# CVEs published 2014-07-19

20 CVEs were published on July 19, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4331](https://cve.now/CVE-2014-4331.md): Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2012-2682](https://cve.now/CVE-2012-2682.md): Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a… (no CVSS)
- [CVE-2014-2519](https://cve.now/CVE-2014-2519.md): The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers… (no CVSS)
- [CVE-2014-3325](https://cve.now/CVE-2014-3325.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject… (no CVSS)
- [CVE-2014-3532](https://cve.now/CVE-2014-3532.md): dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of… (no CVSS)
- [CVE-2014-3533](https://cve.now/CVE-2014-3533.md): dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of… (no CVSS)
- [CVE-2014-4943](https://cve.now/CVE-2014-4943.md): The PPPoL2TP feature in net/l2tp/l2tp\_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging… (no CVSS)
- [CVE-2013-4273](https://cve.now/CVE-2013-4273.md): The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote… (no CVSS)
- [CVE-2013-7391](https://cve.now/CVE-2013-7391.md): The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remote attackers to… (no CVSS)
- [CVE-2014-0967](https://cve.now/CVE-2014-0967.md): Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and… (no CVSS)
- [CVE-2014-0968](https://cve.now/CVE-2014-0968.md): Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and… (no CVSS)
- [CVE-2014-0970](https://cve.now/CVE-2014-0970.md): The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master… (no CVSS)
- [CVE-2014-2364](https://cve.now/CVE-2014-2364.md): Advantech WebAccess Stack-Based Buffer Overflow (no CVSS, Advantech WebAccess)
- [CVE-2014-2365](https://cve.now/CVE-2014-2365.md): Advantech WebAccess Improper Access Control (no CVSS, Advantech WebAccess)
- [CVE-2014-2366](https://cve.now/CVE-2014-2366.md): Advantech WebAccess Cleartext Storage of Sensitive Information in Memory (no CVSS, Advantech WebAccess)
- [CVE-2014-2367](https://cve.now/CVE-2014-2367.md): Advantech WebAccess Authentication Bypass Issues (no CVSS, Advantech WebAccess)
- [CVE-2014-2368](https://cve.now/CVE-2014-2368.md): Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting (no CVSS, Advantech WebAccess)
- [CVE-2014-3043](https://cve.now/CVE-2014-3043.md): IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the… (no CVSS)
- [CVE-2014-3045](https://cve.now/CVE-2014-3045.md): IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon… (no CVSS)
- [CVE-2014-3064](https://cve.now/CVE-2014-3064.md): The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-07-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.