# CVEs published 2014-05-22

47 CVEs were published on May 22, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0943](https://cve.now/CVE-2012-0943.md): debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows loc (no CVSS)
- [CVE-2012-6648](https://cve.now/CVE-2012-6648.md): gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users (no CVSS)
- [CVE-2014-3788](https://cve.now/CVE-2014-3788.md): Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbi (no CVSS)
- [CVE-2014-3789](https://cve.now/CVE-2014-3789.md): GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspeci (no CVSS)
- [CVE-2014-2349](https://cve.now/CVE-2014-2349.md): Emerson DeltaV Use of Improper Authorization (no CVSS, Emerson DeltaV)
- [CVE-2014-2350](https://cve.now/CVE-2014-2350.md): Emerson DeltaV Use of Hard-coded Credentials (no CVSS, Emerson DeltaV)
- [CVE-2014-2938](https://cve.now/CVE-2014-2938.md): Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracki (no CVSS)
- [CVE-2014-2947](https://cve.now/CVE-2014-2947.md): Cross-site scripting (XSS) vulnerability in Login.aspx in Bizagi BPM Suite before 10.3 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2014-2948](https://cve.now/CVE-2014-2948.md): SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrar (no CVSS)
- [CVE-2014-1323](https://cve.now/CVE-2014-1323.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1324](https://cve.now/CVE-2014-1324.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1326](https://cve.now/CVE-2014-1326.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1327](https://cve.now/CVE-2014-1327.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1329](https://cve.now/CVE-2014-1329.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1330](https://cve.now/CVE-2014-1330.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1331](https://cve.now/CVE-2014-1331.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1333](https://cve.now/CVE-2014-1333.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1334](https://cve.now/CVE-2014-1334.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1335](https://cve.now/CVE-2014-1335.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1336](https://cve.now/CVE-2014-1336.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1337](https://cve.now/CVE-2014-1337.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1338](https://cve.now/CVE-2014-1338.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1339](https://cve.now/CVE-2014-1339.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1341](https://cve.now/CVE-2014-1341.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1342](https://cve.now/CVE-2014-1342.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1343](https://cve.now/CVE-2014-1343.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1344](https://cve.now/CVE-2014-1344.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2014-1346](https://cve.now/CVE-2014-1346.md): WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attacke (no CVSS)
- [CVE-2014-3210](https://cve.now/CVE-2014-3210.md): SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar) plugin before 1.3 for WordPress allows remot (no CVSS)
- [CVE-2014-3783](https://cve.now/CVE-2014-3783.md): SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote authenticated users with the manage categories pe (no CVSS)
- [CVE-2014-3841](https://cve.now/CVE-2014-3841.md): Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2014-3842](https://cve.now/CVE-2014-3842.md): Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to (no CVSS)
- [CVE-2014-3843](https://cve.now/CVE-2014-3843.md): Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack (no CVSS)
- [CVE-2014-3844](https://cve.now/CVE-2014-3844.md): The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin (no CVSS)
- [CVE-2014-3845](https://cve.now/CVE-2014-3845.md): Cross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijac (no CVSS)
- [CVE-2014-3846](https://cve.now/CVE-2014-3846.md): Cross-site scripting (XSS) vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter t (no CVSS)
- [CVE-2014-0949](https://cve.now/CVE-2014-0949.md): IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows re (no CVSS)
- [CVE-2014-0951](https://cve.now/CVE-2014-0951.md): Cross-site scripting (XSS) vulnerability in FilterForm.jsp in IBM WebSphere Portal 7.0 before 7.0.0.2 CF28 and 8.0 before 8.0.0.1 CF12 allow (no CVSS)
- [CVE-2014-0952](https://cve.now/CVE-2014-0952.md): Cross-site scripting (XSS) vulnerability in boot\_config.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF28, (no CVSS)
- [CVE-2014-0954](https://cve.now/CVE-2014-0954.md): IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not (no CVSS)
- [CVE-2014-0955](https://cve.now/CVE-2014-0955.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 before 8.0.0.1 CF12, when Social Rendering in Connections integration i (no CVSS)
- [CVE-2014-0956](https://cve.now/CVE-2014-0956.md): Cross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7. (no CVSS)
- [CVE-2014-0958](https://cve.now/CVE-2014-0958.md): Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8. (no CVSS)
- [CVE-2014-0959](https://cve.now/CVE-2014-0959.md): IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows re (no CVSS)
- [CVE-2014-1770](https://cve.now/CVE-2014-1770.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaS (no CVSS)
- [CVE-2014-2604](https://cve.now/CVE-2014-2604.md): Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via u (no CVSS)
- [CVE-2014-3775](https://cve.now/CVE-2014-3775.md): libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to caus (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-05-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.