Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
January

CVEs published in January 2014

517 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

atmailUnspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and...CVE-2013-503310.0 HighJanuary 12, 2014
atmailUnspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and...CVE-2013-503210.0 HighJanuary 12, 2014
atmailUnspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and...CVE-2013-503110.0 HighJanuary 12, 2014
juniper junos, srx100, srx110 +10 more +12 moreJuniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before...CVE-2014-06187.8 HighJanuary 11, 2014
apache santuario xml security for javaImproper Input Validation in Apache Santuario XML SecurityCVE-2013-4517Fix available4.3 MediumJanuary 11, 2014
opensuseThe image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root...CVE-2013-37134.4 MediumJanuary 11, 2014
redhat manageiq enterprise virtualization manager, cloudforms management engine +1 moreSQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management...CVE-2013-2050EPSS 15.7%7.5 HighJanuary 11, 2014
graphvizStack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0...CVE-2014-0978Fix available9.3 HighJanuary 10, 2014
sixapart movabletypeCross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x...CVE-2014-0977Fix available4.3 MediumJanuary 10, 2014
conceptronic c54apm, c54apm firmware +1 moreThe Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for...CVE-2014-14087.8 HighJanuary 10, 2014
conceptronic c54apm, c54apm firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with...CVE-2014-14074.3 MediumJanuary 10, 2014
conceptronic c54apm, c54apm firmware +1 moreCRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point...CVE-2014-14064.3 MediumJanuary 10, 2014
conceptronic c54apm, c54apm firmware +1 moreMultiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code...CVE-2014-14055.8 MediumJanuary 10, 2014
cisco unity connectionThe server in Cisco Unity Connection allows remote authenticated users to cause a denial of...CVE-2014-06646.8 MediumJanuary 10, 2014
cisco secure access control systemCross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control...CVE-2014-06634.3 MediumJanuary 10, 2014
cisco unified ip phone 9951, unified ip phone 9971, unified ip phones 9900 series firmware +2 moreCisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration)...CVE-2014-06585.4 MediumJanuary 10, 2014
aphpkbMultiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase ...CVE-2013-72894.3 MediumJanuary 10, 2014
mybbCross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser...CVE-2013-72884.3 MediumJanuary 10, 2014
symantec endpoint protectionUnquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11...CVE-2013-50117.2 HighJanuary 10, 2014
symantec endpoint protectionThe Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP...CVE-2013-50104.6 MediumJanuary 10, 2014
symantec endpoint protectionThe Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before...CVE-2013-50097.4 HighJanuary 10, 2014
amberdms billing systemAmberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured,...CVE-2010-52921.9 LowJanuary 10, 2014
amberdms billing systemAmberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after...CVE-2010-52916.4 MediumJanuary 10, 2014
graphvizStack-based buffer overflow in the chkNum function in lib/cgraph/scan.l in Graphviz 2.34.0 allows...CVE-2014-1236Fix available10.0 HighJanuary 10, 2014
mantisbtCross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1...CVE-2013-44603.5 LowJanuary 10, 2014
paratrooper-newrelic project paratrooper-newrelicParatrooper-newrelic Exposes of Sensitive Information to an Unauthorized ActorCVE-2014-12342.1 LowJanuary 10, 2014
tobias maier paratrooper-pingdomLocal API Login Credentials Disclosure in paratrooper-pingdomCVE-2014-12332.1 LowJanuary 10, 2014
nisuta ns-wir150ne, ns-wir300n, ns-wir150ne firmware +1 more +3 moreThe management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS...CVE-2013-7282Public exploit10.0 HighJanuary 10, 2014
cisco secure access control systemCross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control...CVE-2013-69744.3 MediumJanuary 10, 2014
ibm atlas ediscovery process management, atlas suite, disposal and governance management for it +1 more +3 moreIBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance...CVE-2013-63346.4 MediumJanuary 10, 2014
ibm atlas ediscovery process management, atlas suite, disposal and governance management for it +1 more +3 moreSQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6...CVE-2013-63217.5 HighJanuary 10, 2014
cisco libsrtp, fedoraproject fedora, opensuse +2 moreBuffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a...CVE-2013-2139Fix available2.6 LowJanuary 10, 2014
libreswanRace condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora...CVE-2013-72839.3 HighJanuary 9, 2014
cynthia fridsma horizon quick content management systemSQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0...CVE-2013-7139Public exploit7.5 HighJanuary 9, 2014
horizon quick content management system project quick content management systemDirectory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management...CVE-2013-71385.0 MediumJanuary 9, 2014
seagate blackarmor nas 220, blackarmor nas 220 firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with...CVE-2013-6923Public exploit4.3 MediumJanuary 9, 2014
ecava integraxorEcava IntegraXor Exposure of Access Control List Files to an Unauthorized Control SphereCVE-2014-07527.5 January 9, 2014
qnap qtsAbsolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote...CVE-2013-71747.8 HighJanuary 9, 2014
synology diskstation managerwebman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4...CVE-2013-6955Public exploitEPSS 84.6%10.0 HighJanuary 9, 2014
open-xchange appsuiteMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and...CVE-2013-69974.3 MediumJanuary 9, 2014
google picasaStack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow...CVE-2013-53597.5 HighJanuary 9, 2014
google picasaPicasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory...CVE-2013-53587.5 HighJanuary 9, 2014
google picasaInteger overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote...CVE-2013-53577.5 HighJanuary 9, 2014
google picasaInteger underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote...CVE-2013-53497.5 HighJanuary 9, 2014
cisco unified communications managerThe administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier...CVE-2014-06574.0 MediumJanuary 8, 2014
cisco context directory agentCisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of...CVE-2014-06564.0 MediumJanuary 8, 2014
cisco adaptive security applianceThe Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software...CVE-2014-06554.3 MediumJanuary 8, 2014
cisco context directory agentCisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay...CVE-2014-06544.3 MediumJanuary 8, 2014
cisco adaptive security applianceThe Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software...CVE-2014-06534.3 MediumJanuary 8, 2014
cisco context directory agentCross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent ...CVE-2014-06524.3 MediumJanuary 8, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open