# CVEs published 2014-08-17

17 CVEs were published on August 17, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0326](https://cve.now/CVE-2014-0326.md): The Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded… (no CVSS)
- [CVE-2014-0327](https://cve.now/CVE-2014-0327.md): The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows… (no CVSS)
- [CVE-2014-0876](https://cve.now/CVE-2014-0876.md): Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager… (no CVSS)
- [CVE-2014-0905](https://cve.now/CVE-2014-0905.md): IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier… (no CVSS)
- [CVE-2014-0966](https://cve.now/CVE-2014-0966.md): SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before… (no CVSS)
- [CVE-2014-0969](https://cve.now/CVE-2014-0969.md): Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x… (no CVSS)
- [CVE-2014-3063](https://cve.now/CVE-2014-3063.md): IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data… (no CVSS)
- [CVE-2014-3080](https://cve.now/CVE-2014-3080.md): Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before… (no CVSS)
- [CVE-2014-3081](https://cve.now/CVE-2014-3081.md): prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users… (no CVSS)
- [CVE-2014-3085](https://cve.now/CVE-2014-3085.md): systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to… (no CVSS)
- [CVE-2014-3087](https://cve.now/CVE-2014-3087.md): callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote… (no CVSS)
- [CVE-2014-4775](https://cve.now/CVE-2014-4775.md): IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data… (no CVSS)
- [CVE-2014-5074](https://cve.now/CVE-2014-5074.md): Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP… (no CVSS)
- [CVE-2014-0609](https://cve.now/CVE-2014-0609.md): Unspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled Maintenance Update 9415 and 11 SP2 before… (no CVSS)
- [CVE-2014-3900](https://cve.now/CVE-2014-3900.md): Cross-site scripting (XSS) vulnerability in admin/picture\_modify.php in the photo-edit subsystem in Piwigo 2.6.3 and earlier allows remote… (no CVSS)
- [CVE-2014-3904](https://cve.now/CVE-2014-3904.md): SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2014-3905](https://cve.now/CVE-2014-3905.md): Cross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.