Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0...CVE-2014-16794.3 MediumJanuary 5, 2015
privoxy MageiaUpdated privoxy package fixes security vulnerabilitiesMGASA-2015-0003Fix availableNo scoreJanuary 5, 2015
typo3Typo3 Vulnerable to Cache PoisoningCVE-2014-9509Fix available7.5 HighJanuary 4, 2015
typo3Typo3 Open Redirect In Frontend RenderingCVE-2014-9508Fix available4.3 MediumJanuary 4, 2015
mediawikiMediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is...CVE-2014-95072.6 LowJanuary 4, 2015
mantisbtMantisBT before 1.2.18 does not properly check permissions when sending an email that indicates...CVE-2014-95063.5 LowJanuary 4, 2015
rrdtool project rrdtoolFormat string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows...CVE-2013-2131Public exploitFix availableEPSS 10.6%5.0 MediumJanuary 4, 2015
microweberSQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote...CVE-2014-9464Public exploit7.5 HighJanuary 3, 2015
memht portalMultiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote...CVE-2010-53206.8 MediumJanuary 3, 2015
kan-studio kandidat cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote...CVE-2010-53196.8 MediumJanuary 3, 2015
basic-cms sweetriceThe password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote...CVE-2010-5318Public exploit4.3 MediumJanuary 3, 2015
basic-cms sweetriceMultiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote...CVE-2010-5317Public exploit7.5 HighJanuary 3, 2015
basic-cms sweetriceCross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows...CVE-2010-53164.3 MediumJanuary 3, 2015
chialab \& channelweb beditaMultiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote...CVE-2010-5315Public exploit6.8 MediumJanuary 3, 2015
chialab \& channelweb beditaCross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1...CVE-2010-53144.3 MediumJanuary 3, 2015
reality66 cart66 liteDirectory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for...CVE-2014-94613.5 LowJanuary 2, 2015
ipcopcgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated...CVE-2013-74186.5 MediumJanuary 2, 2015
justin klein wp-vipergbMultiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11...CVE-2014-94606.8 MediumJanuary 2, 2015
e107Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users...CVE-2014-94596.8 MediumJanuary 2, 2015
hex-rays idaHeap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative...CVE-2014-945810.0 HighJanuary 2, 2015
pmb services pmbSQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows...CVE-2014-9457Public exploit6.5 MediumJanuary 2, 2015
don ho notepad\+\+Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long...CVE-2014-9456Public exploitEPSS 10.7%10.0 HighJanuary 2, 2015
cts projects\&software classadSQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote...CVE-2014-94557.5 HighJanuary 2, 2015
simple sticky footer project sticky footerMultiple cross-site request forgery (CSRF) vulnerabilities in the Simple Sticky Footer plugin...CVE-2014-94546.8 MediumJanuary 2, 2015
simple visitor stat project visitor statMultiple cross-site scripting (XSS) vulnerabilities in simple-visitor-stat.php in the Simple...CVE-2014-94534.3 MediumJanuary 2, 2015
vdgsecurity vdg senseDirectory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote...CVE-2014-94525.0 MediumJanuary 2, 2015
vdgsecurity vdg senseMultiple stack-based buffer overflows in the DIVA web service API (/webservice) in VDG Security...CVE-2014-94517.5 HighJanuary 2, 2015
zabbixMultiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22,...CVE-2014-9450Fix available7.5 HighJanuary 2, 2015
exiv2, fedoraproject fedora +1 moreBuffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows...CVE-2014-9449Fix available5.0 MediumJanuary 2, 2015
mini-stream rm-mp3 converterBuffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to...CVE-2014-9448Public exploit7.5 HighJanuary 2, 2015
kohaMultiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and...CVE-2014-94464.3 MediumJanuary 2, 2015
installatron gatequest file managerSQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows...CVE-2014-9445Public exploit7.5 HighJanuary 2, 2015
frontend uploader project uploaderCross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress...CVE-2014-94444.3 MediumJanuary 2, 2015
nyu opensso integrationOpen redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex...CVE-2014-72945.8 MediumJanuary 2, 2015
nyu opensso integrationCross-site scripting (XSS) vulnerability in the logon page in NYU OpenSSO Integration 2.1 and...CVE-2014-72934.3 MediumJanuary 2, 2015
relevanssiCross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress...CVE-2014-94434.3 MediumJanuary 2, 2015
reality66 cart66 liteSQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for...CVE-2014-94426.5 MediumJanuary 2, 2015
lightbox photo gallery project photo galleryMultiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1...CVE-2014-94416.8 MediumJanuary 2, 2015
phpmyrecipes project phpmyrecipesSQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to...CVE-2014-9440Public exploit7.5 HighJanuary 2, 2015
efssoft easy file sharing web serverCross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote...CVE-2014-9439Public exploit4.3 MediumJanuary 2, 2015
vbulletinCross-site request forgery (CSRF) vulnerability in the Moderator Control Panel in vBulletin 4.2.2...CVE-2014-94386.8 MediumJanuary 2, 2015
sliding social icons project social iconsMultiple cross-site request forgery (CSRF) vulnerabilities in the Sliding Social Icons plugin 1...CVE-2014-94376.8 MediumJanuary 2, 2015
sysaidAbsolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers...CVE-2014-9436Public exploit5.0 MediumJanuary 2, 2015
absolutengine absolut engineMultiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to...CVE-2014-9435Public exploit6.5 MediumJanuary 2, 2015
absolutengine absolut engineCross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative...CVE-2014-9434Public exploit3.5 LowJanuary 2, 2015
ipcopCross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall)...CVE-2013-74174.3 MediumJanuary 2, 2015
elfutils project elfutilsDirectory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in...CVE-2014-9447Fix available6.4 MediumJanuary 2, 2015
linux kernelThe batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N....CVE-2014-9428Fix available7.8 HighJanuary 2, 2015
diafan diafan.cmsMultiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote...CVE-2011-5318Public exploit6.8 MediumJanuary 1, 2015
wondercmsCross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote...CVE-2011-53174.3 MediumJanuary 1, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open