# CVEs published 2014-02-28

20 CVEs were published on February 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3634](https://cve.now/CVE-2011-3634.md): methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled… (no CVSS)
- [CVE-2014-1912](https://cve.now/CVE-2014-1912.md): Buffer overflow in the socket.recvfrom\_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x… (no CVSS)
- [CVE-2014-2262](https://cve.now/CVE-2014-2262.md): Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote… (no CVSS)
- [CVE-2014-2263](https://cve.now/CVE-2014-2263.md): The mpegts\_write\_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier… (no CVSS)
- [CVE-2013-2498](https://cve.now/CVE-2013-2498.md): SQL injection vulnerability in the login page in flexycms/modules/user/user\_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote… (no CVSS)
- [CVE-2014-1456](https://cve.now/CVE-2014-1456.md): Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject… (no CVSS)
- [CVE-2014-1695](https://cve.now/CVE-2014-1695.md): Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before… (no CVSS)
- [CVE-2014-1888](https://cve.now/CVE-2014-1888.md): Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject… (no CVSS)
- [CVE-2014-2059](https://cve.now/CVE-2014-2059.md): Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before… (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-2067](https://cve.now/CVE-2014-2067.md): Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote… (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-2080](https://cve.now/CVE-2014-2080.md): Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers… (no CVSS)
- [CVE-2014-1878](https://cve.now/CVE-2014-1878.md): Stack-based buffer overflow in the cmd\_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before… (no CVSS)
- [CVE-2014-0069](https://cve.now/CVE-2014-0069.md): The cifs\_iovec\_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that… (no CVSS)
- [CVE-2014-0759](https://cve.now/CVE-2014-0759.md): Schneider Electric Floating License Manager Unquoted Search Path or Element (CVSS 5.9, Schneider Electric Floating License Manager)
- [CVE-2014-0774](https://cve.now/CVE-2014-0774.md): Schneider Electric OFS Stack Buffer Overflow (no CVSS, Schneider Electric TLXCDSUOFS33 · Schneider Electric TLX… +3)
- [CVE-2014-0874](https://cve.now/CVE-2014-0874.md): Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject… (no CVSS)
- [CVE-2014-1690](https://cve.now/CVE-2014-1690.md): The help function in net/netfilter/nf\_nat\_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information… (no CVSS)
- [CVE-2014-1874](https://cve.now/CVE-2014-1874.md): The security\_context\_to\_sid\_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause… (no CVSS)
- [CVE-2014-2038](https://cve.now/CVE-2014-2038.md): The nfs\_can\_extend\_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write… (no CVSS)
- [CVE-2014-2039](https://cve.now/CVE-2014-2039.md): arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.