# CVEs published 2014-02-04

24 CVEs were published on February 4, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2725](https://cve.now/CVE-2011-2725.md): Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (no CVSS)
- [CVE-2012-0875](https://cve.now/CVE-2012-0875.md): SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information… (no CVSS)
- [CVE-2012-2106](https://cve.now/CVE-2012-2106.md): Integer overflow in the pv\_import function in util/pv\_import.c in Csound 5.16.6, when converting a file, allows remote attackers to… (no CVSS)
- [CVE-2012-2107](https://cve.now/CVE-2012-2107.md): Integer overflow in the main function in util/lpci\_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote… (no CVSS)
- [CVE-2012-2108](https://cve.now/CVE-2012-2108.md): Stack-based buffer overflow in the main function in util/lpci\_main.c in Csound before 5.17.2, when converting a file, allows user-assisted… (no CVSS)
- [CVE-2014-1458](https://cve.now/CVE-2014-1458.md): Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote… (no CVSS)
- [CVE-2012-6493](https://cve.now/CVE-2012-6493.md): Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the… (no CVSS)
- [CVE-2013-3098](https://cve.now/CVE-2013-3098.md): Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote… (no CVSS)
- [CVE-2013-3365](https://cve.now/CVE-2013-3365.md): TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network… (no CVSS)
- [CVE-2014-0019](https://cve.now/CVE-2014-0019.md): Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service… (no CVSS)
- [CVE-2014-1471](https://cve.now/CVE-2014-1471.md): SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x… (no CVSS)
- [CVE-2014-1694](https://cve.now/CVE-2014-1694.md): Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3)… (no CVSS)
- [CVE-2013-5427](https://cve.now/CVE-2013-5427.md): Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8… (no CVSS)
- [CVE-2013-6032](https://cve.now/CVE-2013-6032.md): cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before… (no CVSS)
- [CVE-2013-6033](https://cve.now/CVE-2013-6033.md): Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091… (no CVSS)
- [CVE-2013-6034](https://cve.now/CVE-2013-6034.md): The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat… (no CVSS)
- [CVE-2013-6035](https://cve.now/CVE-2013-6035.md): The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat… (no CVSS)
- [CVE-2013-7179](https://cve.now/CVE-2013-7179.md): The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands… (no CVSS)
- [CVE-2013-7181](https://cve.now/CVE-2013-7181.md): Cross-site scripting (XSS) vulnerability in user/ldap\_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2013-7182](https://cve.now/CVE-2013-7182.md): Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject… (no CVSS)
- [CVE-2013-7183](https://cve.now/CVE-2013-7183.md): cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a… (no CVSS)
- [CVE-2014-0329](https://cve.now/CVE-2014-0329.md): The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows… (no CVSS)
- [CVE-2014-0686](https://cve.now/CVE-2014-0686.md): Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging… (no CVSS)
- [CVE-2014-0834](https://cve.now/CVE-2014-0834.md): IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.