Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
January

CVEs published in January 2014

517 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

moodlecourse/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x...CVE-2014-00095.5 MediumJanuary 20, 2014
moodlelib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x...CVE-2014-00084.0 MediumJanuary 20, 2014
cisco secure access control systemCross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS...CVE-2014-06684.3 MediumJanuary 20, 2014
dell powerconnect 3348, powerconnect 3524p, powerconnect 5324 +2 moreThe login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and...CVE-2013-36067.8 HighJanuary 20, 2014
dell powerconnect 3348, powerconnect 3524p, powerconnect 5324 +2 moreThe OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48,...CVE-2013-35956.8 MediumJanuary 20, 2014
dell powerconnect 3348, powerconnect 3524p, powerconnect 5324 +2 moreThe SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches...CVE-2013-359410.0 HighJanuary 20, 2014
drupalThe Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal,...CVE-2014-14764.0 MediumJanuary 20, 2014
drupalThe OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to...CVE-2014-1475Fix available7.5 HighJanuary 20, 2014
qemu, xen +1 moreThe qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other...CVE-2013-4375Fix available2.7 LowJanuary 19, 2014
apache tomcat, redhat jboss enterprise application platform, jboss enterprise portal platform +2 moreDeserialization of Untrusted Data in Apache TomcatCVE-2013-2185Fix availableDisputed7.5 HighJanuary 19, 2014
hexagon erdas er viewerStack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301...CVE-2013-34839.3 HighJanuary 19, 2014
hexagon erdas er viewerStack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS...CVE-2013-3482Public exploitEPSS 31.5%9.3 HighJanuary 19, 2014
mozilla network security servicesThe ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS...CVE-2013-1740Fix available5.8 MediumJanuary 18, 2014
httplib2 project httplib2, canonical ubuntu linux +1 morehttplib2 incorrectly checks SSL certificateCVE-2013-2037Fix available2.6 LowJanuary 18, 2014
linux kernelThe restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel...CVE-2014-1438Fix available4.7 MediumJanuary 18, 2014
vmware vcloud directorCross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3...CVE-2014-12116.8 MediumJanuary 17, 2014
vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0...CVE-2014-12083.3 LowJanuary 17, 2014
vmware esx, esxi +1 moreVMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of...CVE-2014-12074.3 MediumJanuary 17, 2014
torproject torTor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting...CVE-2013-7295Fix available4.0 MediumJanuary 17, 2014
sonatype nexusSonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and...CVE-2014-07927.5 HighJanuary 17, 2014
get-simple getsimple cmsMultiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote...CVE-2013-72434.3 MediumJanuary 17, 2014
conceptronic cipcamptiwl, cipcamptiwl 1.0 firmware +1 moreCross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL...CVE-2013-7204Public exploitEPSS 10.6%6.8 MediumJanuary 17, 2014
redhat libvirtRace condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows...CVE-2014-1447Public exploitFix available3.3 LowJanuary 17, 2014
redhat libvirtMultiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3)...CVE-2013-6458Fix available6.8 MediumJanuary 17, 2014
vessio netbillMultiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers...CVE-2012-66324.3 MediumJanuary 16, 2014
vessio netbillCross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2...CVE-2012-66316.8 MediumJanuary 16, 2014
rick mead media library categoriesMultiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1...CVE-2012-66304.3 MediumJanuary 16, 2014
xyzscripts newsletter managerMultiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2...CVE-2012-66296.8 MediumJanuary 16, 2014
xyzscripts newsletter managerMultiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2...CVE-2012-66284.3 MediumJanuary 16, 2014
xyzscripts newsletter managerCross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin...CVE-2012-66274.3 MediumJanuary 16, 2014
brian cabunac browser to email phone message systemSQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute...CVE-2012-6626Public exploit7.5 HighJanuary 16, 2014
vasthtml forumpressSQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin...CVE-2012-6625Public exploit7.5 HighJanuary 16, 2014
mightymess soundcloud is goldCross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress...CVE-2012-6624Public exploit4.3 MediumJanuary 16, 2014
vasthtml forumpressCross-site scripting (XSS) vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum...CVE-2012-66234.3 MediumJanuary 16, 2014
vasthtml forumpressMultiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP...CVE-2012-6622Public exploit4.3 MediumJanuary 16, 2014
get-simple getsimple cmsMultiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and...CVE-2012-66214.3 MediumJanuary 16, 2014
horde kronolith h4Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in...CVE-2012-6620Fix available4.3 MediumJanuary 16, 2014
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere...CVE-2013-67253.5 LowJanuary 16, 2014
ibm websphere application serverIBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching...CVE-2013-63303.5 LowJanuary 16, 2014
ibm websphere application serverIBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5...CVE-2013-63254.3 MediumJanuary 16, 2014
cisco secure access control systemThe RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce...CVE-2014-06676.3 MediumJanuary 16, 2014
cisco jabberDirectory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(...CVE-2014-06664.3 MediumJanuary 16, 2014
cisco secure access control systemThe web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows...CVE-2014-065010.0 HighJanuary 16, 2014
cisco secure access control systemThe RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly...CVE-2014-06499.0 HighJanuary 16, 2014
cisco secure access control systemThe RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly...CVE-2014-064810.0 HighJanuary 16, 2014
allegrosoft rompager, dlink dsl-2640r, dsl-2641r +4 more +6 moreCross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL...CVE-2013-67864.3 MediumJanuary 16, 2014
cisco webex meetings serverThe web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows...CVE-2013-66874.0 MediumJanuary 16, 2014
debian linux, google chrome, opensuse +2 moreUse-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700...CVE-2013-66467.5 HighJanuary 16, 2014
debian linux, google chrome, opensuse +2 moreUse-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser...CVE-2013-66456.8 MediumJanuary 16, 2014
debian linux, google chrome, opensuse +2 moreMultiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before...CVE-2013-66447.5 HighJanuary 16, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open