# CVEs published 2014-01-14

12 CVEs were published on January 14, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6398](https://cve.now/CVE-2013-6398.md): The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, whic (no CVSS)
- [CVE-2013-7106](https://cve.now/CVE-2013-7106.md): Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to c (no CVSS)
- [CVE-2013-7107](https://cve.now/CVE-2013-7107.md): Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the (no CVSS)
- [CVE-2013-7108](https://cve.now/CVE-2013-7108.md): Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow (no CVSS)
- [CVE-2013-7205](https://cve.now/CVE-2013-7205.md): Off-by-one error in the process\_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated (no CVSS)
- [CVE-2014-0031](https://cve.now/CVE-2014-0031.md): The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network A (no CVSS)
- [CVE-2014-0613](https://cve.now/CVE-2014-0613.md): The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12. (no CVSS)
- [CVE-2014-0615](https://cve.now/CVE-2014-0615.md): Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1 (no CVSS)
- [CVE-2014-0616](https://cve.now/CVE-2014-0616.md): Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1 (no CVSS)
- [CVE-2014-0617](https://cve.now/CVE-2014-0617.md): Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows (no CVSS)
- [CVE-2013-6123](https://cve.now/CVE-2013-6123.md): Multiple array index errors in drivers/media/video/msm/server/msm\_cam\_server.c in the MSM camera driver for the Linux kernel 3.x, as used in (no CVSS)
- [CVE-2014-0591](https://cve.now/CVE-2014-0591.md): The query\_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV b (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.