# CVEs published 2014-12-29

10 CVEs were published on December 29, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8109](https://cve.now/CVE-2014-8109.md): mod\_lua.c in the mod\_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which… (no CVSS)
- [CVE-2014-1905](https://cve.now/CVE-2014-1905.md): Unrestricted file upload vulnerability in ls/vw\_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for… (no CVSS)
- [CVE-2014-1908](https://cve.now/CVE-2014-1908.md): The error-handling feature in (1) bp.php, (2) videowhisper\_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming… (no CVSS)
- [CVE-2014-2224](https://cve.now/CVE-2014-2224.md): Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it easier for remote… (no CVSS)
- [CVE-2014-3556](https://cve.now/CVE-2014-3556.md): The STARTTLS implementation in mail/ngx\_mail\_smtp\_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4… (no CVSS)
- [CVE-2014-6123](https://cve.now/CVE-2014-6123.md): IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through… (no CVSS)
- [CVE-2014-6160](https://cve.now/CVE-2014-6160.md): IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process… (no CVSS)
- [CVE-2014-6168](https://cve.now/CVE-2014-6168.md): Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated… (no CVSS)
- [CVE-2014-8132](https://cve.now/CVE-2014-8132.md): Double free vulnerability in the ssh\_packet\_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to… (no CVSS)
- [CVE-2014-9424](https://cve.now/CVE-2014-9424.md): Double free vulnerability in the ssl\_parse\_clienthello\_use\_srtp\_ext function in d1\_srtp.c in LibreSSL before 2.1.2 allows remote attackers… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-12-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.