# CVEs published 2014-01-22

19 CVEs were published on January 22, 2014: 1 critical, 0 high. Days are UTC.

- [CVE-2014-0660](https://cve.now/CVE-2014-0660.md): Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) (no CVSS)
- [CVE-2014-0661](https://cve.now/CVE-2014-0661.md): The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300- (no CVSS)
- [CVE-2014-0662](https://cve.now/CVE-2014-0662.md): The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (proce (no CVSS)
- [CVE-2014-0676](https://cve.now/CVE-2014-0676.md): Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367. (no CVSS)
- [CVE-2014-0677](https://cve.now/CVE-2014-0677.md): The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP sessi (no CVSS)
- [CVE-2014-0806](https://cve.now/CVE-2014-0806.md): The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geol (no CVSS)
- [CVE-2014-0807](https://cve.now/CVE-2014-0807.md): data/class/pages/shopping/LC\_Page\_Shopping\_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers (no CVSS)
- [CVE-2014-0808](https://cve.now/CVE-2014-0808.md): Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29 (CVSS 9.1, EC-CUBE CO. EC-CUBE · S‑cubism EC-Orange +1)
- [CVE-2013-2750](https://cve.now/CVE-2013-2750.md): Cross-site scripting (XSS) vulnerability in e107\_plugins/content/handlers/content\_preset.php in e107 before 1.0.3 allows remote attackers to (no CVSS)
- [CVE-2013-7304](https://cve.now/CVE-2013-7304.md): Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which a (no CVSS)
- [CVE-2013-7305](https://cve.now/CVE-2013-7305.md): fpw.php in e107 through 1.0.4 does not check the user\_ban field, which makes it easier for remote attackers to reset passwords by sending a (no CVSS)
- [CVE-2014-1636](https://cve.now/CVE-2014-1636.md): Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2014-1637](https://cve.now/CVE-2014-1637.md): Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup\_ray2.php, which allows remote attacke (no CVSS)
- [CVE-2013-6343](https://cve.now/CVE-2013-6343.md): Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374\_979 allow remote attackers to (no CVSS)
- [CVE-2013-6746](https://cve.now/CVE-2013-6746.md): Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Bus (no CVSS)
- [CVE-2014-0669](https://cve.now/CVE-2014-0669.md): The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote (no CVSS)
- [CVE-2014-0670](https://cve.now/CVE-2014-0670.md): Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2014-0671](https://cve.now/CVE-2014-0671.md): Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack (no CVSS)
- [CVE-2014-0672](https://cve.now/CVE-2014-0672.md): The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated us (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.