# CVEs published 2015-01-28 9 CVEs were published on January 28, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-8917](https://cve.now/CVE-2014-8917.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/file (no CVSS) - [CVE-2014-8920](https://cve.now/CVE-2014-8920.md): Buffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1, and 7.1 on Windows allows local users to gain privileges via (no CVSS) - [CVE-2015-0312](https://cve.now/CVE-2015-0312.md): Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11. (no CVSS) - [CVE-2015-0581](https://cve.now/CVE-2015-0581.md): The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of ser (no CVSS) - [CVE-2015-0586](https://cve.now/CVE-2015-0586.md): The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Servic (no CVSS) - [CVE-2015-0235](https://cve.now/CVE-2015-0235.md): Heap-based buffer overflow in the \_\_nss\_hostname\_digits\_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-depen (no CVSS) - [CVE-2015-1375](https://cve.now/CVE-2015-1375.md): pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, whic (no CVSS) - [CVE-2015-1376](https://cve.now/CVE-2015-1376.md): pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated user (no CVSS) - [CVE-2015-1419](https://cve.now/CVE-2015-1419.md): Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-01-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.