Archive

5 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /5 January 2015 →

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

Unscored —

CVE-2014-8877 Public exploit EPSS 14%

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plu…

Dec 5, 2014
Unscored —

CVE-2014-4703 Public exploit

lib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the …

Dec 5, 2014
Unscored —

CVE-2014-3997 Public exploit EPSS 13%

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Mana…

Dec 5, 2014
Unscored —

CVE-2014-3996 Public exploit EPSS 38%

SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Centra…

Dec 5, 2014
Unscored —

CVE-2014-8800 Public exploit

Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before…

Dec 5, 2014
Unscored —

CVE-2014-9143 Public exploit

Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to redirect u…

Dec 5, 2014
Unscored —

CVE-2014-9142 Public exploit

Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers …

Dec 5, 2014
Unscored —

CVE-2014-9144 Public exploit

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell meta…

Dec 5, 2014
Unscored —

CVE-2014-9215 Public exploit

SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 before 20141128…

Dec 5, 2014