CVEs published in December 2014
653 vulnerabilities, 63 critical, 0 exploited.
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1...3.5 Low
- sound exchange project exchange, debian linux, oracle solaris +2 moreMultiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote...7.5 High
- modx revolutionCross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in...4.3 Medium
- cisco unified communications domain managerMultiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM)...4.3 Medium
- cisco identity services engine softwareThe periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to...5.0 Medium
- cisco identity services engine softwareThe Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to...4.0 Medium
- yokogawa centum cs 3000, centum vp, exaopc +2 moreBKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and...7.5 High
- ibm infosphere master data management server for product information management, infosphere master data management collaborative server +1 moreCross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master...3.5 Low
- ibm infosphere master data management server for product information management, infosphere master data management collaborative server +1 moreCross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master...3.5 Low
- ibm infosphere master data management server for product information management, infosphere master data management collaborative server +1 moreCross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master...3.5 Low
- ibm infosphere master data management server for product information management, infosphere master data management collaborative server +1 moreThe Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information...4.0 Medium
- symantec deployment solutionBuffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and...7.2 High
subversionDebiansubversion - regression updateNo score- innominate mguard, mguard firmware +1 moreInnominate mGuard Improper Privilege Management8.5
- cisco enterprise content delivery systemDirectory traversal vulnerability in Cisco Enterprise Content Delivery System (ECDS) allows...5.0 Medium
- cisco prime infrastructureCisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords...4.0 Medium
- cisco adaptive security appliance softwareThe syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote...4.3 Medium
- novell edirectorynds/files/opt/novell/eDirectory/lib64/ndsimon/public/images in iMonitor in Novell eDirectory...4.0 Medium
- novell edirectoryCross-site scripting (XSS) vulnerability in nds/search/data in iMonitor in Novell eDirectory...4.3 Medium
- jasper project jasper, redhat enterprise linux +1 moreHeap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote...7.5 High
- jasper project jasper, redhat enterprise linux +1 moreDouble free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier...6.8 Medium
- ekahau activator, b4 staff badge tag, b4 staff badge tag firmware +1 more +3 moreEkahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6...5.0 Medium
- revive-adserver revive adserverMultiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.0.5 allow...6.8 Medium
- zncThe CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote...4.0 Medium
- ettercap-project ettercapInteger signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1...5.0 Medium
- ettercap-project ettercapThe dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to...5.0 Medium
- ettercap-project ettercapThe radius_get_attribute function in dissectors/ec_radius.c in Ettercap 0.8.1 performs an...7.5 High
- ettercap-project ettercapEttercap 0.8.1 does not validate certain return values, which allows remote attackers to cause a...7.5 High
- ettercap-project ettercapHeap-based buffer overflow in the nbns_spoof function in plug-ins/nbns_spoof/nbns_spoof.c in...7.5 High
- ettercap-project ettercapInteger underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of...7.5 High
- twitterdash project twitterdashCross-site request forgery (CSRF) vulnerability in the twitterDash plugin 2.1 and earlier for...6.8 Medium
- puppet enterprisePuppet Enterprise before 3.7.1 allows remote authenticated users to obtain licensing and...4.0 Medium
- yurl retwitt project retwittMultiple cross-site request forgery (CSRF) vulnerabilities in the yURL ReTwitt plugin 1.4 and...6.8 Medium
- wpcommenttwit project wpcommenttwitMultiple cross-site request forgery (CSRF) vulnerabilities in the wpCommentTwit plugin 0.5 and...6.8 Medium
- jayde online spnbabbleMultiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and...6.8 Medium
- o2tweet project o2tweetMultiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and...6.8 Medium
- mikiurl wordpress eklentisi project wordpress eklentisiMultiple cross-site request forgery (CSRF) vulnerabilities in the Mikiurl Wordpress Eklentisi...6.8 Medium
- itwitter project itwitterMultiple cross-site request forgery (CSRF) vulnerabilities in the iTwitter plugin 0.04 and...6.8 Medium
- dandyid services project servicesMultiple cross-site request forgery (CSRF) vulnerabilities in the DandyID Services plugin 1.5.9...6.8 Medium
- otrs help deskThe GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before...6.0 Medium
- glpi-project glpiSQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote...6.5 Medium
- morfy cms project cmsStatic code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated...6.5 Medium
- huawei p7-l10 firmwareThe PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote...4.3 Medium
- revive-adserver revive adserverThe XML_RPC_cd function in lib/pear/XML/RPC.php in Revive Adserver before 3.0.6 allows remote...5.0 Medium
- revive-adserver revive adserverCross-site scripting (XSS) vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive...4.3 Medium
- boldgrid w3 total cacheCross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for...4.3 Medium
- redhat libvirtThe storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check...2.1 Low
- ettercap-project ettercapThe dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows...7.5 High
- ettercap-project ettercapHeap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in...7.5 High
- ekahau activator, b4 staff badge tag firmware, real-time location system controller +2 moreEkahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6...4.3 Medium
- Show moreLoading…