# CVEs published 2014-06-06

12 CVEs were published on June 6, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5390](https://cve.now/CVE-2012-5390.md): The standard universe shadow (condor\_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly che (no CVSS)
- [CVE-2012-5583](https://cve.now/CVE-2012-5583.md): phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field (no CVSS)
- [CVE-2013-0250](https://cve.now/CVE-2013-0250.md): The init\_nss\_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote a (no CVSS)
- [CVE-2013-2602](https://cve.now/CVE-2013-2602.md): Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to execut (no CVSS)
- [CVE-2013-4724](https://cve.now/CVE-2013-4724.md): DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag i (no CVSS)
- [CVE-2013-4725](https://cve.now/CVE-2013-4725.md): DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an (no CVSS)
- [CVE-2013-4727](https://cve.now/CVE-2013-4727.md): DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain se (no CVSS)
- [CVE-2013-4728](https://cve.now/CVE-2013-4728.md): DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain se (no CVSS)
- [CVE-2014-2575](https://cve.now/CVE-2014-2575.md): Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13 (no CVSS)
- [CVE-2014-3966](https://cve.now/CVE-2014-3966.md): Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22 (no CVSS)
- [CVE-2014-3984](https://cve.now/CVE-2014-3984.md): Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors. (no CVSS)
- [CVE-2014-2503](https://cve.now/CVE-2014-2503.md): The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.