Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

itechscripts itechclassifiedsSQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote...CVE-2014-100020Public exploit7.5 HighJanuary 13, 2015
pomm-project pommSQL injection vulnerability in the LTree converter in Pomm before 1.1.5 allows remote attackers...CVE-2014-1000197.5 HighJanuary 13, 2015
unconfirmed project unconfirmedCross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress...CVE-2014-1000184.3 MediumJanuary 13, 2015
phponlinechatCross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote...CVE-2014-100017Public exploit4.3 MediumJanuary 13, 2015
photocati media photocratiCross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati...CVE-2014-1000164.3 MediumJanuary 13, 2015
solidworks product data managementDirectory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows...CVE-2014-100015Public exploitEPSS 57.4%6.4 MediumJanuary 13, 2015
solidworks product data managementMultiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2...CVE-2014-100014Public exploit7.5 HighJanuary 13, 2015
clientresponse project clientresponseMultiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers...CVE-2014-100013Public exploit4.3 MediumJanuary 13, 2015
sendySQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary...CVE-2014-100012Public exploit7.5 HighJanuary 13, 2015
sendySQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute...CVE-2014-100011Public exploit7.5 HighJanuary 13, 2015
fluxbbOpen redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7...CVE-2014-100305.8 MediumJanuary 13, 2015
fluxbbSQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows...CVE-2014-10029Public exploit7.5 HighJanuary 13, 2015
dlink dap-1360 firmwareCross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later...CVE-2014-100284.3 MediumJanuary 13, 2015
dlink dap-1360 firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with...CVE-2014-100276.8 MediumJanuary 13, 2015
dlink dap-1360 firmwareindex.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass...CVE-2014-100265.0 MediumJanuary 13, 2015
dlink dap-1360 firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4...CVE-2014-100256.8 MediumJanuary 13, 2015
divx directshowdemuxfilter, player, web player +2 moreMultiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx...CVE-2014-100247.5 HighJanuary 13, 2015
topicsviewerMultiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to...CVE-2014-10023Public exploit7.5 HighJanuary 13, 2015
apache traffic serverApache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via...CVE-2014-10022Fix available5.0 MediumJanuary 13, 2015
wpsymposiumpro wp symposiumUnrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for...CVE-2014-10021Public exploitEPSS 59.0%7.5 HighJanuary 13, 2015
tecorange simple e-documentSQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to...CVE-2014-10020Public exploit7.5 HighJanuary 13, 2015
teracom t2-b-gawv1.4u10y-biMultiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country...CVE-2014-10019Public exploit6.8 MediumJanuary 13, 2015
teracom t2-b-gawv1.4u10y-biCross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2...CVE-2014-10018Public exploit4.3 MediumJanuary 13, 2015
welcart e-commerceMultiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress...CVE-2014-100177.5 HighJanuary 13, 2015
welcart e-commerceMultiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for...CVE-2014-100164.3 MediumJanuary 13, 2015
phpjabbers event booking calendarSQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows...CVE-2014-10015Public exploit7.5 HighJanuary 13, 2015
phpjabbers event booking calendarMultiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2...CVE-2014-10014Public exploit6.8 MediumJanuary 13, 2015
strategy11 awp classifiedsSQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress...CVE-2014-10013Public exploit7.5 HighJanuary 13, 2015
strategy11 awp classifiedsCross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for...CVE-2014-100124.3 MediumJanuary 13, 2015
trendnet tv-ip422w, tv-ip422wn +1 moreStack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for...CVE-2014-10011Public exploitEPSS 10.1%7.5 HighJanuary 13, 2015
phpjabbers appointment schedulerDirectory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers...CVE-2014-10010Public exploit5.0 MediumJanuary 13, 2015
iwcn stark crmMultiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to...CVE-2014-10009Public exploit4.3 MediumJanuary 13, 2015
iwcn stark crmMultiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote...CVE-2014-10008Public exploit6.8 MediumJanuary 13, 2015
maianscriptworld maian weblogMultiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote...CVE-2014-100074.3 MediumJanuary 13, 2015
maianscriptworld maian uploaderMultiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote...CVE-2014-100066.8 MediumJanuary 13, 2015
maianscriptworld maian uploaderMaian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without...CVE-2014-100055.0 MediumJanuary 13, 2015
maianscriptworld maian uploaderSQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote...CVE-2014-100047.5 HighJanuary 13, 2015
maian script world uploaderMultiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers...CVE-2014-100034.3 MediumJanuary 13, 2015
jetbrains teamcityUnspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain...CVE-2014-100025.0 MediumJanuary 13, 2015
csphere clansphereCross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject...CVE-2014-1000104.3 MediumJanuary 13, 2015
phpjabbers appointment schedulerMultiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2...CVE-2014-10001Public exploit6.8 MediumJanuary 13, 2015
joomlaskin js multi hotelThe Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for...CVE-2014-1000095.0 MediumJanuary 13, 2015
joomlaskin js multi hotelCross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi...CVE-2014-1000084.3 MediumJanuary 13, 2015
hk exif tags project exif tagsCross-site scripting (XSS) vulnerability in the HK Exif Tags plugin before 1.12 for WordPress...CVE-2014-1000074.3 MediumJanuary 13, 2015
webtreesMultiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php...CVE-2014-1000064.3 MediumJanuary 13, 2015
d-link dir-600 router, dlink dir-600, dir-600 firmware +2 moreMultiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx)...CVE-2014-100005In KEVPublic exploitEPSS 43.5%8.0 HighJanuary 13, 2015
sitecore cmsCross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows...CVE-2014-1000044.3 MediumJanuary 13, 2015
yourmembers project yourmembersSQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures...CVE-2014-100003Public exploit7.5 HighJanuary 13, 2015
zohocorp manageengine supportcenter plusDirectory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows...CVE-2014-100002Public exploitEPSS 59.9%5.0 MediumJanuary 13, 2015
seopressor seo plugin liveoptimCross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4...CVE-2014-1000016.8 MediumJanuary 13, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open