Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

vdgsecurity vdg senseVDG Security SENSE (formerly DIVA) before 2.3.15 allows remote attackers to bypass authentication...CVE-2014-95756.4 MediumJanuary 8, 2015
libsndfile project libsndfile, canonical ubuntu linux, debian linux +2 more +4 moreThe sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified...CVE-2014-9496Fix available2.1 LowJanuary 8, 2015
haxx libcurl, apple mac os x +1 moreThe darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39...CVE-2014-81515.8 MediumJanuary 8, 2015
redcloth library, debian linux +1 moreRedCloth Cross-site Scripting vulnerabilityCVE-2012-6684Fix available4.3 MediumJanuary 8, 2015
vinojcardoza ajax post searchSQL injection vulnerability in the "the_search_function" function in cardoza_ajax_search.php in...CVE-2012-58537.5 HighJanuary 8, 2015
file project fileThe ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via...CVE-2014-9620Fix available5.0 MediumJanuary 8, 2015
deliciousdays cformsiiUnrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier...CVE-2014-9473Public exploitEPSS 13.8%7.5 HighJanuary 8, 2015
haxx libcurl, canonical ubuntu linux, debian linux +2 moreCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...CVE-2014-8150Fix available4.3 MediumJanuary 8, 2015
xen, opensuse +1 moreUse-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a...CVE-2015-0361Fix available7.8 HighJanuary 7, 2015
sap netweaver business client for htmlMultiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for...CVE-2014-95694.3 MediumJanuary 7, 2015
redhat openstack, openstack image registry and delivery service \(glance\) +1 moreThe V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4...CVE-2014-9493Fix available5.5 MediumJanuary 7, 2015
projectsendUnrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100...CVE-2014-9567Public exploitEPSS 43.3%7.5 HighJanuary 7, 2015
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4...CVE-2014-89934.3 MediumJanuary 7, 2015
zohocorp manageengine adselfservice plusCross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build...CVE-2014-37794.3 MediumJanuary 7, 2015
webmin MageiaUpdated webmin packages fix security vulnerabilitiesMGASA-2015-0007Fix availableNo scoreJanuary 7, 2015
libpng, apple mac os x +1 moreHeap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x...CVE-2014-9495Public exploitFix available10.0 HighJanuary 7, 2015
emc documentum wdkEMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for...CVE-2014-46395.0 MediumJanuary 7, 2015
emc documentum wdkEMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame...CVE-2014-46385.0 MediumJanuary 7, 2015
emc documentum wdkOpen redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote...CVE-2014-46376.4 MediumJanuary 7, 2015
emc documentum wdkCross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK)...CVE-2014-46366.8 MediumJanuary 7, 2015
emc documentum wdkMultiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK)...CVE-2014-46354.3 MediumJanuary 7, 2015
humhubSQL injection vulnerability in the actionIndex function in protected/modules_core/notification...CVE-2014-9528Public exploit7.5 HighJanuary 6, 2015
apache poi, fedoraproject fedora +1 moreLoop with Unreachable Exit Condition in Apache POICVE-2014-9527Fix available5.0 MediumJanuary 6, 2015
redhat libvirtThe qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly...CVE-2014-8131Fix available4.0 MediumJanuary 6, 2015
paloaltonetworks pan-osCross-site scripting (XSS) vulnerability in the web-based device management interface in Palo...CVE-2014-37644.3 MediumJanuary 6, 2015
apache solrImproper Neutralization of Input During Web Page Generation in Apache SolrCVE-2014-3628Fix available4.3 MediumJanuary 6, 2015
canonical ubuntu linux, linuxcontainers cgmanager +1 morecmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows...CVE-2014-1425Fix available2.1 LowJanuary 6, 2015
libevent project libevent, debian linux +1 moreMultiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2...CVE-2015-6525Fix available7.5 HighJanuary 6, 2015
mantisbt, debian linux +1 moreThe string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly...CVE-2014-92724.3 MediumJanuary 6, 2015
mantisbt, debian linux +1 moreCross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows...CVE-2014-92715.4 MediumJanuary 6, 2015
mantisbt, debian linux +1 moreCross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x...CVE-2014-92692.6 LowJanuary 6, 2015
libevent project libevent, debian linux +1 moreMultiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0...CVE-2014-6272Fix available7.5 HighJanuary 6, 2015
mantisbt, debian linux +1 moreA cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report...CVE-2013-19345.4 MediumJanuary 6, 2015
mantis, mantisbt, debian linux +2 moreAn access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to...CVE-2013-18114.3 MediumJanuary 6, 2015
concrete5, concretecms concrete cms +1 moreMultiple cross-site scripting (XSS) vulnerabilities in concrete5 5.7.2.1, 5.7.2, and earlier...CVE-2014-95264.3 MediumJanuary 5, 2015
timed popup project popupMultiple cross-site request forgery (CSRF) vulnerabilities in the Timed Popup (wp-timed-popup)...CVE-2014-95256.8 MediumJanuary 5, 2015
facebook like box project like boxMultiple cross-site request forgery (CSRF) vulnerabilities in the Facebook Like Box (cardoza...CVE-2014-95246.8 MediumJanuary 5, 2015
smartcat our team showcaseMultiple cross-site request forgery (CSRF) vulnerabilities in the Our Team Showcase (our-team...CVE-2014-95236.8 MediumJanuary 5, 2015
papoo cms papoo lightMultiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow...CVE-2014-9522Public exploit4.3 MediumJanuary 5, 2015
infinitewpUnrestricted file upload vulnerability in uploadScript.php in InfiniteWP Admin Panel before 2.4.4...CVE-2014-95217.5 HighJanuary 5, 2015
infinitewpSQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote...CVE-2014-95207.5 HighJanuary 5, 2015
infinitewpSQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote...CVE-2014-95197.5 HighJanuary 5, 2015
d-link dir-655, dir-655 firmware +1 moreCross-site scripting (XSS) vulnerability in login.cgi in D-Link router DIR-655 (rev Bx) with...CVE-2014-95184.3 MediumJanuary 5, 2015
dlink dcs-2103 firmwareCross-site scripting (XSS) vulnerability in D-link IP camera DCS-2103 with firmware before 1.20...CVE-2014-95174.3 MediumJanuary 5, 2015
social microblogging pro project microblogging proCross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers...CVE-2014-9516Public exploit4.3 MediumJanuary 5, 2015
sonatype nexusDirectory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote...CVE-2014-93897.5 HighJanuary 5, 2015
osclassUnrestricted file upload vulnerability in the CWebContact::doModel method in oc-includes/osclass...CVE-2014-80856.8 MediumJanuary 5, 2015
osclassDirectory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3...CVE-2014-80847.5 HighJanuary 5, 2015
osclassSQL injection vulnerability in the Search::setJsonAlert method in OSClass before 3.4.3 allows...CVE-2014-80837.5 HighJanuary 5, 2015
quick page\/post redirect project page\/post redirectCross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0...CVE-2014-2598Public exploit6.8 MediumJanuary 5, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open