# CVEs published 2015-01-07

13 CVEs were published on January 7, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1425](https://cve.now/CVE-2014-1425.md): cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all cgro (no CVSS)
- [CVE-2014-9221](https://cve.now/CVE-2014-9221.md): strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted (no CVSS)
- [CVE-2014-9493](https://cve.now/CVE-2014-9493.md): The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read (no CVSS)
- [CVE-2014-9569](https://cve.now/CVE-2014-9569.md): Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for HTML 3.0 allow remote attackers to inject ar (no CVSS)
- [CVE-2015-0361](https://cve.now/CVE-2015-0361.md): Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted (no CVSS)
- [CVE-2014-3779](https://cve.now/CVE-2014-3779.md): Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject arb (no CVSS)
- [CVE-2014-8993](https://cve.now/CVE-2014-8993.md): Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6. (no CVSS)
- [CVE-2014-9567](https://cve.now/CVE-2014-9567.md): Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to exe (no CVSS)
- [CVE-2014-4635](https://cve.now/CVE-2014-4635.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) before 6.8 allow remote attackers to inject (no CVSS)
- [CVE-2014-4636](https://cve.now/CVE-2014-4636.md): Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to hijack the (no CVSS)
- [CVE-2014-4637](https://cve.now/CVE-2014-4637.md): Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary we (no CVSS)
- [CVE-2014-4638](https://cve.now/CVE-2014-4638.md): EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive informat (no CVSS)
- [CVE-2014-4639](https://cve.now/CVE-2014-4639.md): EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop comp (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.