# CVEs published 2014-12-27

13 CVEs were published on December 27, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4793](https://cve.now/CVE-2013-4793.md): The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does no (no CVSS)
- [CVE-2013-5958](https://cve.now/CVE-2013-5958.md): The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attacke (no CVSS, symfony/symfony · symfony/polyfill +1)
- [CVE-2013-6041](https://cve.now/CVE-2013-6041.md): index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies (no CVSS)
- [CVE-2013-6043](https://cve.now/CVE-2013-6043.md): The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whe (no CVSS)
- [CVE-2013-6227](https://cve.now/CVE-2013-6227.md): Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save\_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5 (no CVSS)
- [CVE-2013-6241](https://cve.now/CVE-2013-6241.md): The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id s (no CVSS)
- [CVE-2013-6919](https://cve.now/CVE-2013-6919.md): The default configuration of phpThumb before 1.7.12 has a false value for the disable\_debug option, which allows remote attackers to conduct (no CVSS, james-heinrich/phpthumb)
- [CVE-2014-8511](https://cve.now/CVE-2014-8511.md): Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2014-8512](https://cve.now/CVE-2014-8512.md): Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2014-8513](https://cve.now/CVE-2014-8513.md): Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2014-8514](https://cve.now/CVE-2014-8514.md): Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2014-9188](https://cve.now/CVE-2014-9188.md): Schneider Electric ProClima Command Injection (no CVSS, Schneider Electric ProClima)
- [CVE-2014-0748](https://cve.now/CVE-2014-0748.md): apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-12-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.