# CVEs published 2014-05-17

5 CVEs were published on May 17, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4489](https://cve.now/CVE-2013-4489.md): The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary comma (no CVSS, gitlab-grit)
- [CVE-2013-4498](https://cve.now/CVE-2013-4498.md): The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content w (no CVSS)
- [CVE-2013-7382](https://cve.now/CVE-2013-7382.md): VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) (no CVSS)
- [CVE-2014-2084](https://cve.now/CVE-2014-2084.md): Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the (no CVSS)
- [CVE-2014-3453](https://cve.now/CVE-2014-3453.md): Eval injection vulnerability in the flag\_import\_form\_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-05-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.