# CVEs published 2014-11-13

9 CVEs were published on November 13, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3602](https://cve.now/CVE-2014-3602.md): Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading… (no CVSS)
- [CVE-2014-3674](https://cve.now/CVE-2014-3674.md): Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network… (no CVSS)
- [CVE-2014-7823](https://cve.now/CVE-2014-7823.md): The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the… (no CVSS)
- [CVE-2014-8359](https://cve.now/CVE-2014-8359.md): Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code… (no CVSS)
- [CVE-2014-8476](https://cve.now/CVE-2014-8476.md): The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local… (no CVSS)
- [CVE-2014-8554](https://cve.now/CVE-2014-8554.md): SQL injection vulnerability in the mc\_project\_get\_attachments function in api/soap/mc\_project\_api.php in MantisBT before 1.2.18 allows… (no CVSS)
- [CVE-2014-8557](https://cve.now/CVE-2014-8557.md): Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33\_CCB allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2014-8564](https://cve.now/CVE-2014-8564.md): The \_gnutls\_ecc\_ansi\_x963\_export function in gnutls\_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows… (no CVSS)
- [CVE-2014-8770](https://cve.now/CVE-2014-8770.md): Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for… (no CVSS, dweeves/magmi)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-11-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.