# CVEs published 2015-01-07

13 CVEs were published on January 7, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1425](https://cve.now/CVE-2014-1425.md): cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all… (no CVSS)
- [CVE-2014-9221](https://cve.now/CVE-2014-9221.md): strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a… (no CVSS)
- [CVE-2014-9493](https://cve.now/CVE-2014-9493.md): The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to… (no CVSS)
- [CVE-2014-9569](https://cve.now/CVE-2014-9569.md): Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for HTML 3.0 allow remote attackers to inject… (no CVSS)
- [CVE-2015-0361](https://cve.now/CVE-2015-0361.md): Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a… (no CVSS)
- [CVE-2014-3779](https://cve.now/CVE-2014-3779.md): Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject… (no CVSS)
- [CVE-2014-8993](https://cve.now/CVE-2014-8993.md): Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and… (no CVSS)
- [CVE-2014-9567](https://cve.now/CVE-2014-9567.md): Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to… (no CVSS)
- [CVE-2014-4635](https://cve.now/CVE-2014-4635.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) before 6.8 allow remote attackers to… (no CVSS)
- [CVE-2014-4636](https://cve.now/CVE-2014-4636.md): Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to hijack… (no CVSS)
- [CVE-2014-4637](https://cve.now/CVE-2014-4637.md): Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary… (no CVSS)
- [CVE-2014-4638](https://cve.now/CVE-2014-4638.md): EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive… (no CVSS)
- [CVE-2014-4639](https://cve.now/CVE-2014-4639.md): EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.