# CVEs published 2014-02-20

10 CVEs were published on February 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4420](https://cve.now/CVE-2013-4420.md): Multiple directory traversal vulnerabilities in the (1) tar\_extract\_glob and (2) tar\_extract\_all functions in libtar 1.2.20 and earlier… (no CVSS)
- [CVE-2014-0080](https://cve.now/CVE-2014-0080.md): SQL injection vulnerability in activerecord/lib/active\_record/connection\_adapters/postgresql/cast.rb in Active Record in Ruby on Rails… (no CVSS, activerecord)
- [CVE-2014-0081](https://cve.now/CVE-2014-0081.md): Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action\_view/helpers/number\_helper.rb in Ruby on Rails before 3.2.17… (no CVSS, rails · actionpack)
- [CVE-2014-0082](https://cve.now/CVE-2014-0082.md): actionpack/lib/action\_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during… (no CVSS, actionpack)
- [CVE-2014-0733](https://cve.now/CVE-2014-0733.md): The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly… (no CVSS)
- [CVE-2014-1879](https://cve.now/CVE-2014-1879.md): Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary… (no CVSS)
- [CVE-2014-0732](https://cve.now/CVE-2014-0732.md): The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not… (no CVSS)
- [CVE-2014-0734](https://cve.now/CVE-2014-0734.md): SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager… (no CVSS)
- [CVE-2014-0735](https://cve.now/CVE-2014-0735.md): Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM)… (no CVSS)
- [CVE-2014-0736](https://cve.now/CVE-2014-0736.md): Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-02-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.