# CVEs published 2014-01-14

12 CVEs were published on January 14, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6398](https://cve.now/CVE-2013-6398.md): The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted… (no CVSS)
- [CVE-2013-7106](https://cve.now/CVE-2013-7106.md): Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to… (no CVSS)
- [CVE-2013-7107](https://cve.now/CVE-2013-7107.md): Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack… (no CVSS)
- [CVE-2013-7108](https://cve.now/CVE-2013-7108.md): Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2… (no CVSS)
- [CVE-2013-7205](https://cve.now/CVE-2013-7205.md): Off-by-one error in the process\_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote… (no CVSS)
- [CVE-2014-0031](https://cve.now/CVE-2014-0031.md): The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network… (no CVSS)
- [CVE-2014-0613](https://cve.now/CVE-2014-0613.md): The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30… (no CVSS)
- [CVE-2014-0615](https://cve.now/CVE-2014-0615.md): Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20… (no CVSS)
- [CVE-2014-0616](https://cve.now/CVE-2014-0616.md): Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20… (no CVSS)
- [CVE-2014-0617](https://cve.now/CVE-2014-0617.md): Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways… (no CVSS)
- [CVE-2013-6123](https://cve.now/CVE-2013-6123.md): Multiple array index errors in drivers/media/video/msm/server/msm\_cam\_server.c in the MSM camera driver for the Linux kernel 3.x, as used… (no CVSS)
- [CVE-2014-0591](https://cve.now/CVE-2014-0591.md): The query\_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.