# CVEs published 2014-01-30

17 CVEs were published on January 30, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1610](https://cve.now/CVE-2014-1610.md): MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows rem (no CVSS)
- [CVE-2013-7303](https://cve.now/CVE-2013-7303.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer\_auteur.php (no CVSS)
- [CVE-2014-1837](https://cve.now/CVE-2014-1837.md): Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com\_komento) component before 1.7.4 for Joomla! allows remote attackers (no CVSS)
- [CVE-2013-7246](https://cve.now/CVE-2013-7246.md): Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to (no CVSS)
- [CVE-2014-0793](https://cve.now/CVE-2014-0793.md): Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com\_komento) component before 1.7.3 for Joomla! allow remote (no CVSS)
- [CVE-2014-1611](https://cve.now/CVE-2014-1611.md): Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote attackers to inject ar (no CVSS)
- [CVE-2014-1612](https://cve.now/CVE-2014-1612.md): Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dg (no CVSS)
- [CVE-2012-3000](https://cve.now/CVE-2012-3000.md): Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Cont (no CVSS)
- [CVE-2013-0177](https://cve.now/CVE-2013-0177.md): Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project (aka OFBiz) (no CVSS)
- [CVE-2013-1376](https://cve.now/CVE-2013-1376.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitra (no CVSS)
- [CVE-2013-3084](https://cve.now/CVE-2013-3084.md): Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2013-3087](https://cve.now/CVE-2013-3087.md): Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2013-3090](https://cve.now/CVE-2013-3090.md): Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2014-0835](https://cve.now/CVE-2014-0835.md): Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authen (no CVSS)
- [CVE-2014-0836](https://cve.now/CVE-2014-0836.md): Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2014-0837](https://cve.now/CVE-2014-0837.md): The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-0838](https://cve.now/CVE-2014-0838.md): The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console comm (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.