Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
December

CVEs published in December 2014

653 vulnerabilities, 63 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

google chromerendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not...CVE-2011-17987.5 HighDecember 26, 2014
google chromeUse-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page...CVE-2011-17967.5 HighDecember 26, 2014
google chromeInteger underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp...CVE-2011-17957.5 HighDecember 26, 2014
google chromeInteger overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters...CVE-2011-17947.5 HighDecember 26, 2014
google chromerendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696...CVE-2011-17937.5 HighDecember 26, 2014
progress telerik ui for asp.net ajaxAbsolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik...CVE-2014-22177.5 HighDecember 25, 2014
maxthon cloud browserThe Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to...CVE-2014-14495.0 MediumDecember 25, 2014
sideway hapi crumbCORS Token Disclosure in crumbCVE-2014-7193Fix available5.8 MediumDecember 25, 2014
mongodbThe CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in...CVE-2014-39715.0 MediumDecember 25, 2014
huawei espace desktopThe eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before...CVE-2014-9418Public exploit2.1 LowDecember 24, 2014
huawei espace desktopThe Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a...CVE-2014-9417Public exploit2.1 LowDecember 24, 2014
huawei espace desktopMultiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow...CVE-2014-9416Public exploit4.4 MediumDecember 24, 2014
huawei espace desktopHuawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program...CVE-2014-9415Public exploit1.9 LowDecember 24, 2014
boldgrid w3 total cacheThe W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces,...CVE-2014-94146.8 MediumDecember 24, 2014
ip ban project banMultiple cross-site request forgery (CSRF) vulnerabilities in the IP Ban (simple-ip-ban) plugin 1...CVE-2014-94136.8 MediumDecember 24, 2014
bird feeder project feederMultiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for...CVE-2014-93346.8 MediumDecember 24, 2014
allegrosoft rompagerMultiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and...CVE-2014-922310.0 HighDecember 24, 2014
allegrosoft rompagerAllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors...CVE-2014-9222Public exploitEPSS 74.0%10.0 HighDecember 24, 2014
wpsymposiumpro wp symposiumSQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11...CVE-2014-8810Public exploit6.5 MediumDecember 24, 2014
wpsymposiumpro wp symposiumMultiple cross-site scripting (XSS) vulnerabilities in the WP Symposium plugin before 14.11 for...CVE-2014-88094.3 MediumDecember 24, 2014
linux kerneldrivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm...CVE-2014-4322Public exploit7.2 HighDecember 24, 2014
ibm websphere service registry and repositoryMultiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and...CVE-2014-61883.5 LowDecember 24, 2014
ibm websphere service registry and repositoryMultiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and...CVE-2014-61876.0 MediumDecember 24, 2014
ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5,...CVE-2014-61864.0 MediumDecember 24, 2014
ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access...CVE-2014-61814.0 MediumDecember 24, 2014
ibm websphere service registry and repositoryCross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and...CVE-2014-61803.5 LowDecember 24, 2014
ibm websphere service registry and repositoryCross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and...CVE-2014-61794.3 MediumDecember 24, 2014
ibm websphere service registry and repositoryCross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and...CVE-2014-61783.5 LowDecember 24, 2014
ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0...CVE-2014-61774.0 MediumDecember 24, 2014
ibm websphere service registry and repositoryMultiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service...CVE-2014-61554.0 MediumDecember 24, 2014
ibm websphere service registry and repositoryThe Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x...CVE-2014-61534.3 MediumDecember 24, 2014
ibm websphere service registry and repositoryCross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and...CVE-2014-61323.5 LowDecember 24, 2014
cisco meraki ms, meraki mr, meraki mr firmware +3 more +5 moreCisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated...CVE-2014-79997.7 HighDecember 24, 2014
cisco meraki ms, meraki mr, meraki mr firmware +3 more +5 moreCisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate...CVE-2014-79957.2 HighDecember 24, 2014
cisco meraki ms, meraki mr, meraki mr firmware +3 more +5 moreCisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to...CVE-2014-79945.4 MediumDecember 24, 2014
cisco meraki mr firmware, meraki ms firmware, meraki mx firmware +2 moreCisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to...CVE-2014-79933.3 LowDecember 24, 2014
libjpeg-turbo, canonical ubuntu linux, fedoraproject fedora +2 morelibjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a...CVE-2014-9092Fix available6.5 MediumDecember 23, 2014
microfocus access managerMultiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1...CVE-2014-9412Public exploit4.3 MediumDecember 23, 2014
piwigoSQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in...CVE-2014-9115Public exploit7.5 HighDecember 23, 2014
microfocus access managerCross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration...CVE-2014-52176.8 MediumDecember 23, 2014
microfocus access managerMultiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0...CVE-2014-5216Public exploit4.3 MediumDecember 23, 2014
microfocus access managerNetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to...CVE-2014-52154.0 MediumDecember 23, 2014
microfocus access managernps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM)...CVE-2014-52144.0 MediumDecember 23, 2014
cisco jabber guestCross-site scripting (XSS) vulnerability in the Guest Server in Cisco Jabber allows remote...CVE-2014-80264.3 MediumDecember 23, 2014
cisco jabber guestThe API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to...CVE-2014-80254.3 MediumDecember 23, 2014
cisco jabber guestThe API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote...CVE-2014-80244.3 MediumDecember 23, 2014
ibm security appscan, security appscan source +1 moreIBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7...CVE-2014-61354.3 MediumDecember 23, 2014
ibm security appscan, security appscan source +1 moreIBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7...CVE-2014-61225.5 MediumDecember 23, 2014
ibm security appscan, security appscan source +1 moreCross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix...CVE-2014-61213.5 LowDecember 23, 2014
ibm security appscan, security appscan source +1 moreIBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7...CVE-2014-61199.3 HighDecember 23, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open