# CVEs published 2015-01-17

14 CVEs were published on January 17, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3018](https://cve.now/CVE-2014-3018.md): IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial (no CVSS)
- [CVE-2014-3019](https://cve.now/CVE-2014-3019.md): IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade an (no CVSS)
- [CVE-2014-3032](https://cve.now/CVE-2014-3032.md): Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0 (no CVSS)
- [CVE-2014-4835](https://cve.now/CVE-2014-4835.md): IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in (no CVSS)
- [CVE-2014-6197](https://cve.now/CVE-2014-6197.md): IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjack (no CVSS)
- [CVE-2015-0590](https://cve.now/CVE-2015-0590.md): Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, b (no CVSS)
- [CVE-2015-0924](https://cve.now/CVE-2015-0924.md): Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via (no CVSS)
- [CVE-2014-2355](https://cve.now/CVE-2014-2355.md): GE Proficy HMI/SCADA CIMPLICITY CimView (no CVSS, GE Proficy HMI/SCADA–CIMPLICITY)
- [CVE-2014-5418](https://cve.now/CVE-2014-5418.md): GE Multilink Uncontrolled Resource Consumption (no CVSS, GE Multilink ML800/1200/1600/2400 · GE ML810/3000/3100 seri…)
- [CVE-2014-5419](https://cve.now/CVE-2014-5419.md): GE Multilink Use of Hard-coded Cryptographic Key (no CVSS, GE Multilink ML800/1200/1600/2400 · GE ML810/3000/3100 seri…)
- [CVE-2014-8143](https://cve.now/CVE-2014-8143.md): Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, a (no CVSS)
- [CVE-2014-9194](https://cve.now/CVE-2014-9194.md): Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity (no CVSS, Arbiter Systems Model 1094B GPS Substation Clock)
- [CVE-2014-9195](https://cve.now/CVE-2014-9195.md): Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function (no CVSS, Phoenix Contact ProConOs · Phoenix Contact MultiProg)
- [CVE-2014-9199](https://cve.now/CVE-2014-9199.md): Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength (no CVSS, Clorius Controls A/S Java web client)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.