# CVEs published 2015-01-23

11 CVEs were published on January 23, 2015: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2015-0310](https://cve.now/CVE-2015-0310.md): Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not p (CVSS 7.8, KEV)
- [CVE-2015-0311](https://cve.now/CVE-2015-0311.md): Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and throu (CVSS 7.8, KEV)
- [CVE-2014-8802](https://cve.now/CVE-2014-8802.md): The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows (no CVSS)
- [CVE-2014-9623](https://cve.now/CVE-2014-9623.md): OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a (no CVSS, glance)
- [CVE-2014-9638](https://cve.now/CVE-2014-9638.md): oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the n (no CVSS)
- [CVE-2014-9639](https://cve.now/CVE-2014-9639.md): Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channe (no CVSS)
- [CVE-2014-9640](https://cve.now/CVE-2014-9640.md): oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file. (no CVSS)
- [CVE-2015-1176](https://cve.now/CVE-2015-1176.md): Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2015-1180](https://cve.now/CVE-2015-1180.md): Cross-site scripting (XSS) vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2015-1200](https://cve.now/CVE-2015-1200.md): Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission (no CVSS)
- [CVE-2015-1347](https://cve.now/CVE-2015-1347.md): Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.