# CVEs published 2014-06-28

12 CVEs were published on June 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-2612](https://cve.now/CVE-2014-2612.md): Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p (no CVSS)
- [CVE-2014-2613](https://cve.now/CVE-2014-2613.md): Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p (no CVSS)
- [CVE-2014-4648](https://cve.now/CVE-2014-4648.md): Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure." (no CVSS)
- [CVE-2014-4649](https://cve.now/CVE-2014-4649.md): SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrato (no CVSS)
- [CVE-2014-4669](https://cve.now/CVE-2014-4669.md): HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity decl (no CVSS)
- [CVE-2013-6308](https://cve.now/CVE-2013-6308.md): IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an uns (no CVSS)
- [CVE-2013-6309](https://cve.now/CVE-2013-6309.md): IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, o (no CVSS)
- [CVE-2013-6310](https://cve.now/CVE-2013-6310.md): Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web (no CVSS)
- [CVE-2013-6311](https://cve.now/CVE-2013-6311.md): SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via (no CVSS)
- [CVE-2014-0891](https://cve.now/CVE-2014-0891.md): IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.2 allows remote attackers to obta (no CVSS)
- [CVE-2014-2006](https://cve.now/CVE-2014-2006.md): Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-3881](https://cve.now/CVE-2014-3881.md): Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.