# CVEs published 2014-01-20

7 CVEs were published on January 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0008](https://cve.now/CVE-2014-0008.md): lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which al (no CVSS)
- [CVE-2014-0009](https://cve.now/CVE-2014-0009.md): course/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 does not en (no CVSS)
- [CVE-2014-0010](https://cve.now/CVE-2014-0010.md): Multiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x be (no CVSS)
- [CVE-2013-3594](https://cve.now/CVE-2013-3594.md): The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2013-3595](https://cve.now/CVE-2013-3595.md): The OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote aut (no CVSS)
- [CVE-2013-3606](https://cve.now/CVE-2013-3606.md): The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attacker (no CVSS)
- [CVE-2014-0668](https://cve.now/CVE-2014-0668.md): Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.