Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

realnetworks realarcade installerRealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7...CVE-2013-26047.2 HighJanuary 12, 2015
realnetworks realarcade installerThe RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse...CVE-2013-260310.0 HighJanuary 12, 2015
hancom office 2010 seBuffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long...CVE-2013-7420Public exploit7.5 HighJanuary 12, 2015
xenThe evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of...CVE-2014-6268Fix available4.9 MediumJanuary 12, 2015
dev4press gd star ratingSQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote...CVE-2014-28397.5 HighJanuary 12, 2015
dev4press gd star ratingMultiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for...CVE-2014-28386.8 MediumJanuary 12, 2015
cisco nx-osThe High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers...CVE-2015-05825.0 MediumJanuary 10, 2015
codewrights hart device type managerThe CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows...CVE-2014-91912.1 LowJanuary 10, 2015
schneider electric intouch access anywhere server, schneider-electric wonderware intouch access anywhere server +1 moreSchneider Electric Wonderware InTouch Access Anywhere Server Buffer OverflowCVE-2014-919010.0 January 10, 2015
cisco webex meetings serverThe outlookpa component in Cisco WebEx Meetings Server does not properly validate API input,...CVE-2014-80365.0 MediumJanuary 10, 2015
cisco webex meetings serverThe web framework in Cisco WebEx Meetings Server produces different returned messages for URL...CVE-2014-80355.0 MediumJanuary 10, 2015
cisco unified communications domain managerCisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a...CVE-2014-80205.0 MediumJanuary 10, 2015
ibm emptoris, emptoris contract management, emptoris program management +1 more +3 moreThe Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10...CVE-2014-62124.0 MediumJanuary 10, 2015
ibm sterling b2b integrator, sterling file gateway +1 moreThe HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2...CVE-2014-61995.0 MediumJanuary 10, 2015
ibm pureapplication system, workload deployer +1 moreMultiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication...CVE-2014-61589.0 HighJanuary 10, 2015
ibm curam social program managementCross-site scripting (XSS) vulnerability in IBM Curam Social Program Management before 6.0.5.5a...CVE-2014-30963.5 LowJanuary 10, 2015
mcafee epolicy orchestratorMcAfee ePolicy Orchestrator (ePO) before 4.6.9 and 5.x before 5.1.2 uses the same secret key...CVE-2015-0922EPSS 13.3%5.0 MediumJanuary 9, 2015
mcafee epolicy orchestratorXML external entity (XXE) vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ...CVE-2015-0921EPSS 17.4%4.0 MediumJanuary 9, 2015
tp-link tl-wr840n firmwareCross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL...CVE-2014-95106.8 MediumJanuary 9, 2015
school administration project administrationCross-site scripting (XSS) vulnerability in the School Administration module 7.x-1.x before 7.x-1...CVE-2014-95053.5 LowJanuary 9, 2015
poll chart block project chart blockCross-site scripting (XSS) vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2...CVE-2014-95013.5 LowJanuary 9, 2015
moip project moipCross-site scripting (XSS) vulnerability in the Moip module 7.x-1.x before 7.x-1.4 for Drupal...CVE-2014-95004.3 MediumJanuary 9, 2015
godwin\'s law project lawCross-site scripting (XSS) vulnerability in the Godwin's Law module before 7.x-1.1 for Drupal,...CVE-2014-94993.5 LowJanuary 9, 2015
webform invitation project invitationCross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3...CVE-2014-94983.5 LowJanuary 9, 2015
joomlaskin js multi hotelCross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi...CVE-2013-74194.3 MediumJanuary 9, 2015
unrtf MageiaUpdated unrtf package fixes security vulnerabilityMGASA-2015-0016Fix availableNo scoreJanuary 9, 2015
gnome gcab, opensuse +1 moreDirectory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in...CVE-2015-0552Fix available6.4 MediumJanuary 9, 2015
mpfr gnu mpfrBuffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context...CVE-2014-9474Fix available9.8 CriticalJanuary 9, 2015
glpi-project glpiDirectory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows...CVE-2014-83607.5 HighJanuary 9, 2015
glpi-project glpiGLPI before 0.84.7 does not properly restrict access to cost information, which allows remote...CVE-2014-50325.0 MediumJanuary 9, 2015
cisco webex meetings serverThe play/modules component in Cisco WebEx Meetings Server allows remote attackers to obtain...CVE-2014-80335.0 MediumJanuary 9, 2015
cisco webex meetings serverThe OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to obtain...CVE-2014-80324.0 MediumJanuary 9, 2015
cisco webex meetings serverCross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote...CVE-2014-80316.8 MediumJanuary 9, 2015
cisco webex meetings serverCross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server allows...CVE-2014-80304.3 MediumJanuary 9, 2015
cisco secure access control systemOpen redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS)...CVE-2014-80295.8 MediumJanuary 9, 2015
cisco secure access control systemMultiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access...CVE-2014-80284.3 MediumJanuary 9, 2015
cisco secure access control systemThe RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users...CVE-2014-80276.5 MediumJanuary 9, 2015
gnu binutils, canonical ubuntu linux, debian linux +1 more +3 moreThe _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier...CVE-2014-8738Fix available5.0 MediumJanuary 9, 2015
asus wrt firmware, t-mobile tm-ac1900 +1 morecommon.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other...CVE-2014-9583Public exploitEPSS 80.2%10.0 HighJanuary 8, 2015
codiadCross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3...CVE-2014-9582Public exploit4.3 MediumJanuary 8, 2015
codiadDirectory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows...CVE-2014-9581Public exploit5.0 MediumJanuary 8, 2015
projectsendCross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote...CVE-2014-9580Public exploit4.3 MediumJanuary 8, 2015
banner effect header project effect headerCross-site request forgery (CSRF) vulnerability in the Banner Effect Header plugin 1.2.6 for...CVE-2015-09206.8 MediumJanuary 8, 2015
sefrengoMultiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1...CVE-2015-0919Public exploit7.5 HighJanuary 8, 2015
sefrengoCross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before 1.6.1...CVE-2015-09184.3 MediumJanuary 8, 2015
kajonaCross-site scripting (XSS) vulnerability in the backend in Kajona before 4.6.3 allows remote...CVE-2015-09174.3 MediumJanuary 8, 2015
vdgsecurity vdg senseVDG Security SENSE (formerly DIVA) 2.3.13 stores administrator credentials in cleartext, which...CVE-2014-95795.0 MediumJanuary 8, 2015
vdgsecurity vdg senseVDG Security SENSE (formerly DIVA) 2.3.13 performs authentication with a password hash instead of...CVE-2014-95785.0 MediumJanuary 8, 2015
vdgsecurity vdg senseVDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which...CVE-2014-95774.0 MediumJanuary 8, 2015
vdgsecurity vdg senseVDG Security SENSE (formerly DIVA) 2.3.13 has a hardcoded password of (1) ArpaRomaWi for the root...CVE-2014-95765.0 MediumJanuary 8, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open