# CVEs published 2014-12-07

6 CVEs were published on December 7, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8868](https://cve.now/CVE-2014-8868.md): EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator… (no CVSS)
- [CVE-2014-9300](https://cve.now/CVE-2014-9300.md): Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in… (no CVSS)
- [CVE-2014-9301](https://cve.now/CVE-2014-9301.md): Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers… (no CVSS)
- [CVE-2014-9302](https://cve.now/CVE-2014-9302.md): Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in… (no CVSS)
- [CVE-2014-9303](https://cve.now/CVE-2014-9303.md): EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and… (no CVSS)
- [CVE-2014-9304](https://cve.now/CVE-2014-9304.md): Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-12-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.