# CVEs published 2014-01-31

8 CVEs were published on January 31, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0001](https://cve.now/CVE-2014-0001.md): Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (cr (no CVSS)
- [CVE-2013-6143](https://cve.now/CVE-2013-6143.md): The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3\_P4 and C3413-500-001F0\_PB allows remote attackers to cause a deni (no CVSS)
- [CVE-2013-4383](https://cve.now/CVE-2013-4383.md): Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users (no CVSS)
- [CVE-2013-4979](https://cve.now/CVE-2013-4979.md): Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS (no CVSS)
- [CVE-2013-6235](https://cve.now/CVE-2013-6235.md): Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arb (no CVSS, com.jamonapi:jamon)
- [CVE-2014-1204](https://cve.now/CVE-2014-1204.md): SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitra (no CVSS)
- [CVE-2013-6727](https://cve.now/CVE-2013-6727.md): The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows r (no CVSS)
- [CVE-2014-0757](https://cve.now/CVE-2014-0757.md): Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference (no CVSS, Smart Software Solutions (3S) CoDeSys Runtime Toolkit)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.