# CVEs published 2014-04-04

15 CVEs were published on April 4, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0637](https://cve.now/CVE-2014-0637.md): Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and (no CVSS)
- [CVE-2014-0638](https://cve.now/CVE-2014-0638.md): Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers t (no CVSS)
- [CVE-2014-0789](https://cve.now/CVE-2014-0789.md): Schneider Electric OPC Factory Server Buffer Overflow (no CVSS, Schneider Electric OPC Factory Server)
- [CVE-2014-2114](https://cve.now/CVE-2014-2114.md): Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject (no CVSS)
- [CVE-2014-2115](https://cve.now/CVE-2014-2115.md): Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow r (no CVSS)
- [CVE-2014-2116](https://cve.now/CVE-2014-2116.md): Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parame (no CVSS)
- [CVE-2014-2117](https://cve.now/CVE-2014-2117.md): Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitra (no CVSS)
- [CVE-2014-2143](https://cve.now/CVE-2014-2143.md): The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-associati (no CVSS)
- [CVE-2014-2210](https://cve.now/CVE-2014-2210.md): Multiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to obtain sensitive information, bypass inten (no CVSS)
- [CVE-2012-4920](https://cve.now/CVE-2012-4920.md): Directory traversal vulnerability in the zing\_forum\_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for W (no CVSS)
- [CVE-2012-5648](https://cve.now/CVE-2012-5648.md): Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified para (no CVSS)
- [CVE-2012-6429](https://cve.now/CVE-2012-6429.md): Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123\_2\_7 allows remote attack (no CVSS)
- [CVE-2013-2287](https://cve.now/CVE-2013-2287.md): Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to (no CVSS)
- [CVE-2013-3930](https://cve.now/CVE-2013-3930.md): Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory na (no CVSS)
- [CVE-2014-0592](https://cve.now/CVE-2014-0592.md): Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating n (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.