CVEs published December 27, 2014
13 CVEs were published on December 27, 2014: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- james-heinrich/phpthumb
- 1
- Schneider Electric ProClima
- 1
- symfony/symfony · symfony/polyfill +1
- 1
Medium, low and unrated 13
- CVE-2013-4793The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does no
- CVE-2013-5958The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackesymfony/symfony · symfony/polyfill +1
- CVE-2013-6041index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies
- CVE-2013-6043The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whe
- CVE-2013-6227Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5
- CVE-2013-6241The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id s
- CVE-2013-6919The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conductjames-heinrich/phpthumb
- CVE-2014-8511Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary
- CVE-2014-8512Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary
- CVE-2014-8513Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrar
- CVE-2014-8514Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrar
- CVE-2014-9188Schneider Electric ProClima Command InjectionSchneider Electric ProClima
- CVE-2014-0748apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message,