# CVEs published 2014-01-09

14 CVEs were published on January 9, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7283](https://cve.now/CVE-2013-7283.md): Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact a (no CVSS)
- [CVE-2013-6462](https://cve.now/CVE-2013-6462.md): Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attacker (no CVSS)
- [CVE-2013-6923](https://cve.now/CVE-2013-6923.md): Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attack (no CVSS)
- [CVE-2013-7138](https://cve.now/CVE-2013-7138.md): Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remot (no CVSS)
- [CVE-2013-7139](https://cve.now/CVE-2013-7139.md): SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote to execute arbit (no CVSS)
- [CVE-2013-6955](https://cve.now/CVE-2013-6955.md): webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 al (no CVSS)
- [CVE-2013-7174](https://cve.now/CVE-2013-7174.md): Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full (no CVSS)
- [CVE-2014-0752](https://cve.now/CVE-2014-0752.md): Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere (no CVSS, Ecava IntegraXor)
- [CVE-2013-4353](https://cve.now/CVE-2013-4353.md): The ssl3\_take\_mac function in ssl/s3\_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL poin (no CVSS)
- [CVE-2013-5349](https://cve.now/CVE-2013-5349.md): Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2013-5357](https://cve.now/CVE-2013-5357.md): Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF (no CVSS)
- [CVE-2013-5358](https://cve.now/CVE-2013-5358.md): Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demon (no CVSS)
- [CVE-2013-5359](https://cve.now/CVE-2013-5359.md): Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2013-6997](https://cve.now/CVE-2013-6997.md): Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and earlier allow remote attackers to inject arbitra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.