Archive
January 2015
Vulnerabilities first published in this month (UTC), newest first.
713 results · Feed
-
Unscored —
OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denia…
-
Unscored —
Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.…
-
Unscored —
OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denia…
-
Unscored —
Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, all…
-
Unscored —
Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome befo…
-
Unscored —
hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which …
-
Unscored —
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…
-
Unscored —
Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Go…
-
Unscored —
The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which al…
-
Unscored —
Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as…
-
Unscored —
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…
-
Unscored —
The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome be…
-
Unscored —
The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 2931…
-
Unscored —
The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.…
-
Unscored —
The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chro…
-
Unscored —
The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome…
-
Unscored —
Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds…
-
Unscored —
factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of ser…
-
Unscored —
Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink…
-
Unscored —
Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass th…
-
Unscored —
Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attacke…
-
Unscored —
The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Goo…
-
Unscored —
The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (mem…
-
Unscored —
The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecifie…
-
Unscored —
Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and …
-
Unscored —
XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and ea…
-
Unscored —
SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary…
-
Unscored —
The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive infor…
-
Unscored —
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote att…
-
Unscored —
The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via…
-
Unscored —CVE-2014-8008 Public exploit
Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manag…
-
Unscored —
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, …
-
Unscored —
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, …
-
Unscored —
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.…
-
Unscored —
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 1…
-
Unscored —
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to …
-
Unscored —
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attac…
-
Unscored —
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors re…
-
Unscored —
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2…
-
Unscored —
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, …