Skip to content
OpenAdvisories

Archive

5 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /5 January 2015 →
  1. 118
  2. 226
  3. 323
  4. 47
  5. 530
  6. 68
  7. 76
  8. 834
  9. 918
  10. 1069
  11. 1150
  12. 1231
  13. 132
  14. 14 
  15. 1527
  16. 1622
  17. 1718
  18. 1823
  19. 1948
  20. 209
  21. 21 
  22. 2210
  23. 2313
  24. 2431
  25. 255
  26. 2619
  27. 2713
  28. 2813
  29. 2910
  30. 304
  31. 3127
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2014-9292

    Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress a…

  • Unscored —
    CVE-2014-8877 Public exploit EPSS 14%

    The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plu…

  • Unscored —
    CVE-2014-7254

    Unspecified vulnerability in ARROWS Me F-11D allows physically proximate attackers to read or modify flash memory via u…

  • Unscored —
    CVE-2014-7243

    LG Electronics Mobile WiFi router L-09C, L-03E, and L-04D does not restrict access to the web administration interface,…

  • Unscored —
    CVE-2014-7256

    The (1) PPP Access Concentrator (PPPAC) and (2) Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers S…

  • Unscored —
    CVE-2014-7258

    Cross-site scripting (XSS) vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Inte…

  • Unscored —
    CVE-2014-7255

    Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 t…

  • Unscored —
    CVE-2014-7259

    SQUARE ENIX Co., Ltd. Kaku-San-Sei Million Arthur before 2.25 for Android stores "product credentials" on the SD card, …

  • Unscored —
    CVE-2014-7252

    Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT …

  • Unscored —
    CVE-2014-7253

    FUJITSU F-12C, ARROWS Tab LTE F-01D, ARROWS Kiss F-03D, and REGZA Phone T-01D for Android allows local users to execute…

  • Unscored —
    CVE-2012-6656

    iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of ser…

    glibc Debian
  • Unscored —
    CVE-2014-4703 Public exploit

    lib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the …

  • Unscored —
    CVE-2014-4702

    The check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI config…

  • Unscored —
    CVE-2014-4701

    The check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI config…

  • Unscored —
    CVE-2014-6040

    GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds re…

    glibc eglibc Debian Ubuntu
  • Unscored —
    CVE-2014-3561

    The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the c…

  • Medium —
    CVE-2014-3627

    Improper Link Resolution Before File Access in Apache Hadoop

    The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive…

    org.apache.hadoop:hadoop-client Maven
  • Unscored —
    CVE-2014-2273

    The hx170dec device driver in Huawei P2-6011 before V100R001C00B043 allows local users to read and write to arbitrary m…

  • Unscored —
    CVE-2014-8990

    default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metach…

    lsyncd Debian
  • Unscored —
    CVE-2014-8123

    Buffer overflow in the bGetPPS function in wordole.c in Antiword 0.37 allows remote attackers to cause a denial of serv…

    antiword antiword Debian Alpine
  • Unscored —
    CVE-2014-9140

    Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2014-3997 Public exploit EPSS 13%

    SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Mana…

  • Unscored —
    CVE-2014-3996 Public exploit EPSS 38%

    SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Centra…

  • Unscored —
    CVE-2014-8800 Public exploit

    Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before…

  • Unscored —
    CVE-2014-9143 Public exploit

    Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to redirect u…

  • Unscored —
    CVE-2014-9142 Public exploit

    Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers …

  • Unscored —
    CVE-2014-9144 Public exploit

    Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell meta…

  • Unscored —
    CVE-2014-9129

    Cross-site request forgery (CSRF) vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordP…

  • Unscored —
    CVE-2014-9212

    Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7…

  • Unscored —
    CVE-2014-9215 Public exploit

    SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 before 20141128…