CVEs published in December 2014
653 vulnerabilities, 63 critical, 0 exploited.
- videowhisper live streaming integrationThe error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php...5.0 Medium
- videowhisper live streaming integrationUnrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming...10.0 High
- ibm security identity managerCross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0...6.0 Medium
- ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL...2.1 Low
- ibm rational appscan source, security appscan source +1 moreIBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan...2.1 Low
- openbsd libresslDouble free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in...7.5 High
- debian mime-support, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morerun-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent...7.5 High
- facebook hiphop virtual machineThe HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM)...5.0 Medium
- facebook hiphop virtual machineInteger overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in...7.5 High
- facebook hiphop virtual machineThe mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop...5.0 Medium
- facebook hiphop virtual machineFacebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships...5.0 Medium
- facebook hiphop virtual machineCRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light...7.5 High
- dflabs ptkCross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier...6.8 Medium
- amcharts flashMultiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to...4.3 Medium
- ammap project ammapMultiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to...4.3 Medium
- ipswitch tftp serverDirectory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows...7.8 High
- avast\! internet securityInteger overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local...2.1 Low
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreHeap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows...7.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreHeap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows...7.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreHeap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows...7.8 High
- libssh, canonical ubuntu linux, debian linux +2 more +4 moreDouble free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x...5.0 Medium
- redmine git hosting plugingit_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to...7.5 High
- syndeocmsCross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier...6.8 Medium
- hillstone software hs tftp serverHillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash...5.0 Medium
- phpthumb project phpthumbphpThumb is vulnerable to Server-Side Request Forgery (SSRF)4.3 Medium
- open-xchange appsuiteThe Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4...4.0 Medium
- ajaxplorer, pydio +1 moreUnrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho...7.5 High
- softaculous webuzoThe login function in Softaculous Webuzo before 2.1.4 provides different error messages for...5.0 Medium
- softaculous webuzoindex.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary...7.5 High
- sensiolabs symfonySymfony Denial of Service Via Long Password Hashing5.0 Medium
- umbraco cmsThe update function in umbraco.webservices/templates/templateService.cs in the TemplateService...7.5 High
- schneider electric proclimaSchneider Electric ProClima Command Injection10.0
- schneider electric proclimaBuffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7...7.5 High
- schneider electric proclimaBuffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7...7.5 High
- schneider electric proclimaBuffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7...7.5 High
- schneider-electric proclimaBuffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7...10.0 High
- cray linux environmentapinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth...7.2 High
- eucalyptusThe cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns...4.3 Medium
- owl intranet knowledgebaseMultiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow...3.5 Low
- clarolineMultiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote...3.5 Low
- videolan vlc media playerMultiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote...7.5 High
- videolan vlc media playerHeap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to...7.5 High
- videolan vlc media playerThe ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to...7.5 High
- videolan vlc media playerThe parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in...5.0 Medium
- videolan vlc media playerVideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service ...7.5 High
- videolan vlc media playerMultiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote...7.5 High
mediawikiMageiaUpdated mediawiki packages fix security vulnerabilitiesNo scorexlockmoreMageiaUpdated xlockmore packages fix a security vulnerabilityNo score- phpmyadminphpMyAdmin Multiple XSS Vulnerabilities3.5 Low
- phpmyadminphpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save3.5 Low
- Show moreLoading…