# CVEs published 2015-01-10

17 CVEs were published on January 10, 2015: 0 critical, 1 high. Days are UTC.

- [CVE-2014-9495](https://cve.now/CVE-2014-9495.md): Heap-based buffer overflow in the png\_combine\_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, (CVSS 8.8)
- [CVE-2014-3096](https://cve.now/CVE-2014-3096.md): Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management before 6.0.5.5a allows remote authenticated users to inject (no CVSS)
- [CVE-2014-6158](https://cve.now/CVE-2014-6158.md): Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before (no CVSS)
- [CVE-2014-6199](https://cve.now/CVE-2014-6199.md): The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause (no CVSS)
- [CVE-2014-6212](https://cve.now/CVE-2014-6212.md): The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix (no CVSS)
- [CVE-2014-8020](https://cve.now/CVE-2014-8020.md): Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and perf (no CVSS)
- [CVE-2014-8035](https://cve.now/CVE-2014-8035.md): The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exist (no CVSS)
- [CVE-2014-8036](https://cve.now/CVE-2014-8036.md): The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeti (no CVSS)
- [CVE-2014-9190](https://cve.now/CVE-2014-9190.md): Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow (no CVSS, Schneider Electric InTouch Access Anywhere Server)
- [CVE-2014-9191](https://cve.now/CVE-2014-9191.md): The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate attackers to cause a d (no CVSS)
- [CVE-2015-0559](https://cve.now/CVE-2015-0559.md): Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x (no CVSS)
- [CVE-2015-0560](https://cve.now/CVE-2015-0560.md): The dissect\_wccp2r1\_address\_table\_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 an (no CVSS)
- [CVE-2015-0561](https://cve.now/CVE-2015-0561.md): asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, w (no CVSS)
- [CVE-2015-0562](https://cve.now/CVE-2015-0562.md): Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x (no CVSS)
- [CVE-2015-0563](https://cve.now/CVE-2015-0563.md): epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length val (no CVSS)
- [CVE-2015-0564](https://cve.now/CVE-2015-0564.md): Buffer underflow in the ssl\_decrypt\_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x befo (no CVSS)
- [CVE-2015-0582](https://cve.now/CVE-2015-0582.md): The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted tra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.