# CVEs published 2014-08-18

10 CVEs were published on August 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1469](https://cve.now/CVE-2014-1469.md): BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception… (no CVSS)
- [CVE-2014-2388](https://cve.now/CVE-2014-2388.md): The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password… (no CVSS)
- [CVE-2014-5203](https://cve.now/CVE-2014-5203.md): wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to… (no CVSS)
- [CVE-2014-5204](https://cve.now/CVE-2014-5204.md): wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in… (no CVSS)
- [CVE-2014-5205](https://cve.now/CVE-2014-5205.md): wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF… (no CVSS)
- [CVE-2014-5206](https://cve.now/CVE-2014-5206.md): The do\_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT\_LOCK\_READONLY bit across a remount… (no CVSS)
- [CVE-2014-5207](https://cve.now/CVE-2014-5207.md): fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT\_NODEV, MNT\_NOSUID, and MNT\_NOEXEC and changing… (no CVSS)
- [CVE-2014-5240](https://cve.now/CVE-2014-5240.md): Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote… (no CVSS)
- [CVE-2014-5265](https://cve.now/CVE-2014-5265.md): The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity… (no CVSS)
- [CVE-2014-5266](https://cve.now/CVE-2014-5266.md): The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.