CVEs published in December 2014
653 vulnerabilities, 63 critical, 0 exploited.
- rpm, debian linux +1 moreRace condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a...7.6 High
freetype2MageiaUpdated freetype2 packages fix security vulnerabilityNo scorenfs-utilsDebiannfs-utils - security updateNo score- honeywell opos suiteMultiple stack-based buffer overflows in (1) HWOPOSScale.ocx and (2) HWOPOSSCANNER.ocx in...7.5 High
- cisco prime security managerMultiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Prime Security...4.3 Medium
- c-icap project c-icapMultiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause...5.0 Medium
- c-icap project c-icapThe parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial...5.0 Medium
- emc rsa archer egrcCross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows...4.3 Medium
- emc isilon insightiqCross-site scripting (XSS) vulnerability in EMC Isilon InsightIQ 2.x and 3.x before 3.1 allows...4.3 Medium
- emc rsa authentication managerOpen redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows...5.8 Medium
- ibm db2, db2 connect +1 moreIBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX,...4.0 Medium
- ibm db2IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before...4.0 Medium
- digium asterisk, certified asterisk +1 moreDouble free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open...5.0 Medium
- k7computing k7av sentry device driverStack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver...7.2 High
- k7computing k7av sentry device driverThe K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in...4.9 Medium
- bittorrentThe web interface in BitTorrent allows remote attackers to execute arbitrary commands by...6.8 Medium
- pingidentity pingfederateOpen redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6...6.4 Medium
- k7computing k7firewall packet driverHeap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver)...7.2 High
- dockerAccess Restriction Bypass in Docker5.0 Medium
- dockerArbitrary Code Execution in Docker7.5 High
- juniper mobile system software, ringmaster, smartpass +2 moreJuniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3...2.9 Low
- redhat libvirtThe remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used,...4.3 Medium
- python, apple mac os x +1 moreThe HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in...5.8 Medium
- bmc track-it\!BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by...5.0 Medium
- linphaCross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject arbitrary...4.3 Medium
- mantisbtcore/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running...5.8 Medium
- ibm cognos business intelligenceCross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1...3.5 Low
- ibm websphere datapower xc10 appliance firmwareThe IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated...4.0 Medium
- linux kernelThe mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux...7.5 High
- bsd, freebsd, netbsd +1 more +3 moreThe TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly...5.0 Medium
- ibm ibm rational lifecycle integration adapter for windchillSession fixation vulnerability in IBM Rational Lifecycle Integration Adapter for Windchill 1.x...4.3 Medium
- ultrapop i-httpdCross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject...4.3 Medium
- ultrapop i-httpdCross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows...4.3 Medium
- ultrapop i-httpdCross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject...4.3 Medium
- ultrapop i-httpdThe Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i...7.5 High
- chyrpMultiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users...3.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1...3.5 Low
- ibm websphere datapower xc10 appliance firmwareCross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2...3.5 Low
- ibm websphere datapower xc10 appliance firmwareThe IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain...2.1 Low
- ibm websphere datapower xc10 appliance firmwareCross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1...6.0 Medium
- sap sql anywhereStack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers...7.5 High
- trihedral vtscada, trihedral engineering vts +1 moreTrihedral Engineering Limited VTScada Integer Overflow7.8
- vmware vcloud automation centerThe VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through...9.0 High
- vmware airwatchAirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to...4.0 Medium
- redhat jboss enterprise portal platformCross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1,...4.3 Medium
- joyent node.jsPotential for Script Injection in syntax-error10.0 High
- ibm operational decision manager, websphere ilog jrules, websphere operational decision management +2 moreThe Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules...5.0 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...2.1 Low
- isc bindThe GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a...5.4 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or...9.3 High
- Show moreLoading…