CVEs published January 17, 2015
14 CVEs were published on January 17, 2015: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- GE Multilink ML800/1200/1600/2400 · GE ML810/3000/3100 seri…
- 2
- Arbiter Systems Model 1094B GPS Substation Clock
- 1
- Clorius Controls A/S Java web client
- 1
- GE Proficy HMI/SCADA–CIMPLICITY
- 1
- Phoenix Contact ProConOs · Phoenix Contact MultiProg
- 1
Medium, low and unrated 14
- CVE-2014-3018IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial
- CVE-2014-3019IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade an
- CVE-2014-3032Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0
- CVE-2014-4835IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in
- CVE-2014-6197IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjack
- CVE-2015-0590Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, b
- CVE-2015-0924Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via
- CVE-2014-2355GE Proficy HMI/SCADA CIMPLICITY CimViewGE Proficy HMI/SCADA–CIMPLICITY
- CVE-2014-5418GE Multilink Uncontrolled Resource ConsumptionGE Multilink ML800/1200/1600/2400 · GE ML810/3000/3100 seri…
- CVE-2014-5419GE Multilink Use of Hard-coded Cryptographic KeyGE Multilink ML800/1200/1600/2400 · GE ML810/3000/3100 seri…
- CVE-2014-8143Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, a
- CVE-2014-9194Arbiter Systems 1094B GPS Clock Insufficient Verification of Data AuthenticityArbiter Systems Model 1094B GPS Substation Clock
- CVE-2014-9195Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical FunctionPhoenix Contact ProConOs · Phoenix Contact MultiProg
- CVE-2014-9199Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption StrengthClorius Controls A/S Java web client