Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
January

CVEs published in January 2014

517 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle supply chain products suiteUnspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...CVE-2013-5880Public exploitEPSS 59.6%5.0 MediumJanuary 15, 2014
oracle fusion middlewareUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...CVE-2013-58796.8 MediumJanuary 15, 2014
oracle supply chain products suite, supply chain products suite sql-server +1 moreUnspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...CVE-2013-5877Public exploitEPSS 55.0%5.0 MediumJanuary 15, 2014
oracle sunosUnspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability...CVE-2013-58764.9 MediumJanuary 15, 2014
oracle sunosUnspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity and...CVE-2013-58752.7 LowJanuary 15, 2014
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2013-58741.7 LowJanuary 15, 2014
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2013-58735.0 MediumJanuary 15, 2014
oracle sunosUnspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability...CVE-2013-58722.1 LowJanuary 15, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in...CVE-2013-58713.5 LowJanuary 15, 2014
oracle javafx, hp jdk, jre +6 more +8 moreUnspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to...CVE-2013-58706.8 MediumJanuary 15, 2014
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11...CVE-2013-58695.0 MediumJanuary 15, 2014
oracle supply chain products suiteUnspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in...CVE-2013-58683.5 LowJanuary 15, 2014
oracle mysqlUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows...CVE-2013-58606.8 MediumJanuary 15, 2014
oracle database serverUnspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0...CVE-2013-58584.0 MediumJanuary 15, 2014
oracle database serverUnspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0...CVE-2013-58535.0 MediumJanuary 15, 2014
sun sunosUnspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality,...CVE-2013-58346.2 MediumJanuary 15, 2014
sun sunosUnspecified vulnerability in Oracle Solaris 8 and 9 allows local users to affect availability via...CVE-2013-58334.9 MediumJanuary 15, 2014
oracle sunosUnspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect...CVE-2013-58214.6 MediumJanuary 15, 2014
oracle fusion middlewareUnspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion...CVE-2013-58082.6 LowJanuary 15, 2014
oracle supply chain products suite, supply chain products suite sql-server +1 moreUnspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...CVE-2013-5795Public exploitEPSS 59.5%5.0 MediumJanuary 15, 2014
oracle fusion middlewareUnspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware...CVE-2013-57857.5 HighJanuary 15, 2014
oracle database serverUnspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0...CVE-2013-57643.5 LowJanuary 15, 2014
oracle hyperion interactive reportingUnspecified vulnerability in the Hyperion Strategic Finance component in Oracle Hyperion 11.1.2.1...CVE-2013-38307.1 HighJanuary 15, 2014
juniper junos, srx100, srx110 +10 more +12 moreJuniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12...CVE-2014-06177.1 HighJanuary 14, 2014
juniper junosJuniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12...CVE-2014-06167.1 HighJanuary 14, 2014
juniper junosJuniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12...CVE-2014-06157.2 HighJanuary 14, 2014
juniper junosThe XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before...CVE-2014-06137.1 HighJanuary 14, 2014
apache cloudstackThe (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow...CVE-2014-00314.0 MediumJanuary 14, 2014
nagiosOff-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0...CVE-2013-7205Fix available6.4 MediumJanuary 14, 2014
icinga, nagios +1 moreMultiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9...CVE-2013-7108Public exploitFix availableEPSS 61.6%5.5 MediumJanuary 14, 2014
icingaCross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and...CVE-2013-71076.8 MediumJanuary 14, 2014
icingaMultiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1...CVE-2013-71066.5 MediumJanuary 14, 2014
apache cloudstackThe virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in...CVE-2013-63982.8 LowJanuary 14, 2014
isc bindThe query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8...CVE-2014-0591Fix availableEPSS 32.7%2.6 LowJanuary 14, 2014
codeaurora android-msm, qualcomm quic mobile station modem kernel +1 moreMultiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera...CVE-2013-61236.9 MediumJanuary 14, 2014
memcachedmemcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial...CVE-2013-7291Fix available1.8 LowJanuary 13, 2014
memcachedThe do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when...CVE-2013-7290Fix available1.8 LowJanuary 13, 2014
memcachedThe process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4...CVE-2013-0179Fix available1.8 LowJanuary 13, 2014
fedoraproject fedoraDirectory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12...CVE-2010-07466.2 MediumJanuary 13, 2014
vasco identikey authentication serverVASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass...CVE-2013-72923.5 LowJanuary 13, 2014
springsource spring frameworkMissing XML Validation in Spring FrameworkCVE-2013-7315Fix available6.8 MediumJanuary 13, 2014
springsource spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-4152Fix availableEPSS 25.6%6.8 MediumJanuary 13, 2014
skyarts neofilerDirectory traversal vulnerability in the NeoFiler application 5.4.3 and earlier, NeoFiler Free...CVE-2014-08055.8 MediumJanuary 12, 2014
cgene security file managerDirectory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and...CVE-2014-08045.8 MediumJanuary 12, 2014
yuichiro okuyama tetra filer, tetra filer free +1 moreDirectory traversal vulnerability in the tetra filer application 2.3.1 and earlier for Android 4...CVE-2014-08035.8 MediumJanuary 12, 2014
aokitaka zip with pass, zip with pass pro +1 moreDirectory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier,...CVE-2014-08025.8 MediumJanuary 12, 2014
cisco rvs4000, wap4410n, wrvs4400n +3 more +5 moreThe Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x...CVE-2014-0659Public exploitEPSS 73.8%10.0 HighJanuary 12, 2014
atmailMultiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2...CVE-2013-60286.8 MediumJanuary 12, 2014
atmailCross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote...CVE-2013-6017Public exploit4.3 MediumJanuary 12, 2014
atmailUnspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and...CVE-2013-503410.0 HighJanuary 12, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open