Skip to content
OpenAdvisories

Archive

24 December 2014

Vulnerabilities first published on this day (UTC), newest first.

← November 2014 2014 / December /24 January 2015 →
  1. 118
  2. 226
  3. 323
  4. 47
  5. 530
  6. 68
  7. 76
  8. 834
  9. 918
  10. 1069
  11. 1150
  12. 1231
  13. 132
  14. 14 
  15. 1527
  16. 1622
  17. 1718
  18. 1823
  19. 1948
  20. 209
  21. 21 
  22. 2210
  23. 2313
  24. 2431
  25. 255
  26. 2619
  27. 2713
  28. 2813
  29. 2910
  30. 304
  31. 3127
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2004-2771

    The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers…

    bsd-mailx heirloom-mailx mailx Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2014-8137 EPSS 15%

    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers …

    jasper Ubuntu
  • Unscored —
    CVE-2014-8810 Public exploit

    SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows rem…

  • Unscored —
    CVE-2014-8138 EPSS 19%

    Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a …

    jasper Ubuntu
  • Unscored —
    CVE-2014-8809

    Multiple cross-site scripting (XSS) vulnerabilities in the WP Symposium plugin before 14.11 for WordPress allow remote …

  • Unscored —
    CVE-2014-9415 Public exploit

    Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted Q…

  • Unscored —
    CVE-2014-9413

    Multiple cross-site request forgery (CSRF) vulnerabilities in the IP Ban (simple-ip-ban) plugin 1.2.3 for WordPress all…

  • Unscored —
    CVE-2014-9416 Public exploit

    Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute…

  • Unscored —
    CVE-2014-9414

    The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attac…

  • Unscored —
    CVE-2014-9417 Public exploit

    The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (prog…

  • Unscored —
    CVE-2014-9223

    Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and produc…

  • Unscored —
    CVE-2014-9418 Public exploit

    The eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before V200R001C03 allows local user…

  • Unscored —
    CVE-2014-9222 Public exploit EPSS 74%

    AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows r…

  • Unscored —
    CVE-2014-9334

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote a…

  • Unscored —
    CVE-2014-4322 Public exploit

    drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) And…

  • Unscored —
    CVE-2014-6187

    Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.…

  • Unscored —
    CVE-2014-6179

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x be…

  • Unscored —
    CVE-2014-6155

    Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository…

  • Unscored —
    CVE-2014-6132

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 thro…

  • Unscored —
    CVE-2014-6180

    Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x be…

  • Unscored —
    CVE-2014-6188

    Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x befor…

  • Unscored —
    CVE-2014-6181

    IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for co…

  • Unscored —
    CVE-2014-6177

    IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform acc…

  • Unscored —
    CVE-2014-6178

    Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x b…

  • Unscored —
    CVE-2014-6153

    The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x …

  • Unscored —
    CVE-2014-6186

    IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3,…

  • Unscored —
    CVE-2014-3569 EPSS 20%

    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attem…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-7994

    Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary command…

  • Unscored —
    CVE-2014-7995

    Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shel…

  • Unscored —
    CVE-2014-7999

    Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitra…

  • Unscored —
    CVE-2014-7993

    Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credenti…