# CVEs published 2014-07-31 9 CVEs were published on July 31, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-6651](https://cve.now/CVE-2012-6651.md): Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary… (no CVSS) - [CVE-2014-3488](https://cve.now/CVE-2014-3488.md): The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a… (no CVSS, io.netty:netty-handler) - [CVE-2014-3554](https://cve.now/CVE-2014-3554.md): Buffer overflow in the ndp\_msg\_opt\_dnssl\_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly… (no CVSS) - [CVE-2014-5171](https://cve.now/CVE-2014-5171.md): SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL… (no CVSS) - [CVE-2014-5172](https://cve.now/CVE-2014-5172.md): Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary… (no CVSS) - [CVE-2014-5173](https://cve.now/CVE-2014-5173.md): SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK… (no CVSS) - [CVE-2014-5174](https://cve.now/CVE-2014-5174.md): The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group… (no CVSS) - [CVE-2014-5175](https://cve.now/CVE-2014-5175.md): The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass authentication via unspecified vectors… (no CVSS) - [CVE-2014-5176](https://cve.now/CVE-2014-5176.md): SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors. (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2014-07-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.