# CVEs published 2014-04-24 9 CVEs were published on April 24, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2014-2601](https://cve.now/CVE-2014-2601.md): The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS (no CVSS) - [CVE-2014-2734](https://cve.now/CVE-2014-2734.md): The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attac (no CVSS) - [CVE-2014-0188](https://cve.now/CVE-2014-0188.md): The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from (no CVSS) - [CVE-2014-2736](https://cve.now/CVE-2014-2736.md): Multiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS) - [CVE-2014-2915](https://cve.now/CVE-2014-2915.md): Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a de (no CVSS) - [CVE-2012-3946](https://cve.now/CVE-2012-3946.md): Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packet (no CVSS) - [CVE-2012-5723](https://cve.now/CVE-2012-5723.md): Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device r (no CVSS) - [CVE-2013-6738](https://cve.now/CVE-2013-6738.md): Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote (no CVSS) - [CVE-2014-2907](https://cve.now/CVE-2014-2907.md): The srtp\_add\_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly updat (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-04-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.