CVEs published December 25, 2014
5 CVEs were published on December 25, 2014: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- crumb
- 1
Medium, low and unrated 5
- CVE-2014-1449The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript
- CVE-2014-2217Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 all
- CVE-2014-7300GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc
- CVE-2014-3971The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows re
- CVE-2014-7193The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled,crumb