# CVEs published 2014-01-19

9 CVEs were published on January 19, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4375](https://cve.now/CVE-2013-4375.md): The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause (no CVSS)
- [CVE-2013-7078](https://cve.now/CVE-2013-7078.md): Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in the Extbase Framework in TYPO3 4.5. (no CVSS, typo3/cms-core)
- [CVE-2013-0244](https://cve.now/CVE-2013-0244.md): Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are (no CVSS)
- [CVE-2013-1438](https://cve.now/CVE-2013-1438.md): Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent att (no CVSS)
- [CVE-2013-2142](https://cve.now/CVE-2013-2142.md): userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG\_CONFIG\_HOME are not set, allows local users to overwrite arbitrary files via a sym (no CVSS)
- [CVE-2013-2185](https://cve.now/CVE-2013-2185.md): The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1 (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2013-3482](https://cve.now/CVE-2013-3482.md): Stack-based buffer overflow in the rf\_report\_error function in ermapper\_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote (no CVSS)
- [CVE-2013-3483](https://cve.now/CVE-2013-3483.md): Stack-based buffer overflow in ermapper\_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2013-4231](https://cve.now/CVE-2013-4231.md): Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.