# CVEs published 2014-05-30

25 CVEs were published on May 30, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6744](https://cve.now/CVE-2013-6744.md): The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote… (no CVSS)
- [CVE-2014-0907](https://cve.now/CVE-2014-0907.md): Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8… (no CVSS)
- [CVE-2014-2342](https://cve.now/CVE-2014-2342.md): Triangle MicroWorks SCADA Data Gateway Resource Exhaustion (no CVSS, Triangle MicroWorks SCADA Data Gateway)
- [CVE-2014-2343](https://cve.now/CVE-2014-2343.md): Triangle MicroWorks SCADA Data Gateway Resource Exhaustion (no CVSS, Triangle MicroWorks SCADA Data Gateway)
- [CVE-2014-2352](https://cve.now/CVE-2014-2352.md): Cogent DataHub Path Traversal (no CVSS, Cogent DataHub)
- [CVE-2014-2353](https://cve.now/CVE-2014-2353.md): Cogent DataHub XSS (no CVSS, Cogent DataHub)
- [CVE-2014-2354](https://cve.now/CVE-2014-2354.md): Cogent DataHub Use of Password Hash With Insufficient Computational Effort (no CVSS, Cogent DataHub)
- [CVE-2014-0925](https://cve.now/CVE-2014-0925.md): Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote… (no CVSS)
- [CVE-2014-3227](https://cve.now/CVE-2014-3227.md): dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded… (no CVSS)
- [CVE-2014-3864](https://cve.now/CVE-2014-3864.md): Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended… (no CVSS)
- [CVE-2014-3865](https://cve.now/CVE-2014-3865.md): Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the… (no CVSS)
- [CVE-2014-3010](https://cve.now/CVE-2014-3010.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6… (no CVSS)
- [CVE-2012-5560](https://cve.now/CVE-2012-5560.md): The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call. (no CVSS)
- [CVE-2012-5572](https://cve.now/CVE-2012-5572.md): CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attackers to inject… (no CVSS)
- [CVE-2012-5876](https://cve.now/CVE-2012-5876.md): Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-5877](https://cve.now/CVE-2012-5877.md): Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP… (no CVSS)
- [CVE-2013-4143](https://cve.now/CVE-2013-4143.md): The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned… (no CVSS)
- [CVE-2013-5919](https://cve.now/CVE-2013-5919.md): Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record. (no CVSS)
- [CVE-2013-6788](https://cve.now/CVE-2013-6788.md): The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX\_SM\_SALE\_UID cookie, which makes it… (no CVSS)
- [CVE-2014-0202](https://cve.now/CVE-2014-0202.md): The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dwh) package before… (no CVSS)
- [CVE-2014-3780](https://cve.now/CVE-2014-3780.md): Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass… (no CVSS)
- [CVE-2014-3921](https://cve.now/CVE-2014-3921.md): Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject… (no CVSS)
- [CVE-2014-3922](https://cve.now/CVE-2014-3922.md): Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote… (no CVSS)
- [CVE-2014-3923](https://cve.now/CVE-2014-3923.md): Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote… (no CVSS)
- [CVE-2014-3924](https://cve.now/CVE-2014-3924.md): Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-05-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.