Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
January

CVEs published in January 2014

517 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

doug poulin command school student management systemCommand School Student Management System 1.06.01 does not properly restrict access to sw/backup...CVE-2014-1637Public exploit5.0 MediumJanuary 22, 2014
doug poulin command school student management systemMultiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow...CVE-2014-1636Public exploit7.5 HighJanuary 22, 2014
e107fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote...CVE-2013-73054.3 MediumJanuary 22, 2014
checkpoint endpoint security mi server r73Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509...CVE-2013-73044.3 MediumJanuary 22, 2014
e107Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in...CVE-2013-2750Public exploit4.3 MediumJanuary 22, 2014
cisco mediasenseThe Search and Play interface in Cisco MediaSense does not properly enforce authorization...CVE-2014-06724.0 MediumJanuary 22, 2014
cisco mediasenseOpen redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to...CVE-2014-06715.8 MediumJanuary 22, 2014
cisco mediasenseCross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense...CVE-2014-06704.3 MediumJanuary 22, 2014
cisco asr 5000 series softwareThe Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on...CVE-2014-06695.0 MediumJanuary 22, 2014
ibm filenet content manager, filenet case foundation, filenet p8 business process manager +2 moreCross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info...CVE-2013-67464.3 MediumJanuary 22, 2014
asus rt-ac66u firmware, rt-n56u firmware, tm-ac1900 firmware +2 moreMultiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with...CVE-2013-6343Public exploit10.0 HighJanuary 22, 2014
openstack swiftOpenStack Swift Discloses Secret URLs to Timing AttackCVE-2014-0006Fix available4.3 MediumJanuary 22, 2014
apple mac os x, nvidia gpu driver +1 moreUnspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows...CVE-2013-5987Fix available7.2 HighJanuary 21, 2014
nvidia gpu driverUnspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 has...CVE-2013-5986Fix available10.0 HighJanuary 21, 2014
mcafee superscanCross-site scripting (XSS) vulnerability in McAfee SuperScan 4.0 allows remote attackers to...CVE-2013-4884Public exploit4.3 MediumJanuary 21, 2014
redhat enterprise virtualizationUnquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise...CVE-2013-21527.2 HighJanuary 21, 2014
redhat enterprise virtualizationUnquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2...CVE-2013-21517.2 HighJanuary 21, 2014
openstack python-keystoneclientpython-keystoneclient missing expiration check in PKI token validationCVE-2013-2104Fix available5.5 MediumJanuary 21, 2014
simon mcvittie telepathy gabbleA certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3...CVE-2013-17695.0 MediumJanuary 21, 2014
lenovo thinkpad bluetooth with enhanced data rate softwareUntrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software...CVE-2013-13619.3 HighJanuary 21, 2014
apple ipados, iphone os, macos +7 more +9 moreexpat 2.1.0 and earlier does not properly handle entities expansion unless an application...CVE-2013-0340Fix availableEPSS 19.4%6.8 MediumJanuary 21, 2014
kernel util-linux(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local...CVE-2013-0157Fix available2.1 LowJanuary 21, 2014
f5 big-ip configuration utilityXML External Entity (XXE) vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0...CVE-2012-2997Public exploit4.0 MediumJanuary 21, 2014
apple cups, canonical ubuntu linux +1 morelppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...CVE-2013-6891Fix available1.2 LowJanuary 21, 2014
zabbixMultiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1,...CVE-2013-5743Public exploitFix availableEPSS 80.0%9.8 CriticalJanuary 21, 2014
elinks MageiaUpdated elinks package fixes a security vulnerabilityMGASA-2014-0014Fix availableNo scoreJanuary 21, 2014
2glux com sexypollingSQL injection vulnerability in vote.php in the 2Glux Sexy Polling (com_sexypolling) component...CVE-2013-7219Public exploit7.5 HighJanuary 21, 2014
seagate blackarmor nas 220, blackarmor nas 220 firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220...CVE-2013-6922Public exploit6.8 MediumJanuary 21, 2014
plonePlone Open Redirection vulnerability via next parameterCVE-2013-4200Public exploitFix available5.8 MediumJanuary 21, 2014
hornbill supportworks itsmSQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through...CVE-2013-2594Public exploit7.5 HighJanuary 21, 2014
hiox guest bookMultiple cross-site scripting (XSS) vulnerabilities in add.php in HIOX Guest Book (HGB) 5.0 allow...CVE-2014-16204.3 MediumJanuary 21, 2014
cubicfactory cubic cmsMultiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers...CVE-2014-1619Public exploit7.5 HighJanuary 21, 2014
uaepd shopping cart scriptMultiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to...CVE-2014-1618Public exploit7.5 HighJanuary 21, 2014
freebsdStack-based buffer overflow in lib/snmpagent.c in bsnmpd, as used in FreeBSD 8.3 through 10.0,...CVE-2014-14525.8 MediumJanuary 21, 2014
o-dyn collabtiveSQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote...CVE-2013-6872Public exploit6.5 MediumJanuary 21, 2014
ibm platform symphonyIBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same...CVE-2013-63054.3 MediumJanuary 21, 2014
ecava integraxorEcava IntegraXor Stack-based Buffer OverflowCVE-2014-07537.8 January 21, 2014
mw6 tech maxicode activex controls, mw6tech maxicode activex control, mw6 tech aztec activex controls +3 more +5 moreMW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.CVE-2013-6040Public exploit9.3 HighJanuary 21, 2014
ibm tivoli federated identity managerThe Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before...CVE-2013-54292.1 LowJanuary 21, 2014
ibm bladecenter, flex system manager node 7955, flex system manager node 8731 +28 more +30 moreIntegrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers...CVE-2013-40304.3 MediumJanuary 21, 2014
wordpresswp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly...CVE-2012-6635Fix available4.0 MediumJanuary 21, 2014
wordpresswp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive...CVE-2012-6634Fix available6.4 MediumJanuary 21, 2014
wordpressCross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3...CVE-2012-6633Fix available4.3 MediumJanuary 21, 2014
wordpresswp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability...CVE-2011-5270Fix available4.0 MediumJanuary 21, 2014
wordpressWordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site...CVE-2010-5297Fix available2.1 LowJanuary 21, 2014
wordpresswp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used,...CVE-2010-5296Fix available4.9 MediumJanuary 21, 2014
wordpressCross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might...CVE-2010-5295Fix available4.3 MediumJanuary 21, 2014
wordpressMultiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials...CVE-2010-5294Fix available4.3 MediumJanuary 21, 2014
wordpresswp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and...CVE-2010-5293Fix available5.8 MediumJanuary 21, 2014
moodle, fedoraproject fedora +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle...CVE-2014-00106.8 MediumJanuary 20, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open