# CVEs published 2014-06-25

11 CVEs were published on June 25, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4030](https://cve.now/CVE-2014-4030.md): Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the aut (no CVSS)
- [CVE-2014-4643](https://cve.now/CVE-2014-4643.md): Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (appl (no CVSS)
- [CVE-2014-4644](https://cve.now/CVE-2014-4644.md): SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2014-4645](https://cve.now/CVE-2014-4645.md): Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2014-0206](https://cve.now/CVE-2014-0206.md): Array index error in the aio\_read\_events\_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive (no CVSS)
- [CVE-2014-2005](https://cve.now/CVE-2014-2005.md): Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements f (no CVSS)
- [CVE-2014-3299](https://cve.now/CVE-2014-3299.md): Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745. (no CVSS)
- [CVE-2014-3882](https://cve.now/CVE-2014-3882.md): Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack t (no CVSS)
- [CVE-2014-4348](https://cve.now/CVE-2014-4348.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary we (no CVSS)
- [CVE-2014-4349](https://cve.now/CVE-2014-4349.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated us (no CVSS)
- [CVE-2014-4617](https://cve.now/CVE-2014-4617.md): The do\_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.