Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle fusion middlewareUnspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion...CVE-2014-65765.5 MediumJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect...CVE-2014-65755.0 MediumJanuary 21, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain...CVE-2014-65744.3 MediumJanuary 21, 2015
oracle enterprise manager grid controlUnspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise...CVE-2014-65734.3 MediumJanuary 21, 2015
oracle e-business suiteUnspecified vulnerability in the Oracle Customer Interaction History component in Oracle E...CVE-2014-65726.4 MediumJanuary 21, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1...CVE-2014-65716.8 MediumJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via...CVE-2014-65704.9 MediumJanuary 21, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2014-65695.0 MediumJanuary 21, 2015
oracle database serverUnspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0...CVE-2014-65679.0 HighJanuary 21, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2014-65664.0 MediumJanuary 21, 2015
oracle jd edwards enterpriseone toolsUnspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards...CVE-2014-65657.5 HighJanuary 21, 2015
oracle e-business suiteUnspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11...CVE-2014-65564.6 MediumJanuary 21, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7...CVE-2014-65484.6 MediumJanuary 21, 2015
oracle database serverUnspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3,...CVE-2014-65416.3 MediumJanuary 21, 2015
synck graphica download log cgiDirectory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows...CVE-2015-08675.0 MediumJanuary 21, 2015
emc vipr srm, watch4net +1 moreDirectory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6...CVE-2015-0516Public exploit4.0 MediumJanuary 21, 2015
emc vipr srm, watch4net +1 moreUnrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM...CVE-2015-05156.5 MediumJanuary 21, 2015
emc vipr srm, watch4net +1 moreEMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to...CVE-2015-0514Public exploit5.0 MediumJanuary 21, 2015
emc vipr srm, watch4net +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M...CVE-2015-05133.5 LowJanuary 21, 2015
videolan vlc media playerThe picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote...CVE-2014-9598Public exploit6.8 MediumJanuary 21, 2015
videolan vlc media playerThe picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows...CVE-2014-9597Public exploitFix available6.8 MediumJanuary 21, 2015
broadcom symantec critical system protection, symantec data center security +1 moreThe management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and...CVE-2014-9226Public exploit7.2 HighJanuary 21, 2015
broadcom symantec critical system protection, symantec data center security +1 moreThe ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9...CVE-2014-9225Public exploit4.0 MediumJanuary 21, 2015
broadcom symantec critical system protection, symantec data center security +1 moreCross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server...CVE-2014-9224Public exploit3.5 LowJanuary 21, 2015
ibm business process managerCross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8...CVE-2014-89143.5 LowJanuary 21, 2015
ibm business process managerCross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8...CVE-2014-89133.5 LowJanuary 21, 2015
broadcom symantec critical system protection, symantec data center security +1 moreSQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP...CVE-2014-7289Public exploit6.5 MediumJanuary 21, 2015
ibm api managementIBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics...CVE-2014-61725.0 MediumJanuary 21, 2015
broadcom symantec critical system protection, symantec data center security +1 moreThe Agent Control Interface in the management server in Symantec Critical System Protection (SCSP...CVE-2014-34409.0 HighJanuary 21, 2015
mit kerberos 5The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5...CVE-2014-9423Fix available5.0 MediumJanuary 21, 2015
mit kerberos 5The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka...CVE-2014-9422Fix available6.1 MediumJanuary 21, 2015
mit kerberos 5The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5)...CVE-2014-9421Fix available9.0 HighJanuary 21, 2015
mit kerberos 5The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the...CVE-2014-5352Fix available9.0 HighJanuary 21, 2015
oracle siebel crmUnspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8...CVE-2014-65284.0 MediumJanuary 21, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle...CVE-2014-65264.3 MediumJanuary 21, 2015
oracle e-business suiteUnspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E...CVE-2014-65253.5 LowJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality,...CVE-2014-65247.2 HighJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality,...CVE-2014-65217.2 HighJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and...CVE-2014-65186.6 MediumJanuary 21, 2015
oracle database serverUnspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3,...CVE-2014-65144.0 MediumJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality,...CVE-2014-65107.2 HighJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Solaris 10 allows local users to affect availability via...CVE-2014-65094.9 MediumJanuary 21, 2015
sun sunosUnspecified vulnerability in Oracle Solaris 10 and 11 allows remote attackers to affect...CVE-2014-64814.3 MediumJanuary 21, 2015
oracle and sun systems product suiteUnspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3...CVE-2014-64806.5 MediumJanuary 21, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2014-42793.5 LowJanuary 21, 2015
oracle and sun systems product suiteUnspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3...CVE-2014-42599.0 HighJanuary 21, 2015
gnu patch, opensuse, oracle solaris +2 moreGNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a...CVE-2015-1196Fix available4.3 MediumJanuary 21, 2015
privoxyPrivoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor...CVE-2015-1201Public exploit5.0 MediumJanuary 20, 2015
privoxyMemory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows...CVE-2015-1030Fix available5.0 MediumJanuary 20, 2015
pivotal software rabbitmqRabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a...CVE-2014-9494Fix available5.0 MediumJanuary 20, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open