Archive

December 2014

Vulnerabilities first published in this month (UTC), newest first.

← November 2014 2014 / December January 2015 →

All Critical High Medium Low Exploited only Public exploit

614 results · Feed

Unscored —

CVE-2014-8443

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows…

flashplugin-nonfree Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8010

The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execut…

Dec 10, 2014
Unscored —

CVE-2014-8460

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X …

Dec 10, 2014
Unscored —

CVE-2014-8449 EPSS 14%

Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows att…

Dec 10, 2014
Unscored —

CVE-2014-8455

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS …

Dec 10, 2014
Unscored —

CVE-2014-8448

An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS…

Dec 10, 2014
Unscored —

CVE-2014-8452 EPSS 18%

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read…

Dec 10, 2014
Unscored —

CVE-2014-8459

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arb…

Dec 10, 2014
Unscored —

CVE-2014-8461

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arb…

Dec 10, 2014
Unscored —

CVE-2014-9158

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arb…

Dec 10, 2014
High 7.8

CVE-2014-9163 Exploited EPSS 45%

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and …

flashplugin-nonfree Ubuntu

Dec 10, 2014
KEV Apr 13, 2022
Unscored —

CVE-2014-9165

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS …

Dec 10, 2014
Unscored —

CVE-2014-9166

Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource con…

Dec 10, 2014
Unscored —

CVE-2014-9159

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X …

Dec 10, 2014
Unscored —

CVE-2014-9162

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.42…

flashplugin-nonfree Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-9164

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.42…

flashplugin-nonfree Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-9361

The LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized user role for certain…

Dec 10, 2014
Unscored —

CVE-2014-9362

Cross-site scripting (XSS) vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x …

Dec 10, 2014
Unscored —

CVE-2014-9363

Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.…

Dec 10, 2014
Unscored —

CVE-2014-9364

Cross-site scripting (XSS) vulnerability in the Unified Login form in the LoginToboggan module 7.x-1.x before 7.x-1.4 f…

Dec 10, 2014
Unscored —

CVE-2014-7866 Public exploit EPSS 80%

Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and…

Dec 10, 2014
Medium —

CVE-2014-7809

Cross-Site Request Forgery in Apache Struts

Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s:token/> values, which allows remote attackers to bypass the CSRF protection mechanism.

org.apache.struts:struts2-core Maven

Dec 10, 2014
Unscored —

CVE-2014-7807

Apache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass authentication via a logi…

Dec 10, 2014
Unscored —

CVE-2014-8100

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and …

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8101

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and x…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8096

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org S…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8103

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cau…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8099

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and …

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8093

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8097

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8091

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SU…

nvidia-graphics-drivers-304 xorg-server xorg-server nvidia-graphics-drivers-304-updates Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8094

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server)…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8098

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-…

nvidia-graphics-drivers-304 xorg-server xorg-server nvidia-graphics-drivers-304-updates Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8298

The NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R34…

nvidia-graphics-drivers-304 nvidia-graphics-drivers nvidia-graphics-drivers-304-updates nvidia-graphics-drivers-331-updates Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8092

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server)…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8102

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 …

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8601 EPSS 69%

PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of s…

pdns-recursor pdns-recursor Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8095

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) befor…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-9091

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows …

icecast2 icecast2 Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-9360

XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to r…

Dec 10, 2014