# CVEs published 2014-01-17

7 CVEs were published on January 17, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7295](https://cve.now/CVE-2013-7295.md): Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge… (no CVSS)
- [CVE-2014-1207](https://cve.now/CVE-2014-1207.md): VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by… (no CVSS)
- [CVE-2014-1208](https://cve.now/CVE-2014-1208.md): VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and… (no CVSS)
- [CVE-2014-1211](https://cve.now/CVE-2014-1211.md): Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the… (no CVSS)
- [CVE-2014-0792](https://cve.now/CVE-2014-0792.md): Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified… (no CVSS)
- [CVE-2013-7204](https://cve.now/CVE-2013-7204.md): Cross-site request forgery (CSRF) vulnerability in set\_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows… (no CVSS)
- [CVE-2013-7243](https://cve.now/CVE-2013-7243.md): Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.