Skip to content
OpenAdvisories

Archive

11 December 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —
    CVE-2014-7192 Public exploit EPSS 13%

    Potential for Script Injection in syntax-error

    Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

  • Unscored —
    CVE-2014-6363 Public exploit EPSS 28%

    vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, all…