December 2014

614 results · Feed

• Unscored —
  CVE-2014-8902

  Cross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 …

  Dec 19, 2014
• Unscored —
  CVE-2014-8016

  The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption…

  Dec 19, 2014
• Unscored —
  CVE-2014-6088

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6077

  Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security…

  Dec 18, 2014
• Unscored —
  CVE-2014-6080

  SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for …

  Dec 18, 2014
• Unscored —
  CVE-2014-6086

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6078

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6167

  Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application Server 7.x before 7.…

  Dec 18, 2014
• Unscored —
  CVE-2014-6174

  IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote att…

  Dec 18, 2014
• Unscored —
  CVE-2014-6084

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6083

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6166

  The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5…

  Dec 18, 2014
• Unscored —
  CVE-2014-6087

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6076

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6089

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6082

  IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8…

  Dec 18, 2014
• Unscored —
  CVE-2014-6164

  IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID…

  Dec 18, 2014
• Unscored —
  CVE-2014-8014

  Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, ak…

  Dec 18, 2014
• Unscored —
  CVE-2014-8901

  IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authen…

  Dec 18, 2014
• Unscored —
  CVE-2014-8890

  IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by lev…

  Dec 18, 2014
• Unscored —
  CVE-2014-8012

  Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Sof…

  Dec 18, 2014
• Unscored —
  CVE-2014-3580 EPSS 11%

  The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote…

  subversion subversion Debian Ubuntu
  Dec 18, 2014
• Unscored —
  CVE-2014-8108

  The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remo…

  subversion subversion Debian Ubuntu
  Dec 18, 2014
• Unscored —
  CVE-2014-8120

  The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX manag…

  Dec 18, 2014
• Unscored —
  CVE-2014-9406

  ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password fo…

  Dec 18, 2014
• Unscored —
  CVE-2013-7402

  Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (…

  c-icap c-icap Debian Ubuntu
  Dec 17, 2014
• Unscored —
  CVE-2014-7170

  Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between pac…

  Dec 17, 2014
• Unscored —
  CVE-2014-8116

  The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or…

  file file Debian Ubuntu
  Dec 17, 2014
• Unscored —
  CVE-2014-8553

  The mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18 allows remote attacke…

  Dec 17, 2014
• Unscored —
  CVE-2014-8117

  softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of s…

  php5 file file Debian Ubuntu
  Dec 17, 2014
• Unscored —
  CVE-2014-9387

  SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain…

  Dec 17, 2014
• Unscored —
  CVE-2014-9388

  bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id paramete…

  Dec 17, 2014
• Unscored —
  CVE-2014-9253

  The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b all…

  dokuwiki Debian
  Dec 17, 2014
• Unscored —
  CVE-2014-5437

  Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmwar…

  Dec 17, 2014
• Unscored —
  CVE-2014-5438

  Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and e…

  Dec 17, 2014
• Unscored —
  CVE-2014-7880

  Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attack…

  Dec 17, 2014
• Unscored —
  CVE-2014-7285 Public exploit EPSS 50%

  The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to ex…

  Dec 17, 2014
• Unscored —
  CVE-2014-8133

  arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 17, 2014
• Unscored —
  CVE-2014-9322 Public exploit

  arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack …

  linux linux linux-lts-utopic Debian Ubuntu
  Dec 17, 2014
• Unscored —
  CVE-2014-4626

  EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote …

  Dec 17, 2014