Archive

4 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /4 February 2015 →

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

Unscored —

CVE-2013-2131 Public exploit EPSS 11%

Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attacke…

rrdtool rrdtool Debian Ubuntu

Jan 4, 2015
Unscored —

CVE-2014-9506

MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates when a monitored issue …

Jan 4, 2015
High —

CVE-2014-9509

Typo3 Vulnerable to Cache Poisoning

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption…

typo3/cms Packagist

Jan 4, 2015
Unscored —

CVE-2014-9276

Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22, 1.20…

Jan 4, 2015
Unscored —

CVE-2014-9277

The wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14…

mediawiki Debian

Jan 4, 2015
Medium —

CVE-2014-9508

Typo3 Open Redirect In Frontend Rendering

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to a…

typo3/cms Packagist

Jan 4, 2015
Unscored —

CVE-2014-9507

MediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is enabled, allows remot…

Jan 4, 2015