# CVEs published 2014-01-17

7 CVEs were published on January 17, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7295](https://cve.now/CVE-2013-7295.md): Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platf (no CVSS)
- [CVE-2014-1207](https://cve.now/CVE-2014-1207.md): VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepti (no CVSS)
- [CVE-2014-1208](https://cve.now/CVE-2014-1208.md): VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware (no CVSS)
- [CVE-2014-1211](https://cve.now/CVE-2014-1211.md): Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentic (no CVSS)
- [CVE-2014-0792](https://cve.now/CVE-2014-0792.md): Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vecto (no CVSS)
- [CVE-2013-7204](https://cve.now/CVE-2013-7204.md): Cross-site request forgery (CSRF) vulnerability in set\_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remo (no CVSS)
- [CVE-2013-7243](https://cve.now/CVE-2013-7243.md): Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.