Archive

20 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /20 February 2015 →

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

Unscored —

CVE-2015-1030

Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause …

privoxy Debian

Jan 20, 2015
Unscored —

CVE-2015-1201 Public exploit

Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecifie…

privoxy Ubuntu

Jan 20, 2015
Unscored —

CVE-2014-8386 Public exploit

Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary…

Jan 20, 2015
Unscored —

CVE-2014-8790

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when…

Jan 20, 2015
Unscored —

CVE-2014-8625

Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remo…

dpkg dpkg Debian Ubuntu

Jan 20, 2015
Unscored —

CVE-2014-9330

Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (cr…

tiff tiff Debian Ubuntu

Jan 20, 2015
Unscored —

CVE-2014-9491

The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers…

Jan 20, 2015
Unscored —

CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For h…

rabbitmq-server Debian

Jan 20, 2015
Medium —

CVE-2014-9490

sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number

The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number.

sentry-raven RubyGems

Jan 20, 2015