Archive

2 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /2 January 2015 →

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

Unscored —

CVE-2014-8728 Public exploit

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System …

Dec 2, 2014
Unscored —

CVE-2014-9175 Public exploit

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remot…

Dec 2, 2014
Unscored —

CVE-2014-9179 Public exploit

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote auth…

Dec 2, 2014
Unscored —

CVE-2014-9173 Public exploit

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote att…

Dec 2, 2014
Unscored —

CVE-2014-9113 Public exploit

CCH Wolters Kluwer ProSystem fx Engagement (aka PFX Engagement) 7.1 and earlier uses weak permissions (Authenticated Us…

Dec 2, 2014
Unscored —

CVE-2014-9181 Public exploit

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitra…

Dec 2, 2014
Unscored —

CVE-2014-9178 Public exploit

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager pl…

Dec 2, 2014
Unscored —

CVE-2014-8791 Public exploit EPSS 15%

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated…

Dec 2, 2014
Unscored —

CVE-2014-5284 Public exploit

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, wh…

Dec 2, 2014