# CVEs published 2014-02-20 10 CVEs were published on February 20, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2013-4420](https://cve.now/CVE-2013-4420.md): Multiple directory traversal vulnerabilities in the (1) tar\_extract\_glob and (2) tar\_extract\_all functions in libtar 1.2.20 and earlier allo (no CVSS) - [CVE-2014-0080](https://cve.now/CVE-2014-0080.md): SQL injection vulnerability in activerecord/lib/active\_record/connection\_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x (no CVSS, activerecord) - [CVE-2014-0081](https://cve.now/CVE-2014-0081.md): Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action\_view/helpers/number\_helper.rb in Ruby on Rails before 3.2.17, 4 (no CVSS, rails ยท actionpack) - [CVE-2014-0082](https://cve.now/CVE-2014-0082.md): actionpack/lib/action\_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during u (no CVSS, actionpack) - [CVE-2014-0733](https://cve.now/CVE-2014-0733.md): The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly en (no CVSS) - [CVE-2014-1879](https://cve.now/CVE-2014-1879.md): Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web (no CVSS) - [CVE-2014-0732](https://cve.now/CVE-2014-0732.md): The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not prope (no CVSS) - [CVE-2014-0734](https://cve.now/CVE-2014-0734.md): SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unifi (no CVSS) - [CVE-2014-0735](https://cve.now/CVE-2014-0735.md): Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 1 (no CVSS) - [CVE-2014-0736](https://cve.now/CVE-2014-0736.md): Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-02-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.