Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
December

CVEs published in December 2014

653 vulnerabilities, 63 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

unitedplanet intrexxCross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx...CVE-2014-20264.3 MediumDecember 19, 2014
pwgen project pwgenPassword Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom...CVE-2013-4442Fix available5.0 MediumDecember 19, 2014
pwgen project pwgenPassword Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it...CVE-2013-4440Fix available5.0 MediumDecember 19, 2014
linux-lts-utopic Ubuntulinux-lts-utopic regressionUSN-2447-2Fix availableNo scoreDecember 19, 2014
strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service ...CVE-2014-9221Fix available5.0 MediumDecember 19, 2014
dell idrac6 modular, idrac6 monolithic, idrac7 +1 more +3 moreThe IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and...CVE-2014-8272Public exploitEPSS 19.2%5.0 MediumDecember 19, 2014
ricksoft wbs gantt-chartCross-site scripting (XSS) vulnerability in the data-export feature in the Ricksoft WBS Gantt...CVE-2014-72684.3 MediumDecember 19, 2014
ricksoft wbs gantt-chartCross-site scripting (XSS) vulnerability in the output-page generator in the Ricksoft WBS Gantt...CVE-2014-72673.5 LowDecember 19, 2014
alliedtelesis ar440s, ar441s, ar442s +45 more +47 moreBuffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT...CVE-2014-724910.0 HighDecember 19, 2014
tsutayaThe TSUTAYA application 5.3 and earlier for Android allows remote attackers to execute arbitrary...CVE-2014-72416.8 MediumDecember 19, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0...CVE-2014-89024.3 MediumDecember 19, 2014
cisco ironport email security appliancesThe Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of...CVE-2014-80165.0 MediumDecember 19, 2014
ibm websphere portalIBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages...CVE-2014-61934.9 MediumDecember 19, 2014
ibm business process managerCross-site scripting (XSS) vulnerability in the Process Inspector in IBM Business Process Manager...CVE-2014-61733.5 LowDecember 19, 2014
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1...CVE-2014-61714.3 MediumDecember 19, 2014
ibm rational quality managerCross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x through 2.0.1.1, 3.x...CVE-2014-48013.5 LowDecember 19, 2014
apple xcode, eclipse egit, jgit +3 more +5 moreJGit Improper Input Validation vulnerabilityCVE-2014-9390Public exploitFix availableEPSS 75.6%9.8 CriticalDecember 19, 2014
ntpThe receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after...CVE-2014-9296Fix availableEPSS 16.2%5.0 MediumDecember 19, 2014
redhat libvirt, canonical ubuntu linux, mageia +5 more +7 moreThe (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c...CVE-2014-8136Fix available2.1 LowDecember 19, 2014
gpartedGParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via...CVE-2014-7208Public exploitFix available7.2 HighDecember 19, 2014
ibm db2IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before...CVE-2014-89014.0 MediumDecember 18, 2014
ibm websphere application serverIBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to...CVE-2014-88905.1 MediumDecember 18, 2014
cisco ios xrCisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a...CVE-2014-80145.0 MediumDecember 18, 2014
cisco adaptive security appliance softwareCross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive...CVE-2014-80124.3 MediumDecember 18, 2014
ibm websphere application serverIBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5...CVE-2014-61744.3 MediumDecember 18, 2014
ibm websphere application serverCross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere...CVE-2014-61674.3 MediumDecember 18, 2014
ibm websphere application serverThe Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x...CVE-2014-61664.3 MediumDecember 18, 2014
ibm websphere application serverIBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote...CVE-2014-61645.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60894.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60885.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60875.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60865.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60845.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60835.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60824.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreSQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and...CVE-2014-60806.5 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60785.0 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreCross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x...CVE-2014-60776.8 MediumDecember 18, 2014
ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...CVE-2014-60764.3 MediumDecember 18, 2014
arris touchstone tg862g\/ct firmwareARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default...CVE-2014-940610.0 HighDecember 18, 2014
thermostat project thermostatThe agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users...CVE-2014-8120Fix available4.4 MediumDecember 18, 2014
gosa Debiangosa - security updateDLA-115-1Fix availableNo scoreDecember 18, 2014
mantisbtbug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via...CVE-2014-93885.0 MediumDecember 17, 2014
sap businessobjectsSAP BusinessObjects Edge 4.1 allows remote attackers to obtain the...CVE-2014-938710.0 HighDecember 17, 2014
mantisbtThe mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18...CVE-2014-85535.0 MediumDecember 17, 2014
puppet serverRace condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by...CVE-2014-71701.9 LowDecember 17, 2014
dokuwiki, mageia +1 moreThe default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki...CVE-2014-9253Fix available4.3 MediumDecember 17, 2014
arris touchstone tg862g\/ct firmwareCross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with...CVE-2014-54383.5 LowDecember 17, 2014
arris touchstone tg862g\/ct firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT...CVE-2014-54376.8 MediumDecember 17, 2014
hp tcp ip services openvmsMultiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before...CVE-2014-78805.0 MediumDecember 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open