Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
December

CVEs published in December 2014

653 vulnerabilities, 63 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

symantec web gatewayThe management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote...CVE-2014-7285Public exploitEPSS 50.3%6.5 MediumDecember 17, 2014
emc documentum content serverEMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1...CVE-2014-46269.0 HighDecember 17, 2014
file project file, canonical ubuntu linux, freebsd +1 more +3 moreThe ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of...CVE-2014-8116Fix available5.0 MediumDecember 17, 2014
cisco isb8320-e high-definition ip-only dvrThe Disaster Recovery (DRA) feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows...CVE-2014-80064.3 MediumDecember 17, 2014
ibm business process managerDirectory traversal vulnerability in an export function in the Process Center in IBM Business...CVE-2014-61824.0 MediumDecember 17, 2014
ibm business process managerThe import/export functionality in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0...CVE-2014-48446.5 MediumDecember 17, 2014
broadcom release automationSQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation)...CVE-2014-82486.5 MediumDecember 16, 2014
broadcom release automationCross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release...CVE-2014-82474.3 MediumDecember 16, 2014
broadcom release automationCross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA...CVE-2014-82466.8 MediumDecember 16, 2014
ibm business process manager, websphere enterprise service bus, websphere process server +2 moreIBM WebSphere Process Server 7.0, WebSphere Enterprise Service Bus 7.0, and Business Process...CVE-2014-61764.3 MediumDecember 16, 2014
manageengine netflow analyzerDirectory traversal vulnerability in the CollectorConfInfoServlet servlet in ManageEngine NetFlow...CVE-2014-937310.0 HighDecember 16, 2014
manageengine password manager proDirectory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password...CVE-2014-93726.4 MediumDecember 16, 2014
zohocorp manageengine desktop centralThe NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to...CVE-2014-9371EPSS 19.1%10.0 HighDecember 16, 2014
dockerDirectory Traversal in DockerCVE-2014-9358Fix available6.4 MediumDecember 16, 2014
dockerArbitrary Code ExecutionCVE-2014-9357Fix available10.0 HighDecember 16, 2014
sixapart movable type, debian linux +1 moreSQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5...CVE-2014-90577.5 HighDecember 16, 2014
goywp webpressMultiple cross-site scripting (XSS) vulnerabilities in goYWP WebPress 13.00.06 allow remote...CVE-2014-87514.3 MediumDecember 16, 2014
zoneo-soft phptrafficaSQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier...CVE-2014-83407.5 HighDecember 16, 2014
splunkCross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1...CVE-2014-54664.3 MediumDecember 16, 2014
safenet-inc safenet authentication service outlook web access agentDirectory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access...CVE-2014-53597.8 HighDecember 16, 2014
malwarebytes anti-exploit, anti-malware +1 moreThe upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and...CVE-2014-4936Public exploitEPSS 16.8%9.3 HighDecember 16, 2014
firebirdsql firebird, canonical ubuntu linux, debian linux +1 more +3 moreThe xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote...CVE-2014-9323Fix available5.0 MediumDecember 16, 2014
pcre, fedoraproject fedora, mariadb +8 more +10 moreHeap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of...CVE-2014-8964Fix available5.0 MediumDecember 16, 2014
mit kerberos, kerberos 5 +1 moreplugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x...CVE-2014-5354Fix available3.5 LowDecember 16, 2014
mit kerberos 5, canonical ubuntu linux, debian linux +9 more +11 moreThe krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap...CVE-2014-5353Fix available3.5 LowDecember 16, 2014
zenoss coreZenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes...CVE-2014-93866.8 MediumDecember 15, 2014
zenoss coreCross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote...CVE-2014-93856.8 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might...CVE-2014-92522.1 LowDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for...CVE-2014-92515.0 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the...CVE-2014-92505.0 MediumDecember 15, 2014
zenoss coreThe default configuration of Zenoss Core before 5 allows remote attackers to read or modify...CVE-2014-92497.5 HighDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote...CVE-2014-92485.0 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user...CVE-2014-92474.0 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by...CVE-2014-92455.0 MediumDecember 15, 2014
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute...CVE-2014-8967EPSS 12.4%6.8 MediumDecember 15, 2014
google androidAndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the...CVE-2014-8610Public exploit3.3 LowDecember 15, 2014
google androidThe addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the...CVE-2014-8609Public exploit7.2 HighDecember 15, 2014
google androidMultiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src...CVE-2014-8507Public exploit7.5 HighDecember 15, 2014
google androidluni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation...CVE-2014-7911Public exploitEPSS 23.5%7.2 HighDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which...CVE-2014-6261EPSS 19.7%9.3 HighDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 does not require a password for modifying the pager command string,...CVE-2014-62606.8 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which...CVE-2014-62595.0 MediumDecember 15, 2014
zenoss coreAn unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial...CVE-2014-62585.0 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by...CVE-2014-62575.0 MediumDecember 15, 2014
zenoss coreZenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and...CVE-2014-62567.5 HighDecember 15, 2014
zenoss coreOpen redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote...CVE-2014-62556.4 MediumDecember 15, 2014
zenoss coreMultiple cross-site scripting (XSS) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote...CVE-2014-62544.3 MediumDecember 15, 2014
zenoss coreMultiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow...CVE-2014-62536.8 MediumDecember 15, 2014
apache http server, apple mac os x, os x server +1 more +3 moreThe handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP...CVE-2014-3583Fix availableEPSS 10.8%5.0 MediumDecember 15, 2014
rpmInteger overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a...CVE-2014-8118Fix available10.0 HighDecember 14, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open