# CVEs published 2014-02-28

20 CVEs were published on February 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3634](https://cve.now/CVE-2011-3634.md): methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which (no CVSS)
- [CVE-2014-1912](https://cve.now/CVE-2014-1912.md): Buffer overflow in the socket.recvfrom\_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x befor (no CVSS)
- [CVE-2014-2262](https://cve.now/CVE-2014-2262.md): Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote atta (no CVSS)
- [CVE-2014-2263](https://cve.now/CVE-2014-2263.md): The mpegts\_write\_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, a (no CVSS)
- [CVE-2013-2498](https://cve.now/CVE-2013-2498.md): SQL injection vulnerability in the login page in flexycms/modules/user/user\_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote att (no CVSS)
- [CVE-2014-1456](https://cve.now/CVE-2014-1456.md): Cross-site scripting (XSS) vulnerability in the login page in Open Web Analytics (OWA) before 1.5.6 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2014-1695](https://cve.now/CVE-2014-1695.md): Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3 (no CVSS)
- [CVE-2014-1888](https://cve.now/CVE-2014-1888.md): Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject arb (no CVSS)
- [CVE-2014-2059](https://cve.now/CVE-2014-2059.md): Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-2067](https://cve.now/CVE-2014-2067.md): Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authen (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2014-2080](https://cve.now/CVE-2014-2080.md): Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to (no CVSS)
- [CVE-2014-1878](https://cve.now/CVE-2014-1878.md): Stack-based buffer overflow in the cmd\_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, (no CVSS)
- [CVE-2014-0069](https://cve.now/CVE-2014-0069.md): The cifs\_iovec\_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that c (no CVSS)
- [CVE-2014-0759](https://cve.now/CVE-2014-0759.md): Schneider Electric Floating License Manager Unquoted Search Path or Element (CVSS 5.9, Schneider Electric Floating License Manager)
- [CVE-2014-0774](https://cve.now/CVE-2014-0774.md): Schneider Electric OFS Stack Buffer Overflow (no CVSS, Schneider Electric TLXCDSUOFS33 · Schneider Electric TLX… +3)
- [CVE-2014-0874](https://cve.now/CVE-2014-0874.md): Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to inject a (no CVSS)
- [CVE-2014-1690](https://cve.now/CVE-2014-1690.md): The help function in net/netfilter/nf\_nat\_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information fr (no CVSS)
- [CVE-2014-1874](https://cve.now/CVE-2014-1874.md): The security\_context\_to\_sid\_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a (no CVSS)
- [CVE-2014-2038](https://cve.now/CVE-2014-2038.md): The nfs\_can\_extend\_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operati (no CVSS)
- [CVE-2014-2039](https://cve.now/CVE-2014-2039.md): arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.