# CVEs published 2014-12-06

8 CVEs were published on December 6, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8651](https://cve.now/CVE-2014-8651.md): The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via (no CVSS)
- [CVE-2014-9117](https://cve.now/CVE-2014-9117.md): MantisBT before 1.2.18 uses the public\_key parameter value as the key to the CAPTCHA answer, which allows remote attackers to bypass the CAP (no CVSS)
- [CVE-2014-3099](https://cve.now/CVE-2014-3099.md): Unspecified vulnerability in the Security component in IBM Systems Director 6.3.0 through 6.3.5 allows local users to obtain sensitive infor (no CVSS)
- [CVE-2014-4629](https://cve.now/CVE-2014-4629.md): EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary (no CVSS)
- [CVE-2014-5429](https://cve.now/CVE-2014-5429.md): DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows r (no CVSS)
- [CVE-2014-6140](https://cve.now/CVE-2014-6140.md): IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' inst (no CVSS)
- [CVE-2014-7251](https://cve.now/CVE-2014-7251.md): XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users (no CVSS)
- [CVE-2014-9278](https://cve.now/CVE-2014-9278.md): The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.