CVEs published January 23, 2014
25 CVEs were published on January 23, 2014: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 25
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- org.springframework:spring-oxm
- 2
- nova
- 1
- swift
- 1
Medium, low and unrated 25
- CVE-2013-4152The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution…org.springframework:spring-oxm
- CVE-2013-6933The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media…
- CVE-2013-6934The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows…
- CVE-2013-7048OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the…nova
- CVE-2013-7315The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX…org.springframework:spring-oxm
- CVE-2013-5371The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS)…
- CVE-2014-0494Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
- CVE-2014-1242Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining…
- CVE-2013-7306The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement…
- CVE-2013-7307The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State…
- CVE-2013-7308The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link…
- CVE-2013-7309The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State…
- CVE-2013-7310The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement…
- CVE-2013-7311The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate…
- CVE-2013-7312The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link…
- CVE-2013-7313The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate…
- CVE-2013-7314The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID…
- CVE-2012-6447Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web…
- CVE-2014-0675The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different…
- CVE-2013-6443CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and…
- CVE-2014-0006The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers…swift
- CVE-2014-0979The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value…
- CVE-2013-6412The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask…
- CVE-2013-6447Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in…
- CVE-2013-6448The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit…