# CVEs published 2014-01-08

20 CVEs were published on January 8, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6982](https://cve.now/CVE-2013-6982.md): The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and (no CVSS)
- [CVE-2014-0651](https://cve.now/CVE-2014-0651.md): The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remot (no CVSS)
- [CVE-2014-0652](https://cve.now/CVE-2014-0652.md): Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbit (no CVSS)
- [CVE-2014-0653](https://cve.now/CVE-2014-0653.md): The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentica (no CVSS)
- [CVE-2014-0654](https://cve.now/CVE-2014-0654.md): Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting mess (no CVSS)
- [CVE-2014-0655](https://cve.now/CVE-2014-0655.md): The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-ca (no CVSS)
- [CVE-2014-0656](https://cve.now/CVE-2014-0656.md): Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted fie (no CVSS)
- [CVE-2014-0657](https://cve.now/CVE-2014-0657.md): The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions (no CVSS)
- [CVE-2013-7281](https://cve.now/CVE-2013-7281.md): The dgram\_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that (no CVSS)
- [CVE-2013-7097](https://cve.now/CVE-2013-7097.md): Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2013-7274](https://cve.now/CVE-2013-7274.md): Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HT (no CVSS)
- [CVE-2013-7275](https://cve.now/CVE-2013-7275.md): Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2013-7276](https://cve.now/CVE-2013-7276.md): Cross-site scripting (XSS) vulnerability in inc/raf\_form.php in the Recommend to a friend plugin 2.0.2 for WordPress allows remote attackers (no CVSS)
- [CVE-2013-7277](https://cve.now/CVE-2013-7277.md): Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbi (no CVSS)
- [CVE-2013-7278](https://cve.now/CVE-2013-7278.md): SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to de (no CVSS)
- [CVE-2013-7279](https://cve.now/CVE-2013-7279.md): Cross-site scripting (XSS) vulnerability in views/video-management/preview\_video.php in the S3 Video plugin before 0.983 for WordPress allow (no CVSS)
- [CVE-2013-7280](https://cve.now/CVE-2013-7280.md): Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to cause a denial of service (crash) via a long (no CVSS)
- [CVE-2014-0620](https://cve.now/CVE-2014-0620.md): Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to inject arb (no CVSS)
- [CVE-2014-0621](https://cve.now/CVE-2014-0621.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hij (no CVSS)
- [CVE-2014-1232](https://cve.now/CVE-2014-1232.md): Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.