Skip to content
OpenAdvisories

Archive

January 2015

Vulnerabilities first published in this month (UTC), newest first.

← December 2014 2015 / January February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

713 results · Feed

  • Unscored —
    CVE-2014-10034 Public exploit

    Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execu…

  • Unscored —
    CVE-2014-10035 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administra…

  • Unscored —
    CVE-2014-10031 Public exploit

    Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-10036

    Cross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2014-10037 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .…

  • Unscored —
    CVE-2014-10033 Public exploit

    SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.…

  • Unscored —
    CVE-2014-100009

    The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remo…

  • Unscored —
    CVE-2014-100002 Public exploit EPSS 60%

    Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read ar…

  • Unscored —
    CVE-2014-100004 Scanner template

    Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows remote attackers to i…

  • Unscored —
    CVE-2014-100007

    Cross-site scripting (XSS) vulnerability in the HK Exif Tags plugin before 1.12 for WordPress allows remote authenticat…

  • Unscored —
    CVE-2014-100008

    Cross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel…

  • Unscored —
    CVE-2014-100006

    Multiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php in webtrees before 1.…

  • Unscored —
    CVE-2014-100010

    Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2014-100001

    Cross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allo…

  • High 8.0
    CVE-2014-100005 Exploited Public exploit EPSS 43%

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17…

    KEV May 16, 2024
  • Unscored —
    CVE-2014-100003 Public exploit

    SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wo…

    Web / CMS
  • Unscored —
    CVE-2014-10015 Public exploit

    SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to ex…

  • Unscored —
    CVE-2014-10026

    index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtai…

  • Unscored —
    CVE-2014-10009 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2014-10013 Public exploit

    SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to…

    Web / CMS
  • Unscored —
    CVE-2014-10006

    Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the a…

  • Unscored —
    CVE-2014-10024

    Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx pl…

  • Unscored —
    CVE-2014-10008 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authen…

  • Unscored —
    CVE-2014-10023 Public exploit

    Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2014-10001 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacke…

  • Unscored —
    CVE-2014-10021 Public exploit EPSS 59%

    Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remot…

  • Unscored —
    CVE-2014-10005

    Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter t…

  • Unscored —
    CVE-2014-10029 Public exploit

    SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to ex…

  • Unscored —
    CVE-2014-10022

    Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, relate…

    trafficserver Debian
  • Unscored —
    CVE-2014-10010 Public exploit

    Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2014-10004

    SQL injection vulnerability in admin/data_files/move.php in Maian Uploader 4.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2014-10017

    Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to …

  • Unscored —
    CVE-2014-10020 Public exploit

    SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2014-10028

    Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attacker…

  • Unscored —
    CVE-2014-10007

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2014-10019 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-G…

  • Unscored —
    CVE-2014-10003

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-10016

    Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote …

  • Unscored —
    CVE-2014-10011 Public exploit EPSS 10%

    Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView c…

  • Unscored —
    CVE-2014-10002

    Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via …