Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco asyncosMultiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in...CVE-2015-05774.3 MediumJanuary 14, 2015
cisco anyconnect secure mobility clientCisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote...CVE-2014-33145.0 MediumJanuary 14, 2015
mozilla firefox, opensuse +1 moreMozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin ...CVE-2014-86437.1 HighJanuary 14, 2015
siemens simatic wincc sm\@rtclientThe Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate...CVE-2014-52331.9 LowJanuary 14, 2015
siemens simatic wincc sm\@rtclientThe Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an...CVE-2014-52321.9 LowJanuary 14, 2015
siemens simatic wincc sm\@rtclientThe Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate...CVE-2014-52312.1 LowJanuary 14, 2015
mozilla firefox, seamonkey, opensuse +2 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck...CVE-2014-8642Fix available4.3 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +2 moreUse-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox...CVE-2014-8641Fix available7.5 HighJanuary 14, 2015
mozilla firefox, seamonkey, opensuse +2 moreThe mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API...CVE-2014-8640Fix available5.0 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreMozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey...CVE-2014-8639Fix available6.8 MediumJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before...CVE-2014-8638Fix available6.8 MediumJanuary 14, 2015
mozilla firefox, seamonkey +1 moreMozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP...CVE-2014-8637Fix available5.0 MediumJanuary 14, 2015
mozilla firefox, seamonkey +1 moreThe XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not...CVE-2014-8636Public exploitFix availableEPSS 63.9%7.5 HighJanuary 14, 2015
mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and...CVE-2014-8635Fix available7.5 HighJanuary 14, 2015
mozilla firefox, firefox esr, seamonkey +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0,...CVE-2014-8634Fix available7.5 HighJanuary 14, 2015
microsoft windows, windows 7, windows 8 +6 more +8 moreDirectory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft...CVE-2015-0016In KEVPublic exploitEPSS 75.8%7.8 HighJanuary 13, 2015
microsoft windows server 2003, windows server 2008, windows server 2012 +2 moreMicrosoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow...CVE-2015-0015EPSS 78.7%7.8 HighJanuary 13, 2015
microsoft windows 7, windows 8, windows 8.1 +4 more +6 moreBuffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...CVE-2015-0014EPSS 96.9%10.0 HighJanuary 13, 2015
microsoft windows 7, windows 8, windows 8.1 +5 more +7 moremrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003...CVE-2015-00114.7 MediumJanuary 13, 2015
microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreThe Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista...CVE-2015-0006Public exploitEPSS 11.6%6.1 MediumJanuary 13, 2015
microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...CVE-2015-0004Public exploit7.2 HighJanuary 13, 2015
microsoft windows 7, windows 8, windows 8.1 +4 more +6 moreThe AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in...CVE-2015-0002Public exploitEPSS 13.8%7.2 HighJanuary 13, 2015
microsoft windows 8, windows 8.1, windows rt +2 more +4 moreThe Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server...CVE-2015-00011.9 LowJanuary 13, 2015
domphpSQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote...CVE-2014-10038Public exploit7.5 HighJanuary 13, 2015
domphpDirectory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have...CVE-2014-10037Public exploitEPSS 18.8%7.5 HighJanuary 13, 2015
jetbrains teamcityCross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers...CVE-2014-100364.3 MediumJanuary 13, 2015
couponphpMultiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0...CVE-2014-10035Public exploit4.3 MediumJanuary 13, 2015
couponphpMultiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote...CVE-2014-10034Public exploit6.5 MediumJanuary 13, 2015
oscommerce online merchantSQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in...CVE-2014-10033Public exploit6.5 MediumJanuary 13, 2015
scriptbrasil taboada macronewsSQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote...CVE-2014-10032Public exploit6.5 MediumJanuary 13, 2015
qualcomm eudora worldmailBuffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote...CVE-2014-10031Public exploit7.5 HighJanuary 13, 2015
malwarebytes anti-exploitmbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of...CVE-2014-100039Public exploit2.1 LowJanuary 13, 2015
storytlrCross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers...CVE-2014-1000384.3 MediumJanuary 13, 2015
storytlrCross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers...CVE-2014-1000374.3 MediumJanuary 13, 2015
flatpressCross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject...CVE-2014-1000364.3 MediumJanuary 13, 2015
licensepal arcticdeskSQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk...CVE-2014-1000357.5 HighJanuary 13, 2015
licensepal arcticdeskCross-site scripting (XSS) vulnerability in the frontend interface in LicensePal ArcticDesk...CVE-2014-1000344.3 MediumJanuary 13, 2015
licensepal arcticdeskDirectory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers...CVE-2014-1000335.0 MediumJanuary 13, 2015
airties air 6372Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote...CVE-2014-1000324.3 MediumJanuary 13, 2015
ismail fahmi ganesha digital libraryMultiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote...CVE-2014-100031Public exploit7.5 HighJanuary 13, 2015
ganesha digital library project digital libraryCross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library...CVE-2014-100030Public exploit4.3 MediumJanuary 13, 2015
ganesha digital library project digital libraryMultiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL...CVE-2014-100029Public exploit5.0 MediumJanuary 13, 2015
webcrafted project webcraftedCross-site scripting (XSS) vulnerability in /signup in WEBCrafted allows remote attackers to...CVE-2014-1000284.3 MediumJanuary 13, 2015
getusedtoit wp slimstatCross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress...CVE-2014-1000274.3 MediumJanuary 13, 2015
april\'s super functions pack project super functions packCross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin...CVE-2014-1000264.3 MediumJanuary 13, 2015
savsoft technologies quizCross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft...CVE-2014-1000256.8 MediumJanuary 13, 2015
seopanel seo panelCross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to...CVE-2014-1000244.3 MediumJanuary 13, 2015
mtouch quiz project quizMultiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0...CVE-2014-1000234.3 MediumJanuary 13, 2015
mtouch quiz project quizSQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows...CVE-2014-1000227.5 HighJanuary 13, 2015
orangehrmCross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in...CVE-2014-1000214.3 MediumJanuary 13, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open