Archive

31 January 2014

Vulnerabilities first published on this day (UTC), newest first.

← December 2013 2014 / January /31 February 2014 →

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

Unscored —

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a …

mysql-5.5 mysql-5.6 Ubuntu

Jan 31, 2014
Unscored —

CVE-2013-6143

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote atta…

Jan 31, 2014
Unscored —

CVE-2013-4383

Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote…

Jan 31, 2014
Unscored —

CVE-2013-4979

Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary co…

Jan 31, 2014
Medium —

CVE-2013-6235

Improper Neutralization of Input During Web Page Generation in JAMon

Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parame…

com.jamonapi:jamon Maven

Jan 31, 2014
Unscored —

CVE-2014-1204 Public exploit

SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated use…

Jan 31, 2014
Unscored —

CVE-2013-6727

The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java pl…

Jan 31, 2014
High 7.1

CVE-2014-0757

Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference

Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.

Smart Software Solutions (3S) CoDeSys Runtime Toolkit

Jan 31, 2014