# CVEs published 2014-02-22

24 CVEs were published on February 22, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6732](https://cve.now/CVE-2013-6732.md): Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 1 (no CVSS)
- [CVE-2013-6734](https://cve.now/CVE-2013-6734.md): IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote aut (no CVSS)
- [CVE-2013-6948](https://cve.now/CVE-2013-6948.md): The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML doc (no CVSS)
- [CVE-2013-6949](https://cve.now/CVE-2013-6949.md): The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hij (no CVSS)
- [CVE-2013-6950](https://cve.now/CVE-2013-6950.md): The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to (no CVSS)
- [CVE-2013-6951](https://cve.now/CVE-2013-6951.md): The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the (no CVSS)
- [CVE-2013-6952](https://cve.now/CVE-2013-6952.md): The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware u (no CVSS)
- [CVE-2014-0709](https://cve.now/CVE-2014-0709.md): Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attacke (no CVSS)
- [CVE-2014-0710](https://cve.now/CVE-2014-0710.md): Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) (no CVSS)
- [CVE-2014-0718](https://cve.now/CVE-2014-0718.md): The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denia (no CVSS)
- [CVE-2014-0719](https://cve.now/CVE-2014-0719.md): The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to caus (no CVSS)
- [CVE-2014-0720](https://cve.now/CVE-2014-0720.md): Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process (no CVSS)
- [CVE-2014-0721](https://cve.now/CVE-2014-0721.md): The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain root access via a session on the test interfa (no CVSS)
- [CVE-2014-0730](https://cve.now/CVE-2014-0730.md): Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a loca (no CVSS)
- [CVE-2014-0731](https://cve.now/CVE-2014-0731.md): The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass auth (no CVSS)
- [CVE-2014-0737](https://cve.now/CVE-2014-0737.md): The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injec (no CVSS)
- [CVE-2014-0738](https://cve.now/CVE-2014-0738.md): The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authenti (no CVSS)
- [CVE-2014-0739](https://cve.now/CVE-2014-0739.md): Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers (no CVSS)
- [CVE-2014-0811](https://cve.now/CVE-2014-0811.md): Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2014-0818](https://cve.now/CVE-2014-0818.md): Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript cod (no CVSS)
- [CVE-2014-0819](https://cve.now/CVE-2014-0819.md): Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the curr (no CVSS)
- [CVE-2014-0854](https://cve.now/CVE-2014-0854.md): The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2. (no CVSS)
- [CVE-2014-0861](https://cve.now/CVE-2014-0861.md): Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 1 (no CVSS)
- [CVE-2014-1266](https://cve.now/CVE-2014-1266.md): The SSLVerifySignedServerKeyExchange function in libsecurity\_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.