# CVEs published 2014-06-28

12 CVEs were published on June 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2612](https://cve.now/CVE-2014-2612.md): Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002… (no CVSS)
- [CVE-2014-2613](https://cve.now/CVE-2014-2613.md): Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002… (no CVSS)
- [CVE-2014-4648](https://cve.now/CVE-2014-4648.md): Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure." (no CVSS)
- [CVE-2014-4649](https://cve.now/CVE-2014-4649.md): SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated… (no CVSS)
- [CVE-2014-4669](https://cve.now/CVE-2014-4669.md): HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity… (no CVSS)
- [CVE-2013-6308](https://cve.now/CVE-2013-6308.md): IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an… (no CVSS)
- [CVE-2013-6309](https://cve.now/CVE-2013-6309.md): IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records… (no CVSS)
- [CVE-2013-6310](https://cve.now/CVE-2013-6310.md): Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary… (no CVSS)
- [CVE-2013-6311](https://cve.now/CVE-2013-6311.md): SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands… (no CVSS)
- [CVE-2014-0891](https://cve.now/CVE-2014-0891.md): IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to… (no CVSS)
- [CVE-2014-2006](https://cve.now/CVE-2014-2006.md): Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2014-3881](https://cve.now/CVE-2014-3881.md): Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.