Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
January

CVEs published in January 2014

517 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco context directory agentThe administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce...CVE-2014-06514.9 MediumJanuary 8, 2014
cisco nx-osThe BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the...CVE-2013-69824.3 MediumJanuary 8, 2014
foliovision foliopress wysiwygCross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for...CVE-2014-12324.3 MediumJanuary 8, 2014
technicolor tc7200, tc7200 firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson)...CVE-2014-0621Public exploit6.8 MediumJanuary 8, 2014
technicolor tc7200, tc7200 firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6...CVE-2014-0620Public exploit4.3 MediumJanuary 8, 2014
hansotools hanso playerBuffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to...CVE-2013-7280Public exploit4.3 MediumJanuary 8, 2014
anthony mills s3 videoCross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3...CVE-2013-72794.3 MediumJanuary 8, 2014
naxtech cms afroditiSQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute...CVE-2013-7278Public exploit7.5 HighJanuary 8, 2014
aphpkbMultiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0...CVE-2013-72774.3 MediumJanuary 8, 2014
recommend to a friend project to a friendCross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin...CVE-2013-72764.3 MediumJanuary 8, 2014
mybbCross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12...CVE-2013-72754.3 MediumJanuary 8, 2014
wallpaperscriptCross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated...CVE-2013-7274Public exploit3.5 LowJanuary 8, 2014
7mediaws edutracDirectory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote...CVE-2013-7097Public exploit5.0 MediumJanuary 8, 2014
linux kernelThe dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a...CVE-2013-7281Fix available4.9 MediumJanuary 8, 2014
redhat libvirtThe lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does...CVE-2013-6436Fix available2.1 LowJanuary 7, 2014
xenXen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not...CVE-2011-19364.6 MediumJanuary 7, 2014
xenThe instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service ...CVE-2011-17806.1 MediumJanuary 7, 2014
xenThe get_free_port function in Xen allows local authenticated DomU users to cause a denial of...CVE-2011-17637.7 HighJanuary 7, 2014
apache libcloudLibcloud does not properly scrub data when destroying a DigitalOcean nodeCVE-2013-6480Public exploitFix available2.1 LowJanuary 7, 2014
openstack havanaOpenStack Nova Router metadata queries are not restricted by tenantCVE-2013-6419Fix available5.0 MediumJanuary 7, 2014
cru-inc ditto forensic fieldstation, ditto forensic fieldstation firmware +1 moreThe write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a...CVE-2013-6884Public exploitEPSS 10.3%10.0 HighJanuary 7, 2014
cru-inc ditto forensic fieldstation, ditto forensic fieldstation firmware +1 moreCRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to...CVE-2013-6881Public exploitEPSS 12.6%10.0 HighJanuary 7, 2014
libreswanLibreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length...CVE-2013-45645.0 MediumJanuary 7, 2014
x libxfontStack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org...CVE-2013-6462Fix availableEPSS 10.3%9.3 HighJanuary 7, 2014
opensslThe ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS...CVE-2013-4353Fix availableEPSS 11.9%4.3 MediumJanuary 7, 2014
uclouvain openjpegOpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that...CVE-2013-68876.4 MediumJanuary 6, 2014
uclouvain openjpegOpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors...CVE-2013-60535.0 MediumJanuary 6, 2014
osgeo mapserverSQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in...CVE-2013-7262Fix available6.8 MediumJanuary 5, 2014
google chromeGoogle Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that...CVE-2012-28994.3 MediumJanuary 5, 2014
google chromeGoogle Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the...CVE-2012-28985.0 MediumJanuary 5, 2014
debian devscripts, linux +1 moreAn issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user...CVE-2013-7325Fix available8.8 HighJanuary 5, 2014
devscripts devel team devscriptsUscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted...CVE-2013-6888Fix available7.5 HighJanuary 5, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-6195EPSS 10.4%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-6194Public exploitEPSS 65.9%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-2350EPSS 10.4%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-2349EPSS 10.4%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-2348EPSS 10.4%10.0 HighJanuary 4, 2014
hp storage data protectorThe Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote...CVE-2013-2347Public exploitEPSS 66.4%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-2346EPSS 10.4%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-2345EPSS 10.4%10.0 HighJanuary 4, 2014
hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute...CVE-2013-2344EPSS 10.4%10.0 HighJanuary 4, 2014
realnetworks realplayerMultiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and...CVE-2013-7260Public exploitEPSS 66.9%7.5 HighJanuary 3, 2014
freerdpInteger overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP...CVE-2014-0791Fix available6.8 MediumJanuary 3, 2014
mini-stream castripperStack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute...CVE-2009-5137Public exploit7.5 HighJanuary 2, 2014
dotnetblogengine blogengine.netBlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes...CVE-2013-69535.0 MediumJanuary 2, 2014
web2ldapCross-site scripting (XSS) vulnerability in web2ldap 1.1.x before 1.1.49 allows remote attackers...CVE-2013-72584.3 MediumJanuary 2, 2014
codiadCross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject...CVE-2013-72574.3 MediumJanuary 2, 2014
opsviewCross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers...CVE-2013-72566.8 MediumJanuary 2, 2014
opsviewOpen redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to...CVE-2013-72555.8 MediumJanuary 2, 2014
opsviewCross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to...CVE-2013-72544.3 MediumJanuary 2, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open