# CVEs published 2014-02-13

16 CVEs were published on February 13, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2829](https://cve.now/CVE-2013-2829.md): MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed D (no CVSS)
- [CVE-2013-3978](https://cve.now/CVE-2013-3978.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to prev (no CVSS)
- [CVE-2013-3983](https://cve.now/CVE-2013-3983.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them (no CVSS)
- [CVE-2013-3988](https://cve.now/CVE-2013-3988.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via (no CVSS)
- [CVE-2013-6742](https://cve.now/CVE-2013-6742.md): The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password fi (no CVSS)
- [CVE-2013-6743](https://cve.now/CVE-2013-6743.md): Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote a (no CVSS)
- [CVE-2014-1219](https://cve.now/CVE-2014-1219.md): CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E\_SSNID session token in place of the entire token, which allows remote attac (no CVSS)
- [CVE-2014-1253](https://cve.now/CVE-2014-1253.md): AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have uns (no CVSS)
- [CVE-2014-0722](https://cve.now/CVE-2014-0722.md): The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote a (no CVSS)
- [CVE-2014-0723](https://cve.now/CVE-2014-0723.md): Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows r (no CVSS)
- [CVE-2014-0724](https://cve.now/CVE-2014-0724.md): The bulk administration interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote attackers to bypass authen (no CVSS)
- [CVE-2014-0725](https://cve.now/CVE-2014-0725.md): Cisco Unified Communications Manager (UCM) does not require authentication for reading WAR files, which allows remote attackers to obtain se (no CVSS)
- [CVE-2014-0726](https://cve.now/CVE-2014-0726.md): SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier a (no CVSS)
- [CVE-2014-0727](https://cve.now/CVE-2014-0727.md): SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) al (no CVSS)
- [CVE-2014-0728](https://cve.now/CVE-2014-0728.md): SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows remote a (no CVSS)
- [CVE-2014-0729](https://cve.now/CVE-2014-0729.md): SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows re (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.