Skip to content
OpenAdvisories

Archive

17 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /17 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2014-9195 Public exploit EPSS 81%

    Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

    Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.

    Phoenix Contact MultiProg ProConOs ICS / OT
  • Critical 10.0
    CVE-2014-9199

    Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength

    The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

    Clorius Controls A/S Java web client
  • Critical 10.0
    CVE-2014-5419

    GE Multilink Use of Hard-coded Cryptographic Key

    GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it eas…

    GE ML810/3000/3100 series switch Multilink ML800/1200/1600/2400