# CVEs published 2014-02-04

24 CVEs were published on February 4, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2725](https://cve.now/CVE-2011-2725.md): Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (no CVSS)
- [CVE-2012-0875](https://cve.now/CVE-2012-0875.md): SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information fro (no CVSS)
- [CVE-2012-2106](https://cve.now/CVE-2012-2106.md): Integer overflow in the pv\_import function in util/pv\_import.c in Csound 5.16.6, when converting a file, allows remote attackers to execute (no CVSS)
- [CVE-2012-2107](https://cve.now/CVE-2012-2107.md): Integer overflow in the main function in util/lpci\_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attac (no CVSS)
- [CVE-2012-2108](https://cve.now/CVE-2012-2108.md): Stack-based buffer overflow in the main function in util/lpci\_main.c in Csound before 5.17.2, when converting a file, allows user-assisted r (no CVSS)
- [CVE-2014-1458](https://cve.now/CVE-2014-1458.md): Cross-site scripting (XSS) vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenti (no CVSS)
- [CVE-2012-6493](https://cve.now/CVE-2012-6493.md): Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authen (no CVSS)
- [CVE-2013-3098](https://cve.now/CVE-2013-3098.md): Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers (no CVSS)
- [CVE-2013-3365](https://cve.now/CVE-2013-3365.md): TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network p (no CVSS)
- [CVE-2014-0019](https://cve.now/CVE-2014-0019.md): Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service ( (no CVSS)
- [CVE-2014-1471](https://cve.now/CVE-2014-1471.md): SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before (no CVSS)
- [CVE-2014-1694](https://cve.now/CVE-2014-1694.md): Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketPr (no CVSS)
- [CVE-2013-5427](https://cve.now/CVE-2013-5427.md): Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 throug (no CVSS)
- [CVE-2013-6032](https://cve.now/CVE-2013-6032.md): cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P (no CVSS)
- [CVE-2013-6033](https://cve.now/CVE-2013-6033.md): Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C (no CVSS)
- [CVE-2013-6034](https://cve.now/CVE-2013-6034.md): The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan (no CVSS)
- [CVE-2013-6035](https://cve.now/CVE-2013-6035.md): The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan (no CVSS)
- [CVE-2013-7179](https://cve.now/CVE-2013-7179.md): The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2013-7181](https://cve.now/CVE-2013-7181.md): Cross-site scripting (XSS) vulnerability in user/ldap\_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2013-7182](https://cve.now/CVE-2013-7182.md): Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2013-7183](https://cve.now/CVE-2013-7183.md): cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default\_reboot (no CVSS)
- [CVE-2014-0329](https://cve.now/CVE-2014-0329.md): The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remot (no CVSS)
- [CVE-2014-0686](https://cve.now/CVE-2014-0686.md): Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incor (no CVSS)
- [CVE-2014-0834](https://cve.now/CVE-2014-0834.md): IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service (daemon (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.