# CVEs published 2014-06-13

23 CVEs were published on June 13, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2010-5301](https://cve.now/CVE-2010-5301.md): Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request. (no CVSS)
- [CVE-2012-3521](https://cve.now/CVE-2012-3521.md): Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary (no CVSS, geshi/geshi)
- [CVE-2012-3522](https://cve.now/CVE-2012-3522.md): Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web scr (no CVSS, geshi/geshi)
- [CVE-2013-1841](https://cve.now/CVE-2013-1841.md): Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow (no CVSS)
- [CVE-2013-2163](https://cve.now/CVE-2013-2163.md): Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the fi (no CVSS)
- [CVE-2013-2182](https://cve.now/CVE-2013-2182.md): The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted (no CVSS)
- [CVE-2013-3663](https://cve.now/CVE-2013-3663.md): Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attacke (no CVSS)
- [CVE-2013-3843](https://cve.now/CVE-2013-3843.md): Stack-based buffer overflow in the mk\_request\_header\_process function in mk\_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows re (no CVSS)
- [CVE-2013-4099](https://cve.now/CVE-2013-4099.md): Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attackers to execute arbit (no CVSS)
- [CVE-2013-5352](https://cve.now/CVE-2013-5352.md): Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities\_text parameter to servi (no CVSS)
- [CVE-2013-5353](https://cve.now/CVE-2013-5353.md): Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote a (no CVSS)
- [CVE-2013-5356](https://cve.now/CVE-2013-5356.md): Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers t (no CVSS)
- [CVE-2014-2303](https://cve.now/CVE-2014-2303.md): Multiple SQL injection vulnerabilities in the file browser component (we\_fs.php) in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 (no CVSS)
- [CVE-2014-3804](https://cve.now/CVE-2014-3804.md): The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update\_ (no CVSS)
- [CVE-2014-3805](https://cve.now/CVE-2014-3805.md): The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get\_lic (no CVSS)
- [CVE-2014-3812](https://cve.now/CVE-2014-3812.md): The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control (no CVSS)
- [CVE-2014-3813](https://cve.now/CVE-2014-3813.md): Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configured to use the intern (no CVSS)
- [CVE-2014-3814](https://cve.now/CVE-2014-3814.md): The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows r (no CVSS)
- [CVE-2014-4158](https://cve.now/CVE-2014-4158.md): Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request. (no CVSS)
- [CVE-2014-4159](https://cve.now/CVE-2014-4159.md): Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users (no CVSS)
- [CVE-2014-4160](https://cve.now/CVE-2014-4160.md): Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to (no CVSS)
- [CVE-2014-4161](https://cve.now/CVE-2014-4161.md): Cross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to inject (no CVSS)
- [CVE-2014-3859](https://cve.now/CVE-2014-3859.md): libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUI (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.