Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
December

CVEs published in December 2014

653 vulnerabilities, 63 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

imagemagickcoders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd...CVE-2014-9828Fix available8.8 HighDecember 31, 2014
imagemagickImageMagick allows remote attackers to have unspecified impact via vectors related to error...CVE-2014-9826Fix available9.8 CriticalDecember 31, 2014
imagemagickHeap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via...CVE-2014-9823Fix available7.8 HighDecember 31, 2014
imagemagickHeap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via...CVE-2014-9822Fix available7.8 HighDecember 31, 2014
imagemagickHeap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via...CVE-2014-9821Fix available7.8 HighDecember 31, 2014
imagemagickHeap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via...CVE-2014-9820Fix available7.8 HighDecember 31, 2014
imagemagickHeap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via...CVE-2014-9819Fix available7.8 HighDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a...CVE-2014-9818Fix available5.5 MediumDecember 31, 2014
imagemagickHeap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via...CVE-2014-9817Fix available7.8 HighDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a...CVE-2014-9816Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (application crash) via a...CVE-2014-9815Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a...CVE-2014-9814Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (application crash) via a...CVE-2014-9813Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a...CVE-2014-9812Fix available5.5 MediumDecember 31, 2014
imagemagickThe xwd file handler in ImageMagick allows remote attackers to cause a denial of service ...CVE-2014-9811Fix available5.5 MediumDecember 31, 2014
imagemagickThe dpx file handler in ImageMagick allows remote attackers to cause a denial of service ...CVE-2014-9810Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (segmentation fault and...CVE-2014-9809Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (segmentation fault and...CVE-2014-9808Fix available5.5 MediumDecember 31, 2014
imagemagickThe pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free)...CVE-2014-9807Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (file descriptor consumption)...CVE-2014-9806Fix available5.5 MediumDecember 31, 2014
imagemagickImageMagick allows remote attackers to cause a denial of service (segmentation fault and...CVE-2014-9805Fix available5.5 MediumDecember 31, 2014
php, hiphop virtual machine for php project virtual machine for php +1 moreDirectory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in...CVE-2014-9767Fix available4.3 MediumDecember 31, 2014
pixman, canonical ubuntu linux +1 moreInteger overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6...CVE-2014-9766Fix available9.8 CriticalDecember 31, 2014
xdelta xdelta3, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9...CVE-2014-9765Fix available8.8 HighDecember 31, 2014
linux kernelThe UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is...CVE-2014-9731Fix available2.1 LowDecember 31, 2014
linux kernelThe udf_pc_to_char function in fs/udf/symlink.c in the Linux kernel before 3.18.2 relies on...CVE-2014-9730Fix available4.9 MediumDecember 31, 2014
linux kernelThe udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.18.2 does not ensure a...CVE-2014-9729Fix available4.9 MediumDecember 31, 2014
linux kernelThe UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain...CVE-2014-9728Fix available4.9 MediumDecember 31, 2014
linux kernelinclude/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before...CVE-2014-9715Fix available4.9 MediumDecember 31, 2014
linux kernelThe Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr...CVE-2014-9710Fix available6.9 MediumDecember 31, 2014
ecryptfs ecryptfs-utilseCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it...CVE-2014-9687Fix available5.0 MediumDecember 31, 2014
debian linux, linux kernel, canonical ubuntu linux +2 moreThe Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel...CVE-2014-9644Fix available2.1 LowDecember 31, 2014
gnu patch, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreGNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory...CVE-2014-9637Fix available5.5 MediumDecember 31, 2014
unzip project unzip, canonical ubuntu linux, debian linux +1 more +3 moreunzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and...CVE-2014-9636Fix availableEPSS 11.9%5.0 MediumDecember 31, 2014
phpsapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x...CVE-2014-9427Fix availableEPSS 18.3%7.5 HighDecember 31, 2014
liblouisA vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow...CVE-2014-8184Fix available7.8 HighDecember 31, 2014
icu-project international components for unicode, apple mac os x, watchos +2 moreThe resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm...CVE-2014-8147Public exploitFix availableEPSS 23.6%7.5 HighDecember 31, 2014
icu-project international components for unicode, apple iphone os, itunes +2 more +4 moreThe resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm...CVE-2014-8146Public exploitFix availableEPSS 24.7%7.5 HighDecember 31, 2014
libtiff, apple iphone os, mac os x +6 more +8 moreThe _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows...CVE-2014-8130Fix available6.5 MediumDecember 31, 2014
libtiff, apple iphone os, mac os x +5 more +7 moreLibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or...CVE-2014-8129Fix available8.8 HighDecember 31, 2014
libtiffLibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other...CVE-2014-8128Fix available6.5 MediumDecember 31, 2014
libtiff, opensuse +1 moreLibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash)...CVE-2014-8127Fix available6.5 MediumDecember 31, 2014
gnu gnupg, libgcrypt, debian linux +2 moreLibgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal...CVE-2014-3591Fix available4.2 MediumDecember 31, 2014
emc appsync, replication manager +1 moreUnquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync...CVE-2014-46344.6 MediumDecember 30, 2014
dell bsafe ssl-j, bsafe micro-edition-suite +1 moreEMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do...CVE-2014-46304.3 MediumDecember 30, 2014
exponentcms exponent cmsDirectory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows...CVE-2013-32957.5 HighDecember 30, 2014
tribiq cmsThe (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes...CVE-2011-27274.3 MediumDecember 30, 2014
apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moremod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...CVE-2014-8109Fix availableEPSS 22.0%4.3 MediumDecember 29, 2014
f5 nginxThe STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and...CVE-2014-3556Fix available6.8 MediumDecember 29, 2014
ploggerPlogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain...CVE-2014-22245.0 MediumDecember 29, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open