Archive

20 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /20 January 2015 →

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

Unscored —

CVE-2014-8142 Public exploit EPSS 55%

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

php5 Ubuntu

Dec 20, 2014
Unscored —

CVE-2014-9293 EPSS 13%

The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key…

ntp ntp Debian Ubuntu

Dec 20, 2014
Unscored —

CVE-2014-9295 Public exploit EPSS 79%

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via …

ntp ntp Debian Ubuntu

Dec 20, 2014
Unscored —

CVE-2014-9294 EPSS 13%

util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attacker…

ntp ntp Debian Ubuntu

Dec 20, 2014
Unscored —

CVE-2014-9296 EPSS 16%

The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authenti…

ntp ntp Debian Ubuntu

Dec 20, 2014
Unscored —

CVE-2014-3410

The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain a…

Dec 20, 2014
Unscored —

CVE-2014-8007

Cisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML s…

Dec 20, 2014
Unscored —

CVE-2014-8019

Directory traversal vulnerability in Cisco Enterprise Content Delivery System (ECDS) allows remote attackers to read ar…

Dec 20, 2014
High 8.5

CVE-2014-9193

Innominate mGuard Improper Privilege Management

Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.

Innominate mGuard

Dec 20, 2014