Skip to content
OpenAdvisories

Archive

December 2014

Vulnerabilities first published in this month (UTC), newest first.

← November 2014 2014 / December January 2015 →
  1. 118
  2. 226
  3. 323
  4. 47
  5. 530
  6. 68
  7. 76
  8. 834
  9. 918
  10. 1069
  11. 1150
  12. 1231
  13. 132
  14. 14 
  15. 1527
  16. 1622
  17. 1718
  18. 1823
  19. 1948
  20. 209
  21. 21 
  22. 2210
  23. 2313
  24. 2431
  25. 255
  26. 2619
  27. 2713
  28. 2813
  29. 2910
  30. 304
  31. 3127
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2014-9426

    The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perfor…

  • High 8.5
    CVE-2014-9193

    Innominate mGuard Improper Privilege Management

    Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.

    Innominate mGuard
  • High 7.3
    CVE-2014-6407

    Arbitrary Code Execution in Docker

    Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

    docker.io github.com/docker/docker Debian Go
  • High 7.8
    CVE-2014-9192

    Trihedral Engineering Limited VTScada Integer Overflow

    Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memo…

    Trihedral Engineering VTS
  • High —
    CVE-2014-7192 Public exploit EPSS 13%

    Potential for Script Injection in syntax-error

    Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

    libv8-3.14 syntax-error Ubuntu npm
  • High 7.8
    CVE-2014-9163 Exploited EPSS 45%

    Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and …

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022