# CVEs published 2014-06-10

13 CVEs were published on June 10, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5023](https://cve.now/CVE-2009-5023.md): The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8 (no CVSS)
- [CVE-2013-6825](https://cve.now/CVE-2013-6825.md): (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrc (no CVSS)
- [CVE-2014-0220](https://cve.now/CVE-2014-0220.md): Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the A (no CVSS)
- [CVE-2014-3216](https://cve.now/CVE-2014-3216.md): GOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. (no CVSS)
- [CVE-2014-3465](https://cve.now/CVE-2014-3465.md): The gnutls\_x509\_dn\_oid\_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cau (no CVSS)
- [CVE-2014-3873](https://cve.now/CVE-2014-3873.md): The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault (no CVSS)
- [CVE-2014-3880](https://cve.now/CVE-2014-3880.md): The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys (no CVSS)
- [CVE-2014-4017](https://cve.now/CVE-2014-4017.md): Cross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-3042](https://cve.now/CVE-2014-3042.md): IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authentic (no CVSS)
- [CVE-2014-3287](https://cve.now/CVE-2014-3287.md): SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) al (no CVSS)
- [CVE-2014-3289](https://cve.now/CVE-2014-3289.md): Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Sec (no CVSS)
- [CVE-2014-3292](https://cve.now/CVE-2014-3292.md): The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users t (no CVSS)
- [CVE-2014-3294](https://cve.now/CVE-2014-3294.md): Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive infor (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.