# CVEs published 2014-01-16

33 CVEs were published on January 16, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6620](https://cve.now/CVE-2012-6620.md): Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote a (no CVSS)
- [CVE-2012-6621](https://cve.now/CVE-2012-6621.md): Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitra (no CVSS)
- [CVE-2012-6622](https://cve.now/CVE-2012-6622.md): Multiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordP (no CVSS)
- [CVE-2012-6623](https://cve.now/CVE-2012-6623.md): Cross-site scripting (XSS) vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress a (no CVSS)
- [CVE-2012-6624](https://cve.now/CVE-2012-6624.md): Cross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-6625](https://cve.now/CVE-2012-6625.md): SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attac (no CVSS)
- [CVE-2012-6626](https://cve.now/CVE-2012-6626.md): SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username fiel (no CVSS)
- [CVE-2012-6627](https://cve.now/CVE-2012-6627.md): Cross-site scripting (XSS) vulnerability in admin/test\_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remo (no CVSS)
- [CVE-2012-6628](https://cve.now/CVE-2012-6628.md): Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to in (no CVSS)
- [CVE-2012-6629](https://cve.now/CVE-2012-6629.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote att (no CVSS)
- [CVE-2012-6630](https://cve.now/CVE-2012-6630.md): Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inj (no CVSS)
- [CVE-2012-6631](https://cve.now/CVE-2012-6631.md): Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the auth (no CVSS)
- [CVE-2012-6632](https://cve.now/CVE-2012-6632.md): Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2013-6325](https://cve.now/CVE-2013-6325.md): IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a deni (no CVSS)
- [CVE-2013-6330](https://cve.now/CVE-2013-6330.md): IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated use (no CVSS)
- [CVE-2013-6725](https://cve.now/CVE-2013-6725.md): Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before (no CVSS)
- [CVE-2013-6687](https://cve.now/CVE-2013-6687.md): The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the (no CVSS)
- [CVE-2013-6786](https://cve.now/CVE-2013-6786.md): Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-L (no CVSS)
- [CVE-2014-0648](https://cve.now/CVE-2014-0648.md): The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requ (no CVSS)
- [CVE-2014-0649](https://cve.now/CVE-2014-0649.md): The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which all (no CVSS)
- [CVE-2014-0650](https://cve.now/CVE-2014-0650.md): The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating- (no CVSS)
- [CVE-2014-0666](https://cve.now/CVE-2014-0666.md): Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote att (no CVSS)
- [CVE-2014-0667](https://cve.now/CVE-2014-0667.md): The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote auth (no CVSS)
- [CVE-2013-6641](https://cve.now/CVE-2013-6641.md): Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as (no CVSS)
- [CVE-2013-6642](https://cve.now/CVE-2013-6642.md): Google Chrome through 32.0.1700.23 on Android allows remote attackers to spoof the address bar via unspecified vectors. (no CVSS)
- [CVE-2013-6643](https://cve.now/CVE-2013-6643.md): The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one\_click\_signin\_bubble\_view.cc in Google Chrome before 32.0.1 (no CVSS)
- [CVE-2013-6644](https://cve.now/CVE-2013-6644.md): Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allow att (no CVSS)
- [CVE-2013-6645](https://cve.now/CVE-2013-6645.md): Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/web\_contents/web\_contents\_view\_aura.cc in Goo (no CVSS)
- [CVE-2013-6646](https://cve.now/CVE-2013-6646.md): Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Ma (no CVSS)
- [CVE-2013-2139](https://cve.now/CVE-2013-2139.md): Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors rela (no CVSS)
- [CVE-2013-7294](https://cve.now/CVE-2013-7294.md): The ikev2parent\_inI1outR1 function in pluto/ikev2\_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (res (no CVSS)
- [CVE-2014-1472](https://cve.now/CVE-2014-1472.md): Multiple cross-site scripting (XSS) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow (no CVSS)
- [CVE-2014-1473](https://cve.now/CVE-2014-1473.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.