# CVEs published 2014-12-07

6 CVEs were published on December 7, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8868](https://cve.now/CVE-2014-8868.md): EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator us (no CVSS)
- [CVE-2014-9300](https://cve.now/CVE-2014-9300.md): Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco (no CVSS)
- [CVE-2014-9301](https://cve.now/CVE-2014-9301.md): Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to (no CVSS)
- [CVE-2014-9302](https://cve.now/CVE-2014-9302.md): Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresc (no CVSS)
- [CVE-2014-9303](https://cve.now/CVE-2014-9303.md): EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and passwor (no CVSS)
- [CVE-2014-9304](https://cve.now/CVE-2014-9304.md): Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary adm (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-12-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.