote...6.5 Medium
- tp-link tl-wr740n, tl-wr740n firmware +1 moreTP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build...5.0 Medium
- robotstatsMultiple cross-site scripting (XSS) vulnerabilities in admin/robots.lib.php in RobotStats 1.0...4.3 Medium
- Show moreLoading…