# CVEs published 2014-05-26 26 CVEs were published on May 26, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-6647](https://cve.now/CVE-2012-6647.md): The futex\_wait\_requeue\_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex ad (no CVSS) - [CVE-2013-6713](https://cve.now/CVE-2013-6713.md): The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.0.2 does not properl (no CVSS) - [CVE-2013-6714](https://cve.now/CVE-2013-6714.md): The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properly check authorization (no CVSS) - [CVE-2014-0878](https://cve.now/CVE-2014-0878.md): The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Servic (no CVSS) - [CVE-2014-3866](https://cve.now/CVE-2014-3866.md): Multiple cross-site request forgery (CSRF) vulnerabilities in user\_settings.php in Usercake 2.0.2 and earlier allow remote attackers to hija (no CVSS) - [CVE-2013-4016](https://cve.now/CVE-2013-4016.md): SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1 (no CVSS) - [CVE-2013-5460](https://cve.now/CVE-2013-5460.md): IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authen (no CVSS) - [CVE-2013-5464](https://cve.now/CVE-2013-5464.md): IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x (no CVSS) - [CVE-2013-5465](https://cve.now/CVE-2013-5465.md): IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, (no CVSS) - [CVE-2013-6741](https://cve.now/CVE-2013-6741.md): IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5. (no CVSS) - [CVE-2014-0824](https://cve.now/CVE-2014-0824.md): Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.2014 (no CVSS) - [CVE-2014-0825](https://cve.now/CVE-2014-0825.md): Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x b (no CVSS) - [CVE-2014-0849](https://cve.now/CVE-2014-0849.md): IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remot (no CVSS) - [CVE-2014-0893](https://cve.now/CVE-2014-0893.md): Cross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX006 and SmartCloud Cont (no CVSS) - [CVE-2012-3333](https://cve.now/CVE-2012-3333.md): CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x be (no CVSS) - [CVE-2013-2998](https://cve.now/CVE-2013-2998.md): frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5. (no CVSS) - [CVE-2014-3867](https://cve.now/CVE-2014-3867.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not include the HTTPOnly flag in a Set-Cookie header for (no CVSS) - [CVE-2013-3046](https://cve.now/CVE-2013-3046.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, whic (no CVSS) - [CVE-2013-3975](https://cve.now/CVE-2013-3975.md): Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to disco (no CVSS) - [CVE-2013-3977](https://cve.now/CVE-2013-3977.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are (no CVSS) - [CVE-2013-3980](https://cve.now/CVE-2013-3980.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denial of service (room un (no CVSS) - [CVE-2013-3981](https://cve.now/CVE-2013-3981.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avatar photos of arbitrar (no CVSS) - [CVE-2013-3982](https://cve.now/CVE-2013-3982.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspecified installation in (no CVSS) - [CVE-2013-3984](https://cve.now/CVE-2013-3984.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspecified cookie in an (no CVSS) - [CVE-2014-0906](https://cve.now/CVE-2014-0906.md): The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which all (no CVSS) - [CVE-2014-3014](https://cve.now/CVE-2014-3014.md): Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote aut (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-05-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.