# CVEs published 2015-02-01

15 CVEs were published on February 1, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-7266](https://cve.now/CVE-2014-7266.md): Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a (no CVSS)
- [CVE-2014-7269](https://cve.now/CVE-2014-7269.md): ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56 (no CVSS)
- [CVE-2014-7270](https://cve.now/CVE-2014-7270.md): Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers (no CVSS)
- [CVE-2014-8630](https://cve.now/CVE-2014-8630.md): Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users (no CVSS)
- [CVE-2014-9200](https://cve.now/CVE-2014-9200.md): Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow (no CVSS, Schneider Electric Unity Pro · Schneider Electric SoMach… +9)
- [CVE-2015-0868](https://cve.now/CVE-2015-0868.md): Unrestricted file upload vulnerability in Mrs. (no CVSS)
- [CVE-2015-0869](https://cve.now/CVE-2015-0869.md): I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests. (no CVSS)
- [CVE-2014-4632](https://cve.now/CVE-2014-4632.md): VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Ava (no CVSS)
- [CVE-2014-7287](https://cve.now/CVE-2014-7287.md): The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to t (no CVSS)
- [CVE-2014-7288](https://cve.now/CVE-2014-7288.md): Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitra (no CVSS)
- [CVE-2014-8266](https://cve.now/CVE-2014-8266.md): Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to i (no CVSS)
- [CVE-2014-8267](https://cve.now/CVE-2014-8267.md): Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2014-8268](https://cve.now/CVE-2014-8268.md): QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request. (no CVSS)
- [CVE-2015-0870](https://cve.now/CVE-2015-0870.md): Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject (no CVSS)
- [CVE-2015-0926](https://cve.now/CVE-2015-0926.md): Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by mo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.