# CVEs published 2014-07-10

21 CVEs were published on July 10, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4847](https://cve.now/CVE-2014-4847.md): Cross-site scripting (XSS) vulnerability in the Random Banner plugin 1.1.2.1 for WordPress allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2014-4848](https://cve.now/CVE-2014-4848.md): Cross-site scripting (XSS) vulnerability in the Blogstand Banner (blogstand-smart-banner) plugin 1.0 for WordPress allows remote attackers t (no CVSS)
- [CVE-2014-4849](https://cve.now/CVE-2014-4849.md): Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2014-4850](https://cve.now/CVE-2014-4850.md): SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter. (no CVSS)
- [CVE-2014-4851](https://cve.now/CVE-2014-4851.md): Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attac (no CVSS)
- [CVE-2014-4852](https://cve.now/CVE-2014-4852.md): SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2014-4853](https://cve.now/CVE-2014-4853.md): Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary (no CVSS)
- [CVE-2014-4854](https://cve.now/CVE-2014-4854.md): Cross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2014-4855](https://cve.now/CVE-2014-4855.md): Cross-site scripting (XSS) vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2014-4856](https://cve.now/CVE-2014-4856.md): Cross-site scripting (XSS) vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inje (no CVSS)
- [CVE-2014-4845](https://cve.now/CVE-2014-4845.md): Cross-site scripting (XSS) vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-4846](https://cve.now/CVE-2014-4846.md): Cross-site scripting (XSS) vulnerability in the Meta Slider (ml-slider) plugin 2.5 for WordPress allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2014-2963](https://cve.now/CVE-2014-2963.md): Multiple cross-site scripting (XSS) vulnerabilities in group/control\_panel/manage in Liferay Portal 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE all (no CVSS)
- [CVE-2014-3310](https://cve.now/CVE-2014-3310.md): The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested (no CVSS)
- [CVE-2014-3311](https://cve.now/CVE-2014-3311.md): Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allo (no CVSS)
- [CVE-2014-3315](https://cve.now/CVE-2014-3315.md): Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communication (no CVSS)
- [CVE-2014-3316](https://cve.now/CVE-2014-3316.md): The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated user (no CVSS)
- [CVE-2014-3318](https://cve.now/CVE-2014-3318.md): Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications M (no CVSS)
- [CVE-2014-3888](https://cve.now/CVE-2014-3888.md): Stack-based buffer overflow in BKFSim\_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earli (no CVSS)
- [CVE-2014-4670](https://cve.now/CVE-2014-4670.md): Use-after-free vulnerability in ext/spl/spl\_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause (no CVSS)
- [CVE-2014-4698](https://cve.now/CVE-2014-4698.md): Use-after-free vulnerability in ext/spl/spl\_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-07-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.