# CVEs published 2015-01-20 9 CVEs were published on January 20, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-8386](https://cve.now/CVE-2014-8386.md): Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary code via a crafted ( (no CVSS) - [CVE-2014-8625](https://cve.now/CVE-2014-8625.md): Multiple format string vulnerabilities in the parse\_error\_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause (no CVSS) - [CVE-2014-8790](https://cve.now/CVE-2014-8790.md): XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configura (no CVSS) - [CVE-2014-9330](https://cve.now/CVE-2014-9330.md): Integer overflow in tif\_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) via crafted BMP (no CVSS) - [CVE-2014-9490](https://cve.now/CVE-2014-9490.md): The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service (no CVSS, sentry-raven) - [CVE-2014-9491](https://cve.now/CVE-2014-9491.md): The devzvol\_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of (no CVSS) - [CVE-2014-9494](https://cve.now/CVE-2014-9494.md): RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback\_users restriction via a crafted X-Forwareded-For header. (no CVSS) - [CVE-2015-1030](https://cve.now/CVE-2015-1030.md): Memory leak in the rfc2553\_connect\_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service ( (no CVSS) - [CVE-2015-1201](https://cve.now/CVE-2015-1201.md): Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-01-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.