# CVEs published 2014-06-20

11 CVEs were published on June 20, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5106](https://cve.now/CVE-2012-5106.md): Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a P (no CVSS)
- [CVE-2011-4821](https://cve.now/CVE-2011-4821.md): Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA allows remote attacker (no CVSS)
- [CVE-2012-0273](https://cve.now/CVE-2012-0273.md): Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session\_id cookie in a req (no CVSS)
- [CVE-2012-2579](https://cve.now/CVE-2012-2579.md): Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitra (no CVSS)
- [CVE-2012-2580](https://cve.now/CVE-2012-2580.md): Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to in (no CVSS)
- [CVE-2012-2591](https://cve.now/CVE-2012-2591.md): Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitr (no CVSS)
- [CVE-2014-0007](https://cve.now/CVE-2014-0007.md): The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacter (no CVSS)
- [CVE-2014-3496](https://cve.now/CVE-2014-3496.md): cartridge\_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via she (no CVSS)
- [CVE-2014-4505](https://cve.now/CVE-2014-4505.md): Cross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject (no CVSS)
- [CVE-2014-4506](https://cve.now/CVE-2014-4506.md): Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remot (no CVSS)
- [CVE-2014-4507](https://cve.now/CVE-2014-4507.md): Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.