Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
January

CVEs published in January 2014

517 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

mcafee vulnerability managerCross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows...CVE-2013-5094Public exploit4.3 MediumJanuary 28, 2014
google chrome, debian linux, opensuse +2 moreThe StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16,...CVE-2013-6650Fix available7.5 HighJanuary 28, 2014
google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg...CVE-2013-66497.5 HighJanuary 28, 2014
debian axiomaxiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a...CVE-2014-1640Fix available3.3 LowJanuary 28, 2014
debian syncevolutionsyncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe...CVE-2014-1639Fix available3.3 LowJanuary 28, 2014
debian localepurge(1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to...CVE-2014-1638Fix available3.3 LowJanuary 28, 2014
python pyxdgpyxdg Arbitrary File Overwrite via Race ConditionCVE-2014-1624Fix available3.3 LowJanuary 28, 2014
python rplyRPLY Predictable Tmpfile Names Allows Cache SpoofingCVE-2014-1604Fix available2.1 LowJanuary 28, 2014
starbucksThe Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the...CVE-2014-06472.1 LowJanuary 28, 2014
enghouseinteractive ivr proAn unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive...CVE-2013-683810.0 HighJanuary 28, 2014
bitweaverDirectory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows...CVE-2012-5192Public exploitEPSS 52.5%5.0 MediumJanuary 28, 2014
isc bindname.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when...CVE-2015-4620Fix availableEPSS 38.8%7.8 HighJanuary 27, 2014
isc bindnamed in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC...CVE-2015-1349Fix availableEPSS 22.9%5.4 MediumJanuary 27, 2014
isc bindISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...CVE-2014-8500Fix availableEPSS 59.0%7.8 HighJanuary 27, 2014
ibm security directory server, tivoli directory server, global security kit +2 moreIBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server ...CVE-2013-67477.1 HighJanuary 27, 2014
citrix gotomeetingThe Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing...CVE-2014-1664Public exploit5.0 MediumJanuary 26, 2014
drupal** DISPUTED ** Cross-site scripting (XSS) vulnerability in the EventCalendar module for Drupal 7...CVE-2014-1607Disputed4.3 MediumJanuary 26, 2014
joomla com jvcommentSQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla!...CVE-2014-0794Public exploit4.3 MediumJanuary 26, 2014
tntnetframework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain...CVE-2013-7299Fix available5.0 MediumJanuary 26, 2014
tntnet cxxtoolsquery_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service ...CVE-2013-7298Fix available5.0 MediumJanuary 26, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote...CVE-2013-71434.3 MediumJanuary 26, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows...CVE-2013-71424.3 MediumJanuary 26, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows...CVE-2013-71414.3 MediumJanuary 26, 2014
open-xchange appsuiteXML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4...CVE-2013-71404.0 MediumJanuary 26, 2014
libreswanLibreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer...CVE-2013-64675.0 MediumJanuary 26, 2014
xelerance openswanOpenswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer...CVE-2013-6466Fix available5.0 MediumJanuary 26, 2014
brion vibber centralauth extension, mediawiki +1 moreThe CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x...CVE-2013-43047.5 HighJanuary 26, 2014
xenThe do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not...CVE-2014-1666Fix available8.3 HighJanuary 26, 2014
xenThe IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a...CVE-2014-1642Fix available4.4 MediumJanuary 26, 2014
baseurl yumThe installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly...CVE-2014-0022Fix available5.0 MediumJanuary 26, 2014
pivotal software spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-6429Fix availableEPSS 90.6%6.8 MediumJanuary 26, 2014
checkpoint session authentication agentCheck Point Session Authentication Agent allows remote attackers to obtain sensitive information ...CVE-2014-16735.0 MediumJanuary 26, 2014
checkpoint management server, security gateway +1 moreCheck Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing...CVE-2014-16724.0 MediumJanuary 26, 2014
dell kace k1000 systems management appliance, kace k1000 systems management appliance software, kace k1000 systems management virtual appliance +2 more +4 moreMultiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow...CVE-2014-1671Public exploit6.5 MediumJanuary 26, 2014
galen charlton marc-xmlXML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used...CVE-2014-1626Fix available5.0 MediumJanuary 26, 2014
cmu fliteThe play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify...CVE-2014-0027Fix available3.3 LowJanuary 26, 2014
freedesktop popplerThe JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the...CVE-2013-72965.0 MediumJanuary 26, 2014
franklinfueling ts-550 evo, ts-550 evo firmware +1 moreFranklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has...CVE-2013-7248Public exploit10.0 HighJanuary 26, 2014
franklinfueling ts-550 evo, ts-550 evo firmware +1 morecgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other...CVE-2013-7247Public exploit5.0 MediumJanuary 26, 2014
burden project burdenThe "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to...CVE-2013-7137Public exploitEPSS 16.1%9.8 CriticalJanuary 26, 2014
yahoo toolbarCross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0...CVE-2013-68534.3 MediumJanuary 26, 2014
secunia csi agentSecunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when...CVE-2013-53643.6 LowJanuary 26, 2014
ge intelligent platforms proficy hmi\%2fscada cimplicity, intelligent platforms proficy hmi\/scada cimplicity, intelligent platforms proficy process systems with cimplicity +2 more +4 moreGE Proficy HMI/SCADA Path TraversalCVE-2014-07516.8 January 25, 2014
ge proficy hmi/scada - cimplicity, proficy process systems with cimplicity, intelligent platforms proficy hmi\%2fscada cimplicity +2 more +4 moreGE Proficy HMI/SCADA Path TraversalCVE-2014-0750Public exploitEPSS 69.8%7.5 January 25, 2014
cisco secure access control systemThe portal interface in Cisco Secure Access Control System (ACS) does not properly manage...CVE-2014-06785.5 MediumJanuary 25, 2014
cisco video surveillance indoor fixed dome ip hd cameraMultiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video...CVE-2014-06734.3 MediumJanuary 25, 2014
microsoft bingThe Microsoft Bing application before 4.2.1 for Android allows remote attackers to install...CVE-2014-1670EPSS 13.7%6.8 MediumJanuary 25, 2014
eviware soapuiCode injection via property expansion in SoapUICVE-2014-1202Public exploitFix available9.3 HighJanuary 25, 2014
pocoo jinja2Incorrect Privilege Assignment in Jinja2CVE-2014-1402Fix available4.4 MediumJanuary 24, 2014
detlef pilzecker proc\The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a...CVE-2013-7135Fix available7.2 HighJanuary 24, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open