29 December 2014

10 results · Feed

• Unscored —
  CVE-2014-8109 EPSS 22%

  mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd conf…

  apache2 Debian
  Dec 29, 2014
• Unscored —
  CVE-2014-1905 Public exploit

  Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin bef…

  Dec 29, 2014
• Unscored —
  CVE-2014-1908 Public exploit

  The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper L…

  Dec 29, 2014
• Unscored —
  CVE-2014-3556

  The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and…

  nginx Debian
  Dec 29, 2014
• Unscored —
  CVE-2014-2224

  Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it…

  Dec 29, 2014
• Unscored —
  CVE-2014-6123

  IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2…

  Dec 29, 2014
• Unscored —
  CVE-2014-6160

  IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not pro…

  Dec 29, 2014
• Unscored —
  CVE-2014-6168

  Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remo…

  Dec 29, 2014
• Unscored —
  CVE-2014-8132

  Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows rem…

  libssh libssh Debian Ubuntu
  Dec 29, 2014
• Unscored —
  CVE-2014-9424

  Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allo…

  Dec 29, 2014