# CVEs published 2014-06-08

17 CVEs were published on June 8, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0929](https://cve.now/CVE-2014-0929.md): Cross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated (no CVSS)
- [CVE-2014-0936](https://cve.now/CVE-2014-0936.md): IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database s (no CVSS)
- [CVE-2014-3036](https://cve.now/CVE-2014-3036.md): Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass inten (no CVSS)
- [CVE-2014-3038](https://cve.now/CVE-2014-3038.md): IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-acce (no CVSS)
- [CVE-2014-3048](https://cve.now/CVE-2014-3048.md): Unspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local users to gain privileges by leveraging the TSS (no CVSS)
- [CVE-2014-3977](https://cve.now/CVE-2014-3977.md): libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. (no CVSS)
- [CVE-2014-0961](https://cve.now/CVE-2014-0961.md): Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Se (no CVSS)
- [CVE-2014-3981](https://cve.now/CVE-2014-3981.md): acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attac (no CVSS)
- [CVE-2014-3982](https://cve.now/CVE-2014-3982.md): include/tests\_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.# (no CVSS)
- [CVE-2014-3986](https://cve.now/CVE-2014-3986.md): include/tests\_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.\*.unsort (no CVSS)
- [CVE-2014-3278](https://cve.now/CVE-2014-3278.md): The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remo (no CVSS)
- [CVE-2014-3281](https://cve.now/CVE-2014-3281.md): The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remo (no CVSS)
- [CVE-2014-3286](https://cve.now/CVE-2014-3286.md): The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to o (no CVSS)
- [CVE-2014-3291](https://cve.now/CVE-2014-3291.md): Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart (no CVSS)
- [CVE-2014-2506](https://cve.now/CVE-2014-2506.md): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users t (no CVSS)
- [CVE-2014-2507](https://cve.now/CVE-2014-2507.md): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users t (no CVSS)
- [CVE-2014-2508](https://cve.now/CVE-2014-2508.md): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.