# CVEs published 2014-06-05

32 CVEs were published on June 5, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0195](https://cve.now/CVE-2014-0195.md): The dtls1\_reassemble\_fragment function in d1\_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not… (no CVSS)
- [CVE-2014-0221](https://cve.now/CVE-2014-0221.md): The dtls1\_get\_message\_fragment function in d1\_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote… (no CVSS)
- [CVE-2014-0224](https://cve.now/CVE-2014-0224.md): OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages… (no CVSS)
- [CVE-2014-3470](https://cve.now/CVE-2014-3470.md): The ssl3\_send\_client\_key\_exchange function in s3\_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an… (no CVSS)
- [CVE-2012-4728](https://cve.now/CVE-2012-4728.md): The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and… (no CVSS)
- [CVE-2013-0733](https://cve.now/CVE-2013-0733.md): Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute… (no CVSS)
- [CVE-2013-2130](https://cve.now/CVE-2013-2130.md): ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1)… (no CVSS)
- [CVE-2013-2618](https://cve.now/CVE-2013-2618.md): Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2013-3739](https://cve.now/CVE-2013-3739.md): Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2013-4860](https://cve.now/CVE-2013-4860.md): Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to… (no CVSS)
- [CVE-2014-3467](https://cve.now/CVE-2014-3467.md): Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a… (no CVSS)
- [CVE-2014-3468](https://cve.now/CVE-2014-3468.md): The asn1\_get\_bit\_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which… (no CVSS)
- [CVE-2014-3469](https://cve.now/CVE-2014-3469.md): The (1) asn1\_read\_value\_type and (2) asn1\_read\_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a… (no CVSS)
- [CVE-2014-3967](https://cve.now/CVE-2014-3967.md): The HVMOP\_inject\_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which… (no CVSS)
- [CVE-2014-3968](https://cve.now/CVE-2014-3968.md): The HVMOP\_inject\_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host… (no CVSS)
- [CVE-2014-3969](https://cve.now/CVE-2014-3969.md): Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest… (no CVSS)
- [CVE-2014-1997](https://cve.now/CVE-2014-1997.md): The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified… (no CVSS)
- [CVE-2014-1998](https://cve.now/CVE-2014-1998.md): Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to… (no CVSS)
- [CVE-2014-2345](https://cve.now/CVE-2014-2345.md): COPA-DATA zenon DNP3 Improper Input Validation (no CVSS, COPA-DATA zenon DNP3 NG driver · COPA-DATA zenon DNP3 Proce…)
- [CVE-2014-2346](https://cve.now/CVE-2014-2346.md): COPA-DATA zenon DNP3 Improper Input Validation (no CVSS, COPA-DATA zenon DNP3 NG driver · COPA-DATA zenon DNP3 Proce…)
- [CVE-2014-2577](https://cve.now/CVE-2014-2577.md): Multiple cross-site scripting (XSS) vulnerabilities in the Transform Content Center in Bottomline Technologies Transform Foundation Server… (no CVSS)
- [CVE-2014-3878](https://cve.now/CVE-2014-3878.md): Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before… (no CVSS)
- [CVE-2014-3912](https://cve.now/CVE-2014-3912.md): Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in… (no CVSS)
- [CVE-2014-3917](https://cve.now/CVE-2014-3917.md): kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG\_AUDITSYSCALL is enabled with certain syscall rules, allows local users to… (no CVSS)
- [CVE-2014-3940](https://cve.now/CVE-2014-3940.md): The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of… (no CVSS)
- [CVE-2014-3973](https://cve.now/CVE-2014-3973.md): Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2014-3974](https://cve.now/CVE-2014-3974.md): Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2014-3975](https://cve.now/CVE-2014-3975.md): Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in… (no CVSS)
- [CVE-2014-3976](https://cve.now/CVE-2014-3976.md): Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1\_55 allows remote attackers… (no CVSS)
- [CVE-2013-0302](https://cve.now/CVE-2013-0302.md): Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain sensitive information via unspecified vectors… (no CVSS)
- [CVE-2013-0304](https://cve.now/CVE-2013-0304.md): ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary… (no CVSS)
- [CVE-2014-2051](https://cve.now/CVE-2014-2051.md): ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-06-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.