# CVEs published 2014-12-29 10 CVEs were published on December 29, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-8109](https://cve.now/CVE-2014-8109.md): mod\_lua.c in the mod\_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which th (no CVSS) - [CVE-2014-1905](https://cve.now/CVE-2014-1905.md): Unrestricted file upload vulnerability in ls/vw\_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPr (no CVSS) - [CVE-2014-1908](https://cve.now/CVE-2014-1908.md): The error-handling feature in (1) bp.php, (2) videowhisper\_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integra (no CVSS) - [CVE-2014-2224](https://cve.now/CVE-2014-2224.md): Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it easier for remote at (no CVSS) - [CVE-2014-3556](https://cve.now/CVE-2014-3556.md): The STARTTLS implementation in mail/ngx\_mail\_smtp\_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 d (no CVSS) - [CVE-2014-6123](https://cve.now/CVE-2014-6123.md): IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1 (no CVSS) - [CVE-2014-6160](https://cve.now/CVE-2014-6160.md): IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process Service (no CVSS) - [CVE-2014-6168](https://cve.now/CVE-2014-6168.md): Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated user (no CVSS) - [CVE-2014-8132](https://cve.now/CVE-2014-8132.md): Double free vulnerability in the ssh\_packet\_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to caus (no CVSS) - [CVE-2014-9424](https://cve.now/CVE-2014-9424.md): Double free vulnerability in the ssl\_parse\_clienthello\_use\_srtp\_ext function in d1\_srtp.c in LibreSSL before 2.1.2 allows remote attackers t (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-12-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.