Skip to content
OpenAdvisories

Archive

17 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /17 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2015-0924

    Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers …

  • Unscored —
    CVE-2015-0590

    Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sen…

  • Unscored —
    CVE-2014-4835

    IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63…

  • Unscored —
    CVE-2014-6197

    IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers…

  • Unscored —
    CVE-2014-3019

    IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attacke…

  • Unscored —
    CVE-2014-3032

    Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 befor…

  • Unscored —
    CVE-2014-3018

    IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attacke…

  • Medium 6.6
    CVE-2014-2355

    GE Proficy HMI/SCADA CIMPLICITY CimView

    The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

    GE Proficy HMI/SCADA–CIMPLICITY
  • Unscored —
    CVE-2014-8143

    Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD…

    samba samba Debian Ubuntu
  • Critical 10.0
    CVE-2014-9195 Public exploit EPSS 81%

    Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

    Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

    Phoenix Contact MultiProg ProConOs ICS / OT
  • Medium 5.4
    CVE-2014-9194

    Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity

    Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio transmissions that spoof GPS satellite broadcasts.

    Arbiter Systems Model 1094B GPS Substation Clock
  • Critical 10.0
    CVE-2014-9199

    Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength

    The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

    Clorius Controls A/S Java web client
  • Medium 5.0
    CVE-2014-5418

    GE Multilink Uncontrolled Resource Consumption

    GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via c…

    GE Multilink ML800/1200/1600/2400 ML810/3000/3100 series switch
  • Critical 10.0
    CVE-2014-5419

    GE Multilink Use of Hard-coded Cryptographic Key

    GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it eas…

    GE ML810/3000/3100 series switch Multilink ML800/1200/1600/2400