# CVEs published 2014-12-18

23 CVEs were published on December 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-6076](https://cve.now/CVE-2014-6076.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow (no CVSS)
- [CVE-2014-6077](https://cve.now/CVE-2014-6077.md): Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for W (no CVSS)
- [CVE-2014-6078](https://cve.now/CVE-2014-6078.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do no (no CVSS)
- [CVE-2014-6080](https://cve.now/CVE-2014-6080.md): SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 (no CVSS)
- [CVE-2014-6082](https://cve.now/CVE-2014-6082.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow (no CVSS)
- [CVE-2014-6083](https://cve.now/CVE-2014-6083.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow (no CVSS)
- [CVE-2014-6084](https://cve.now/CVE-2014-6084.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make (no CVSS)
- [CVE-2014-6086](https://cve.now/CVE-2014-6086.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do no (no CVSS)
- [CVE-2014-6087](https://cve.now/CVE-2014-6087.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make (no CVSS)
- [CVE-2014-6088](https://cve.now/CVE-2014-6088.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow (no CVSS)
- [CVE-2014-6089](https://cve.now/CVE-2014-6089.md): IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow (no CVSS)
- [CVE-2014-6164](https://cve.now/CVE-2014-6164.md): IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4 allows remote attackers to spoof OpenID and OpenID Connect c (no CVSS)
- [CVE-2014-6166](https://cve.now/CVE-2014-6166.md): The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4, an (no CVSS)
- [CVE-2014-6167](https://cve.now/CVE-2014-6167.md): Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before (no CVSS)
- [CVE-2014-6174](https://cve.now/CVE-2014-6174.md): IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows remote attackers to conduct cli (no CVSS)
- [CVE-2014-8012](https://cve.now/CVE-2014-8012.md): Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote a (no CVSS)
- [CVE-2014-8014](https://cve.now/CVE-2014-8014.md): Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCub63710. (no CVSS)
- [CVE-2014-8890](https://cve.now/CVE-2014-8890.md): IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combinati (no CVSS)
- [CVE-2014-8901](https://cve.now/CVE-2014-8901.md): IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to caus (no CVSS)
- [CVE-2014-3580](https://cve.now/CVE-2014-3580.md): The mod\_dav\_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a (no CVSS)
- [CVE-2014-8108](https://cve.now/CVE-2014-8108.md): The mod\_dav\_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause (no CVSS)
- [CVE-2014-8120](https://cve.now/CVE-2014-8120.md): The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all loc (no CVSS)
- [CVE-2014-9406](https://cve.now/CVE-2014-9406.md): ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.