CVEs published January 28, 2014
13 CVEs were published on January 28, 2014: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- pyxdg
- 1
- rply
- 1
Medium, low and unrated 13
- CVE-2013-5094Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web sc
- CVE-2013-6649Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chro
- CVE-2013-6650The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.10
- CVE-2014-1681Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security f
- CVE-2012-5192Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files vi
- CVE-2013-6838An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when usi
- CVE-2013-7135The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows local users to have
- CVE-2014-0647The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlyti
- CVE-2014-1604The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-crrply
- CVE-2014-1624Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-cpyxdg
- CVE-2014-1638(1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a
- CVE-2014-1639syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the origi
- CVE-2014-1640axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes t