# CVEs published 2015-01-14

18 CVEs were published on January 14, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3314](https://cve.now/CVE-2014-3314.md): Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and (no CVSS)
- [CVE-2015-0577](https://cve.now/CVE-2015-0577.md): Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email (no CVSS)
- [CVE-2015-0578](https://cve.now/CVE-2015-0578.md): Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (d (no CVSS)
- [CVE-2015-0579](https://cve.now/CVE-2015-0579.md): Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU (no CVSS)
- [CVE-2015-0583](https://cve.now/CVE-2015-0583.md): Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via (no CVSS)
- [CVE-2014-5231](https://cve.now/CVE-2014-5231.md): The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage vi (no CVSS)
- [CVE-2014-5232](https://cve.now/CVE-2014-5232.md): The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by (no CVSS)
- [CVE-2014-5233](https://cve.now/CVE-2014-5233.md): The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by (no CVSS)
- [CVE-2014-8634](https://cve.now/CVE-2014-8634.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before (no CVSS)
- [CVE-2014-8635](https://cve.now/CVE-2014-8635.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers t (no CVSS)
- [CVE-2014-8636](https://cve.now/CVE-2014-8636.md): The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that ha (no CVSS)
- [CVE-2014-8637](https://cve.now/CVE-2014-8637.md): Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obt (no CVSS)
- [CVE-2014-8638](https://cve.now/CVE-2014-8638.md): The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey (no CVSS)
- [CVE-2014-8639](https://cve.now/CVE-2014-8639.md): Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set- (no CVSS)
- [CVE-2014-8640](https://cve.now/CVE-2014-8640.md): The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and Se (no CVSS)
- [CVE-2014-8641](https://cve.now/CVE-2014-8641.md): Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before (no CVSS)
- [CVE-2014-8642](https://cve.now/CVE-2014-8642.md): Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCS (no CVSS)
- [CVE-2014-8643](https://cve.now/CVE-2014-8643.md): Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by levera (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.