# CVEs published 2014-06-18

34 CVEs were published on June 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2592](https://cve.now/CVE-2012-2592.md): Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2013-5017](https://cve.now/CVE-2013-5017.md): SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands vi (no CVSS)
- [CVE-2014-1650](https://cve.now/CVE-2014-1650.md): SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated use (no CVSS)
- [CVE-2014-1651](https://cve.now/CVE-2014-1651.md): SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers t (no CVSS)
- [CVE-2014-1652](https://cve.now/CVE-2014-1652.md): Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenti (no CVSS)
- [CVE-2014-4021](https://cve.now/CVE-2014-4021.md): Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive in (no CVSS)
- [CVE-2014-4049](https://cve.now/CVE-2014-4049.md): Heap-based buffer overflow in the php\_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a (no CVSS)
- [CVE-2014-4151](https://cve.now/CVE-2014-4151.md): The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code vi (no CVSS)
- [CVE-2014-4152](https://cve.now/CVE-2014-4152.md): The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote\_task req (no CVSS)
- [CVE-2014-4153](https://cve.now/CVE-2014-4153.md): The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get\_file request. (no CVSS)
- [CVE-2014-0598](https://cve.now/CVE-2014-0598.md): Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux has unspec (no CVSS)
- [CVE-2014-0599](https://cve.now/CVE-2014-0599.md): Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux all (no CVSS)
- [CVE-2013-6221](https://cve.now/CVE-2013-6221.md): Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server i (no CVSS)
- [CVE-2014-0910](https://cve.now/CVE-2014-0910.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 CF27, and 7.0.0 throu (no CVSS)
- [CVE-2014-2000](https://cve.now/CVE-2014-2000.md): The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read sys (no CVSS)
- [CVE-2014-2151](https://cve.now/CVE-2014-2151.md): The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sen (no CVSS)
- [CVE-2014-2779](https://cve.now/CVE-2014-2779.md): mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) vi (no CVSS)
- [CVE-2014-2949](https://cve.now/CVE-2014-2949.md): SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbit (no CVSS)
- [CVE-2014-3012](https://cve.now/CVE-2014-3012.md): Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to i (no CVSS)
- [CVE-2014-3013](https://cve.now/CVE-2014-3013.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticat (no CVSS)
- [CVE-2014-4020](https://cve.now/CVE-2014-4020.md): The dissect\_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negat (no CVSS)
- [CVE-2014-4174](https://cve.now/CVE-2014-4174.md): wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2011-2592](https://cve.now/CVE-2011-2592.md): Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Pl (no CVSS)
- [CVE-2014-3876](https://cve.now/CVE-2014-3876.md): Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F\*EX, aka fex) before fex-20140530 allow remote attackers (no CVSS)
- [CVE-2014-3877](https://cve.now/CVE-2014-3877.md): Incomplete blacklist vulnerability in Frams' Fast File EXchange (F\*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross (no CVSS)
- [CVE-2014-4301](https://cve.now/CVE-2014-4301.md): Multiple cross-site scripting (XSS) vulnerabilities in the respond\_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allo (no CVSS, ajenti)
- [CVE-2014-4302](https://cve.now/CVE-2014-4302.md): Cross-site scripting (XSS) vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2014-4303](https://cve.now/CVE-2014-4303.md): Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users wi (no CVSS)
- [CVE-2014-4304](https://cve.now/CVE-2014-4304.md): Cross-site scripting (XSS) vulnerability in browse.php in SQL Buddy 1.3.3 and earlier allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-4305](https://cve.now/CVE-2014-4305.md): Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute (no CVSS)
- [CVE-2014-4306](https://cve.now/CVE-2014-4306.md): Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2014-4307](https://cve.now/CVE-2014-4307.md): SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the so (no CVSS)
- [CVE-2014-4308](https://cve.now/CVE-2014-4308.md): Multiple cross-site scripting (XSS) vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) before 6.5.5 allow remote attackers to (no CVSS)
- [CVE-2014-4309](https://cve.now/CVE-2014-4309.md): Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.