# CVEs published 2014-06-18

34 CVEs were published on June 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2592](https://cve.now/CVE-2012-2592.md): Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2013-5017](https://cve.now/CVE-2013-5017.md): SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands… (no CVSS)
- [CVE-2014-1650](https://cve.now/CVE-2014-1650.md): SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated… (no CVSS)
- [CVE-2014-1651](https://cve.now/CVE-2014-1651.md): SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers… (no CVSS)
- [CVE-2014-1652](https://cve.now/CVE-2014-1652.md): Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote… (no CVSS)
- [CVE-2014-4021](https://cve.now/CVE-2014-4021.md): Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive… (no CVSS)
- [CVE-2014-4049](https://cve.now/CVE-2014-4049.md): Heap-based buffer overflow in the php\_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause… (no CVSS)
- [CVE-2014-4151](https://cve.now/CVE-2014-4151.md): The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code… (no CVSS)
- [CVE-2014-4152](https://cve.now/CVE-2014-4152.md): The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote\_task… (no CVSS)
- [CVE-2014-4153](https://cve.now/CVE-2014-4153.md): The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get\_file request. (no CVSS)
- [CVE-2014-0598](https://cve.now/CVE-2014-0598.md): Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux has… (no CVSS)
- [CVE-2014-0599](https://cve.now/CVE-2014-0599.md): Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux… (no CVSS)
- [CVE-2013-6221](https://cve.now/CVE-2013-6221.md): Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server… (no CVSS)
- [CVE-2014-0910](https://cve.now/CVE-2014-0910.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0… (no CVSS)
- [CVE-2014-2000](https://cve.now/CVE-2014-2000.md): The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read… (no CVSS)
- [CVE-2014-2151](https://cve.now/CVE-2014-2151.md): The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain… (no CVSS)
- [CVE-2014-2779](https://cve.now/CVE-2014-2779.md): mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang)… (no CVSS)
- [CVE-2014-2949](https://cve.now/CVE-2014-2949.md): SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute… (no CVSS)
- [CVE-2014-3012](https://cve.now/CVE-2014-3012.md): Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to… (no CVSS)
- [CVE-2014-3013](https://cve.now/CVE-2014-3013.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote… (no CVSS)
- [CVE-2014-4020](https://cve.now/CVE-2014-4020.md): The dissect\_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a… (no CVSS)
- [CVE-2014-4174](https://cve.now/CVE-2014-4174.md): wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause… (no CVSS)
- [CVE-2011-2592](https://cve.now/CVE-2011-2592.md): Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition… (no CVSS)
- [CVE-2014-3876](https://cve.now/CVE-2014-3876.md): Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F\*EX, aka fex) before fex-20140530 allow remote… (no CVSS)
- [CVE-2014-3877](https://cve.now/CVE-2014-3877.md): Incomplete blacklist vulnerability in Frams' Fast File EXchange (F\*EX, aka fex) before fex-20140530 allows remote attackers to conduct… (no CVSS)
- [CVE-2014-4301](https://cve.now/CVE-2014-4301.md): Multiple cross-site scripting (XSS) vulnerabilities in the respond\_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7… (no CVSS, ajenti)
- [CVE-2014-4302](https://cve.now/CVE-2014-4302.md): Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2014-4303](https://cve.now/CVE-2014-4303.md): Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users… (no CVSS)
- [CVE-2014-4304](https://cve.now/CVE-2014-4304.md): Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2014-4305](https://cve.now/CVE-2014-4305.md): Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to… (no CVSS)
- [CVE-2014-4306](https://cve.now/CVE-2014-4306.md): Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2014-4307](https://cve.now/CVE-2014-4307.md): SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2014-4308](https://cve.now/CVE-2014-4308.md): Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers… (no CVSS)
- [CVE-2014-4309](https://cve.now/CVE-2014-4309.md): Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.