# CVEs published 2014-02-13

16 CVEs were published on February 13, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2829](https://cve.now/CVE-2013-2829.md): MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed… (no CVSS)
- [CVE-2013-3978](https://cve.now/CVE-2013-3978.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to… (no CVSS)
- [CVE-2013-3983](https://cve.now/CVE-2013-3983.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using… (no CVSS)
- [CVE-2013-3988](https://cve.now/CVE-2013-3988.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks… (no CVSS)
- [CVE-2013-6742](https://cve.now/CVE-2013-6742.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password… (no CVSS)
- [CVE-2013-6743](https://cve.now/CVE-2013-6743.md): Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote… (no CVSS)
- [CVE-2014-1219](https://cve.now/CVE-2014-1219.md): CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E\_SSNID session token in place of the entire token, which allows remote… (no CVSS)
- [CVE-2014-1253](https://cve.now/CVE-2014-1253.md): AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have… (no CVSS)
- [CVE-2014-0722](https://cve.now/CVE-2014-0722.md): The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote… (no CVSS)
- [CVE-2014-0723](https://cve.now/CVE-2014-0723.md): Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows… (no CVSS)
- [CVE-2014-0724](https://cve.now/CVE-2014-0724.md): The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass… (no CVSS)
- [CVE-2014-0725](https://cve.now/CVE-2014-0725.md): Cisco Unified Communications Manager (UCM) does not require authentication for reading WAR files, which allows remote attackers to obtain… (no CVSS)
- [CVE-2014-0726](https://cve.now/CVE-2014-0726.md): SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier… (no CVSS)
- [CVE-2014-0727](https://cve.now/CVE-2014-0727.md): SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM)… (no CVSS)
- [CVE-2014-0728](https://cve.now/CVE-2014-0728.md): SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote… (no CVSS)
- [CVE-2014-0729](https://cve.now/CVE-2014-0729.md): SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
