# CVEs published 2015-01-29

10 CVEs were published on January 29, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8370](https://cve.now/CVE-2014-8370.md): VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5… (no CVSS)
- [CVE-2015-1043](https://cve.now/CVE-2015-1043.md): The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before… (no CVSS)
- [CVE-2015-1044](https://cve.now/CVE-2015-1044.md): vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0… (no CVSS)
- [CVE-2015-0236](https://cve.now/CVE-2015-0236.md): libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR\_DOMAIN\_XML\_SECURE flag with a crafted… (no CVSS)
- [CVE-2015-1422](https://cve.now/CVE-2015-1422.md): Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2015-1423](https://cve.now/CVE-2015-1423.md): Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2015-1424](https://cve.now/CVE-2015-1424.md): Cross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2014-8893](https://cve.now/CVE-2014-8893.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet.img in IBM TRIRIGA Application Platform… (no CVSS)
- [CVE-2014-8894](https://cve.now/CVE-2014-8894.md): Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote… (no CVSS)
- [CVE-2014-8895](https://cve.now/CVE-2014-8895.md): IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.