# CVEs published 2015-01-22

36 CVEs were published on January 22, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-7923](https://cve.now/CVE-2014-7923.md): The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before (no CVSS)
- [CVE-2014-7924](https://cve.now/CVE-2014-7924.md): Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial (no CVSS)
- [CVE-2014-7925](https://cve.now/CVE-2014-7925.md): Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers (no CVSS)
- [CVE-2014-7926](https://cve.now/CVE-2014-7926.md): The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before (no CVSS)
- [CVE-2014-7927](https://cve.now/CVE-2014-7927.md): The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, (no CVSS)
- [CVE-2014-7928](https://cve.now/CVE-2014-7928.md): hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attacke (no CVSS)
- [CVE-2014-7929](https://cve.now/CVE-2014-7929.md): Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implement (no CVSS)
- [CVE-2014-7930](https://cve.now/CVE-2014-7930.md): Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40 (no CVSS)
- [CVE-2014-7931](https://cve.now/CVE-2014-7931.md): factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corrupti (no CVSS)
- [CVE-2014-7932](https://cve.now/CVE-2014-7932.md): Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google C (no CVSS)
- [CVE-2014-7933](https://cve.now/CVE-2014-7933.md): Use-after-free vulnerability in the matroska\_read\_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrom (no CVSS)
- [CVE-2014-7934](https://cve.now/CVE-2014-7934.md): Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to ca (no CVSS)
- [CVE-2014-7935](https://cve.now/CVE-2014-7935.md): Use-after-free vulnerability in browser/speech/tts\_message\_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allow (no CVSS)
- [CVE-2014-7936](https://cve.now/CVE-2014-7936.md): Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location\_bar/zoom\_bubble\_view.cc in the Views impleme (no CVSS)
- [CVE-2014-7937](https://cve.now/CVE-2014-7937.md): Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote atta (no CVSS)
- [CVE-2014-7938](https://cve.now/CVE-2014-7938.md): The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or po (no CVSS)
- [CVE-2014-7939](https://cve.now/CVE-2014-7939.md): Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy (no CVSS)
- [CVE-2014-7940](https://cve.now/CVE-2014-7940.md): The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google (no CVSS)
- [CVE-2014-7941](https://cve.now/CVE-2014-7941.md): The SelectionOwner::ProcessTarget function in ui/base/x/selection\_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 use (no CVSS)
- [CVE-2014-7942](https://cve.now/CVE-2014-7942.md): The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers (no CVSS)
- [CVE-2014-7943](https://cve.now/CVE-2014-7943.md): Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie (no CVSS)
- [CVE-2014-7944](https://cve.now/CVE-2014-7944.md): The sycc422\_to\_rgb function in fxcodec/codec/fx\_codec\_jpx\_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly (no CVSS)
- [CVE-2014-7945](https://cve.now/CVE-2014-7945.md): OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of- (no CVSS)
- [CVE-2014-7946](https://cve.now/CVE-2014-7946.md): The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.9 (no CVSS)
- [CVE-2014-7947](https://cve.now/CVE-2014-7947.md): OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of- (no CVSS)
- [CVE-2014-7948](https://cve.now/CVE-2014-7948.md): The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache\_update\_job.cc in Google Chrome before 40. (no CVSS)
- [CVE-2015-1205](https://cve.now/CVE-2015-1205.md): Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2015-1346](https://cve.now/CVE-2015-1346.md): Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause (no CVSS)
- [CVE-2015-1175](https://cve.now/CVE-2015-1175.md): Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote (no CVSS)
- [CVE-2015-1309](https://cve.now/CVE-2015-1309.md): XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote a (no CVSS)
- [CVE-2015-1310](https://cve.now/CVE-2015-1310.md): SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via uns (no CVSS)
- [CVE-2015-1311](https://cve.now/CVE-2015-1311.md): The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecified vectors, aka SAP No (no CVSS)
- [CVE-2015-1312](https://cve.now/CVE-2015-1312.md): The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileg (no CVSS)
- [CVE-2015-1306](https://cve.now/CVE-2015-1306.md): The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitr (no CVSS)
- [CVE-2014-8008](https://cve.now/CVE-2014-8008.md): Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remo (no CVSS)
- [CVE-2015-0925](https://cve.now/CVE-2015-0925.md): The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.