CVEs published February 1, 2015
15 CVEs were published on February 1, 2015: 0 critical, 0 high.
- Published
- 15
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Schneider Electric Unity Pro · Schneider Electric SoMach… +9
- 1
Medium, low and unrated 15
- CVE-2014-7266Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a
- CVE-2014-7269ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56
- CVE-2014-7270Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers
- CVE-2014-8630Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users
- CVE-2014-9200Schneider Electric Device Type Managers (DTMs) Stack-based Buffer OverflowSchneider Electric Unity Pro · Schneider Electric SoMach… +9
- CVE-2015-0868Unrestricted file upload vulnerability in Mrs.
- CVE-2015-0869I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.
- CVE-2014-4632VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Ava
- CVE-2014-7287The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to t
- CVE-2014-7288Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitra
- CVE-2014-8266Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to i
- CVE-2014-8267Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML v
- CVE-2014-8268QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.
- CVE-2015-0870Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject
- CVE-2015-0926Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by mo