# CVEs published 2014-01-28

13 CVEs were published on January 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-5094](https://cve.now/CVE-2013-5094.md): Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2013-6649](https://cve.now/CVE-2013-6649.md): Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chro (no CVSS)
- [CVE-2013-6650](https://cve.now/CVE-2013-6650.md): The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.10 (no CVSS)
- [CVE-2014-1681](https://cve.now/CVE-2014-1681.md): Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security f (no CVSS)
- [CVE-2012-5192](https://cve.now/CVE-2012-5192.md): Directory traversal vulnerability in gmap/view\_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2013-6838](https://cve.now/CVE-2013-6838.md): An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when usi (no CVSS)
- [CVE-2013-7135](https://cve.now/CVE-2013-7135.md): The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows local users to have (no CVSS)
- [CVE-2014-0647](https://cve.now/CVE-2014-0647.md): The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlyti (no CVSS)
- [CVE-2014-1604](https://cve.now/CVE-2014-1604.md): The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-cr (no CVSS, rply)
- [CVE-2014-1624](https://cve.now/CVE-2014-1624.md): Race condition in the xdg.BaseDirectory.get\_runtime\_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-c (no CVSS, pyxdg)
- [CVE-2014-1638](https://cve.now/CVE-2014-1638.md): (1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a (no CVSS)
- [CVE-2014-1639](https://cve.now/CVE-2014-1639.md): syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the origi (no CVSS)
- [CVE-2014-1640](https://cve.now/CVE-2014-1640.md): axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.