CVEs published December 7, 2014
6 CVEs were published on December 7, 2014: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 6
- CVE-2014-8868EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator us
- CVE-2014-9300Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco
- CVE-2014-9301Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to
- CVE-2014-9302Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresc
- CVE-2014-9303EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and passwor
- CVE-2014-9304Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary adm